Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- !
- version 12.4
- !
- hostname Router
- !
- !
- ipv6 unicast-routing
- no ipv6 source-route
- !
- !
- !
- interface Tunnel0
- description Hurricane Electric IPv6 Tunnel Broker
- no ip address
- ipv6 address 2001:470:A:AAA::2/64
- ipv6 enable
- ipv6 traffic-filter internet_inbound_ipv6 in
- ipv6 traffic-filter internet_outbound_ipv6 out
- tunnel source FastEthernet0/0
- tunnel destination 209.51.161.58
- tunnel mode ipv6ip
- !
- interface FastEthernet0/0
- ip address dhcp
- duplex auto
- speed auto
- ipv6 traffic-filter internet_inbound_ipv6 in
- ipv6 traffic-filter internet_outbound_ipv6 out
- !
- !
- interface FastEthernet0/1
- no ip address
- duplex auto
- speed auto
- ipv6 address 2001:470:B:BBB::2/64
- ipv6 enable
- !
- !
- ip forward-protocol nd
- !
- !
- !
- ipv6 route ::/0 Tunnel0
- !
- !
- ipv6 access-list internet_inbound_ipv6
- remark Permit IPv6 Link-Local & Multicast
- permit ipv6 FE00::/7 any
- remark Block IPv6 Bogons
- deny ipv6 ::/3 any
- deny ipv6 4000::/2 any
- deny ipv6 8000::/1 any
- remark Block own assigned IPv6 space
- deny ipv6 2001:470:A:AAA::/64 ::/64
- remark Block anything going to Windows RPC
- deny tcp any any eq 135
- permit icmp any any
- deny ipv6 2001:470:A:AAA::/64 any
- deny ipv6 2001:470:B:BBB::/64 any
- !
- ipv6 access-list internet_outbound_ipv6
- remark Prohibit any contact with Windows RPC-NetBIOS
- deny tcp any any eq 135
- deny tcp any any eq 137
- deny tcp any any eq 138
- deny tcp any any eq 139
- deny udp any any eq 135
- deny udp any any eq netbios-ns
- deny udp any any eq netbios-dgm
- deny udp any any eq netbios-ss
- remark Allow traffic from own assigned IP space
- permit ipv6 2001:470:A:AAA::/64 ::/64
- permit ipv6 2001:470:B:BBB::/64 ::/64
- !
- !
- end
- Ethernet adapter Local Area Connection:
- Connection-specific DNS Suffix . :
- IPv6 Address. . . . . . . . . . . : 2001:470:B:BBB:5892:36b:2db9:62ff
- Temporary IPv6 Address. . . . . . : 2001:470:B:BBB:c1e5:1cf3:bd0f:fd1e
- Link-local IPv6 Address . . . . . : fe80::5892:36b:2db9:62ff%11
- Default Gateway . . . . . . . . . : fe80::20e:d7ff:fe80:2d41%11
- Tunnel adapter Teredo Tunneling Pseudo-Interface:
- Connection-specific DNS Suffix . :
- IPv6 Address. . . . . . . . . . . : 2001:0:4137:9e76:80:1c54:3f57:fd16
- Link-local IPv6 Address . . . . . : fe80::80:1c54:3f57:fd16%18
- Default Gateway . . . . . . . . . :
- C:\Users\Dex>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement