Advertisement
| 10.06.2008 at 11:12AM PDT, ID: 23791338 | Points: 500 |
|
[x]
Attachment Details
|
||
1: 2: 3: 4: 5: 6: 7: 8: 9: 10: 11: 12: 13: 14: 15: 16: 17: 18: 19: 20: 21: 22: 23: 24: 25: 26: 27: 28: 29: 30: 31: 32: 33: 34: 35: 36: 37: 38: 39: 40: 41: 42: 43: 44: 45: 46: 47: 48: 49: 50: 51: 52: 53: 54: 55: 56: 57: 58: 59: 60: 61: 62: 63: 64: 65: 66: 67: 68: 69: 70: 71: 72: 73: 74: 75: 76: 77: 78: 79: 80: 81: 82: 83: 84: 85: 86: 87: 88: 89: 90: 91: 92: 93: 94: 95: 96: 97: 98: 99: 100: 101: 102: 103: 104: 105: 106: 107: 108: 109: 110: 111: 112: 113: 114: 115: 116: 117: 118: 119: 120: 121: 122: 123: 124: 125: 126: 127: 128: 129: 130: 131: 132: 133: 134: 135: 136: 137: 138: 139: 140: 141: 142: 143: 144: 145: 146: 147: 148: 149: 150: 151: 152: 153: 154: 155: 156: 157: 158: 159: 160: 161: 162: 163: 164: 165: 166: 167: 168: 169: 170: 171: 172: 173: 174: 175: 176: 177: 178: 179: 180: 181: 182: 183: 184: 185: 186: 187: 188: 189: 190: 191: 192: 193: 194: 195: 196: 197: 198: 199: 200: 201: 202: 203: 204: 205: 206: 207: 208: 209: 210: 211: 212: 213: 214: 215: 216: 217: 218: 219: 220: 221: 222: 223: 224: 225: 226: 227: 228: 229: 230: 231: 232: 233: 234: 235: 236: 237: 238: 239: 240: 241: 242: 243: 244: 245: 246: 247: 248: 249: 250: 251: 252: 253: 254: 255: 256: 257: 258: 259: 260: 261: 262: 263: 264: 265: 266: 267: 268: 269: 270: 271: 272: 273: 274: 275: 276: 277: 278: 279: 280: 281: 282: 283: 284: 285: 286: 287: 288: 289: 290: 291: 292: 293: 294: 295: 296: 297: 298: 299: 300: 301: 302: 303: 304: 305: 306: 307: 308: 309: 310: 311: 312: 313: 314: 315: 316: 317: 318: 319: 320: 321: 322: 323: 324: 325: 326: 327: 328: 329: 330: 331: 332: 333: 334: 335: 336: 337: 338: 339: 340: 341: 342: 343: 344: 345: 346: 347: 348: 349: 350: 351: 352: 353: 354: 355: 356: 357: 358: 359: 360: 361: 362: 363: 364: 365: 366: 367: 368: 369: 370: 371: 372: 373: 374: 375: 376: 377: 378: 379: 380: 381: 382: 383: 384: 385: 386: 387: 388: 389: 390: 391: 392: 393: 394: 395: 396: 397: 398: 399: 400: 401: 402: 403: 404: 405: 406: 407: 408: 409: 410: 411: 412: 413: 414: 415: 416: 417: 418: 419: 420: 421: 422: 423: 424: 425: 426: 427: 428: 429: 430: 431: 432: 433: 434: 435: 436: 437: 438: 439: 440: 441: 442: 443: 444: 445: 446: 447: 448: 449: 450: 451: 452: 453: 454: 455: 456: 457: 458: 459: 460: 461: 462: 463: 464: 465: 466: 467: 468: 469: 470: 471: 472: 473: 474: 475: 476: 477: |
:
ASA Version 8.0(3)
!
hostname XYZABC
domain-name AAA
enable password X1ukmNQg/PUDAkLR encrypted
names
!
interface GigabitEthernet0/0
nameif outside
security-level 0
ip address xx.xxx.xx.93 255.255.255.240
!
interface GigabitEthernet0/1
shutdown
no nameif
no security-level
no ip address
!
interface GigabitEthernet0/2
nameif inside
security-level 100
ip address 10.0.0.1 255.255.255.240
!
interface GigabitEthernet0/2.110
description Main Office Interface
vlan 11
nameif Main
security-level 100
ip address 10.6.0.3 255.255.255.224
!
interface GigabitEthernet0/2.120
description CW Interface
vlan 12
nameif CW
security-level 100
ip address 10.6.0.35 255.255.255.240
!
interface GigabitEthernet0/2.130
description HN Interface
vlan 13
nameif HN
security-level 100
ip address 10.6.1.3 255.255.255.248
!
interface GigabitEthernet0/2.140
description TMDE Interface
vlan 14
nameif TMDE
security-level 100
ip address 10.6.3.3 255.255.255.240
!
interface GigabitEthernet0/2.200
description Standard Interface
vlan 2
nameif Standard
security-level 100
ip address 10.1.0.3 255.255.128.0
!
interface GigabitEthernet0/2.300
description VOIP Interface
vlan 3
nameif VOIP
security-level 100
ip address 10.4.0.3 255.255.128.0
!
interface GigabitEthernet0/2.500
description Corporate Interface
vlan 5
nameif Corporate
security-level 100
ip address 10.3.0.3 255.255.240.0
!
interface GigabitEthernet0/2.600
description Equipment Interface
vlan 6
nameif Equipment
security-level 100
ip address 10.5.0.3 255.255.252.0
!
interface GigabitEthernet0/2.700
description Staff Interface
vlan 7
nameif Staff
security-level 100
ip address 10.6.2.3 255.255.255.192
!
interface GigabitEthernet0/3
description DMZ Interface
nameif DMZ
security-level 40
ip address 10.10.10.1 255.255.255.240
!
interface Management0/0
nameif MGT
security-level 100
ip address 172.16.0.1 255.255.255.240
management-only
!
passwd 0jESGTKLXB.nb7sY encrypted
ftp mode passive
dns server-group DefaultDNS
domain-name aaa
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
access-list inside_nat_outbound extended permit ip host 10.0.0.9 10.10.10.0 255.255.255.240
pager lines 24
logging enable
logging asdm informational
mtu MGT 1500
mtu inside 1500
mtu outside 1500
mtu DMZ 1500
mtu Standard 1500
mtu VOIP 1500
mtu Corporate 1500
mtu Equipment 1500
mtu Staff 1500
mtu Main 1500
mtu CW 1500
mtu HN 1500
mtu TMDE 1500
no failover
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-603.bin
no asdm history enable
arp timeout 14400
nat-control
global (outside) 101 77.246.72.87 netmask 255.0.0.0
global (outside) 101 77.246.72.88 netmask 255.0.0.0
global (outside) 101 77.246.72.85 netmask 255.0.0.0
global (outside) 101 77.246.72.86 netmask 255.0.0.0
global (outside) 101 77.246.72.89 netmask 255.0.0.0
global (DMZ) 202 10.10.10.9-10.10.10.11 netmask 255.0.0.0
nat (inside) 202 access-list inside_nat_outbound
nat (inside) 101 10.6.1.0 255.255.255.248
nat (inside) 101 10.6.0.32 255.255.255.240
nat (inside) 101 10.6.3.0 255.255.255.240
nat (inside) 101 10.6.0.0 255.255.255.224
nat (inside) 101 10.6.2.0 255.255.255.192
nat (inside) 101 10.5.0.0 255.255.252.0
nat (inside) 101 10.3.0.0 255.255.240.0
nat (inside) 101 10.1.0.0 255.255.128.0
static (DMZ,outside) 77.246.72.90 10.10.10.6 netmask 255.255.255.255
static (DMZ,outside) 77.246.72.83 10.10.10.5 netmask 255.255.255.255
static (DMZ,outside) 77.246.72.84 10.10.10.3 netmask 255.255.255.255
route outside 0.0.0.0 0.0.0.0 77.246.72.81 1
route inside 10.1.0.0 255.255.128.0 10.0.0.2 1
route inside 10.3.0.0 255.255.240.0 10.0.0.2 1
route inside 10.5.0.0 255.255.252.0 10.0.0.2 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute
dynamic-access-policy-record DfltAccessPolicy
http server enable
http 10.10.10.9 255.255.255.255 DMZ
http 10.0.0.9 255.255.255.255 inside
http 172.16.0.0 255.255.255.248 MGT
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
no crypto isakmp nat-traversal
telnet 172.16.0.2 255.255.255.255 MGT
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd address 172.16.0.2-172.16.0.6 MGT
dhcpd dns 198.6.1.5 interface MGT
dhcpd enable MGT
!
threat-detection basic-threat
threat-detection statistics access-list
!
class-map inspection_default
match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
!
service-policy global_policy global
prompt hostname context
Cryptochecksum:9c577be224a2cb3c98f0e7ecd797436e
: end
xyzabc# sh xlate
3 in use, 2070 most used
Global XX.XXX.XX.90 Local 10.10.10.6
Global XX.XXX.XX.83 Local 10.10.10.5
Global XX.XXX.XX.84 Local 10.10.10.3
xyzabc# sh xlate
11 in use, 2070 most used
Global XXX.XXX.XX.90 Local 10.10.10.6
Global XX.XXX.XX.83 Local 10.10.10.5
Global XX.XXX.XX.84 Local 10.10.10.3
PAT Global XXX.XXX.XX.87(1063) Local 10.1.0.9(3552)
PAT Global XXX.XXX.XX.87(1059) Local 10.1.0.9(58957)
PAT Global XXX.XXX.XX.87(1062) Local 10.1.0.9(3551)
PAT Global XXX.XXX.XX.87(1058) Local 10.1.0.9(57605)
PAT Global XXX.XXX.XX.87(1061) Local 10.1.0.9(3550)
PAT Global XXX.XXX.XX.87(1057) Local 10.1.0.9(54839)
PAT Global XXX.XXX.XX.87(1060) Local 10.1.0.9(3549)
PAT Global XXX.XXX.XX.87(1056) Local 10.1.0.9(49867)
xyzabc# sh route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is XX.XXX.XX.81 to network 0.0.0.0
C 172.16.0.0 255.255.255.240 is directly connected, MGT
C XX.XXX.XX.80 255.255.255.240 is directly connected, outside
C 10.3.0.0 255.255.240.0 is directly connected, Corporate
C 10.0.0.0 255.255.255.240 is directly connected, inside
C 10.10.10.0 255.255.255.240 is directly connected, DMZ
C 10.1.0.0 255.255.128.0 is directly connected, Standard
C 10.6.0.0 255.255.255.224 is directly connected, Main
C 10.6.1.0 255.255.255.248 is directly connected, HN
C 10.6.2.0 255.255.255.192 is directly connected, Staff
C 10.4.0.0 255.255.128.0 is directly connected, VOIP
C 10.6.3.0 255.255.255.240 is directly connected, TMDE
C 10.5.0.0 255.255.252.0 is directly connected, Equipment
C 10.6.0.32 255.255.255.240 is directly connected, CW
S* 0.0.0.0 0.0.0.0 [1/0] via 77.246.72.81, outside
xyzabc# sh conn
6 in use, 4255 most used
TCP out 75.65.216.108:6667 in 10.10.10.6:1225 idle 0:00:02 bytes 2284506 flags UIO
TCP out 74.125.95.102:80 in 10.1.0.9:3552 idle 0:00:03 bytes 762 flags UFRIO
TCP out 207.46.192.254:80 in 10.1.0.9:3549 idle 0:00:35 bytes 1582 flags UIO
WISP-ASA# sh perfmon
PERFMON STATS: Current Average
Xlates 0/s 0/s
Connections 0/s 0/s
TCP Conns 0/s 0/s
UDP Conns 0/s 0/s
URL Access 0/s 0/s
URL Server Req 0/s 0/s
TCP Fixup 0/s 0/s
TCP Intercept 0/s 0/s
HTTP Fixup 0/s 0/s
FTP Fixup 0/s 0/s
AAA Authen 0/s 0/s
AAA Author 0/s 0/s
AAA Account 0/s 0/s
xyzabc# sh int
Interface GigabitEthernet0/0 "outside", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)
MAC address 001e.f762.9570, MTU 1500
IP address XX.XXX.XX.93, subnet mask 255.255.255.240
1881799 packets input, 1319211423 bytes, 0 no buffer
Received 23725 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 L2 decode drops
1181707 packets output, 177008162 bytes, 0 underruns
0 output errors, 0 collisions, 6 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops
input queue (curr/max packets): hardware (0/17) software (0/0)
output queue (curr/max packets): hardware (0/6) software (0/0)
Traffic Statistics for "outside":
18179 packets input, 9086736 bytes
11112 packets output, 813789 bytes
3433 packets dropped
1 minute input rate 0 pkts/sec, 231 bytes/sec
1 minute output rate 0 pkts/sec, 16 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 387 bytes/sec
5 minute output rate 0 pkts/sec, 36 bytes/sec
5 minute drop rate, 0 pkts/sec
Interface GigabitEthernet0/1 "", is administratively down, line protocol is down
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
Auto-Duplex, Auto-Speed
Available but not configured via nameif
MAC address 001e.f762.9571, MTU not set
IP address unassigned
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 L2 decode drops
0 packets output, 0 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops
input queue (curr/max packets): hardware (0/0) software (0/0)
output queue (curr/max packets): hardware (0/0) software (0/0)
Interface GigabitEthernet0/2 "inside", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
Auto-Duplex(Half-duplex), Auto-Speed(10 Mbps)
MAC address 001e.f762.9572, MTU 1500
IP address 10.0.0.1, subnet mask 255.255.255.240
1152565 packets input, 177452838 bytes, 0 no buffer
Received 49251 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 L2 decode drops
1645918 packets output, 1061022910 bytes, 7 underruns
0 output errors, 324 collisions, 10 interface resets
0 late collisions, 15 deferred
0 input reset drops, 0 output reset drops
input queue (curr/max packets): hardware (3/33) software (0/0)
output queue (curr/max packets): hardware (0/5) software (0/0)
Traffic Statistics for "inside":
5895 packets input, 639799 bytes
5611 packets output, 4809065 bytes
1093 packets dropped
1 minute input rate 0 pkts/sec, 4 bytes/sec
1 minute output rate 0 pkts/sec, 0 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 37 bytes/sec
5 minute output rate 0 pkts/sec, 245 bytes/sec
5 minute drop rate, 0 pkts/sec
Interface GigabitEthernet0/2.110 "Main", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
VLAN identifier 11
Description: Main Office Interface
MAC address 001e.f762.9572, MTU 1500
IP address 10.6.0.3, subnet mask 255.255.255.224
Traffic Statistics for "Main":
0 packets input, 0 bytes
0 packets output, 0 bytes
0 packets dropped
Interface GigabitEthernet0/2.120 "CW", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
VLAN identifier 12
Description: CW Interface
MAC address 001e.f762.9572, MTU 1500
IP address 10.6.0.35, subnet mask 255.255.255.240
Traffic Statistics for "CW":
0 packets input, 0 bytes
0 packets output, 0 bytes
0 packets dropped
Interface GigabitEthernet0/2.130 "HN", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
VLAN identifier 13
Description: HN Interface
MAC address 001e.f762.9572, MTU 1500
IP address 10.6.1.3, subnet mask 255.255.255.248
Traffic Statistics for "HN":
0 packets input, 0 bytes
0 packets output, 0 bytes
0 packets dropped
Interface GigabitEthernet0/2.140 "TMDE", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
VLAN identifier 14
Description: TMDE Interface
MAC address 001e.f762.9572, MTU 1500
IP address 10.6.3.3, subnet mask 255.255.255.240
Traffic Statistics for "TMDE":
0 packets input, 0 bytes
0 packets output, 0 bytes
0 packets dropped
Interface GigabitEthernet0/2.200 "Standard", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
VLAN identifier 2
Description: Standard Interface
MAC address 001e.f762.9572, MTU 1500
IP address 10.1.0.3, subnet mask 255.255.128.0
Traffic Statistics for "Standard":
0 packets input, 0 bytes
0 packets output, 0 bytes
0 packets dropped
Interface GigabitEthernet0/2.300 "VOIP", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
VLAN identifier 3
Description: VOIP Interface
MAC address 001e.f762.9572, MTU 1500
IP address 10.4.0.3, subnet mask 255.255.128.0
Traffic Statistics for "VOIP":
0 packets input, 0 bytes
0 packets output, 0 bytes
0 packets dropped
Interface GigabitEthernet0/2.500 "Corporate", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
VLAN identifier 5
Description: Corporate Interface
MAC address 001e.f762.9572, MTU 1500
IP address 10.3.0.3, subnet mask 255.255.240.0
Traffic Statistics for "Corporate":
1 packets input, 40 bytes
1 packets output, 40 bytes
1 packets dropped
Interface GigabitEthernet0/2.600 "Equipment", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
VLAN identifier 6
Description: Equipment Interface
MAC address 001e.f762.9572, MTU 1500
IP address 10.5.0.3, subnet mask 255.255.252.0
Traffic Statistics for "Equipment":
0 packets input, 0 bytes
0 packets output, 0 bytes
0 packets dropped
Interface GigabitEthernet0/2.700 "Staff", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
VLAN identifier 7
Description: Staff Interface
MAC address 001e.f762.9572, MTU 1500
IP address 10.6.2.3, subnet mask 255.255.255.192
Traffic Statistics for "Staff":
0 packets input, 0 bytes
0 packets output, 0 bytes
0 packets dropped
Interface GigabitEthernet0/3 "DMZ", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)
Description: DMZ Interface
MAC address 001e.f762.9573, MTU 1500
IP address 10.10.10.1, subnet mask 255.255.255.240
1116010 packets input, 79427748 bytes, 8440 no buffer
Received 7009 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 L2 decode drops
1081713 packets output, 179228376 bytes, 4639 underruns
0 output errors, 0 collisions, 5 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops
input queue (curr/max packets): hardware (1/33) software (0/0)
output queue (curr/max packets): hardware (0/3) software (0/0)
Traffic Statistics for "DMZ":
6794 packets input, 1070221 bytes
9756 packets output, 3530205 bytes
729 packets dropped
1 minute input rate 0 pkts/sec, 10 bytes/sec
1 minute output rate 0 pkts/sec, 131 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 7 bytes/sec
5 minute output rate 0 pkts/sec, 96 bytes/sec
5 minute drop rate, 0 pkts/sec
Interface Management0/0 "MGT", is up, line protocol is up
Hardware is i82557, BW 100 Mbps, DLY 100 usec
Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps)
MAC address 001e.f762.956f, MTU 1500
IP address 172.16.0.1, subnet mask 255.255.255.240
69436 packets input, 4754010 bytes, 0 no buffer
Received 1777 broadcasts, 0 runts, 0 giants
23 input errors, 0 CRC, 0 frame, 23 overrun, 0 ignored, 0 abort
0 L2 decode drops
60385 packets output, 21204383 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collisions, 0 deferred
0 lost carrier, 0 no carrier
input queue (curr/max packets): hardware (0/1) software (103/187)
output queue (curr/max packets): hardware (128/128) software (5848/5848)
Traffic Statistics for "MGT":
69196 packets input, 3441005 bytes
66244 packets output, 20346909 bytes
11197 packets dropped
1 minute input rate 82 pkts/sec, 3327 bytes/sec
1 minute output rate 91 pkts/sec, 4386 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 4 pkts/sec, 214 bytes/sec
5 minute output rate 3 pkts/sec, 862 bytes/sec
5 minute drop rate, 0 pkts/sec
Management-only interface. Blocked 5390 through-the-device packets
|
Advertisement