- !RANCID-CONTENT-TYPE: cisco
- !
- !Chassis type: PIX-515E - a PIX
- !CPU: Pentium II 433 MHz
- !
- !Memory: 32 MB RAM
- !This PIX has a Restricted (R) license.
- !Serial Number: 806262753 (0x300e97e1)
- !
- !
- !
- !Image: Compiled: on Thu 04-Aug-05 21:40 by morlee
- !
- !
- !
- !Flash: flash file system: version:3 magic:0x12345679
- !Flash: file 0: origin: 0 length:1978424
- !Flash: file 1: origin: 2097152 length:7359
- !Flash: file 2: origin: 2228224 length:1923
- !Flash: file 3: origin: 2621440 length:3152452
- !Flash: file 4: origin: 0 length:0
- !Flash: file 5: origin:16646144 length:308
- !
- !
- : Saved
- :
- PIX Version 6.3(5)
- interface ethernet0 auto
- interface ethernet1 auto
- interface ethernet2 auto
- nameif ethernet0 outside security0
- nameif ethernet1 inside security100
- nameif ethernet2 dmz security50
- enable password XXX encrypted
- passwd XXX encrypted
- hostname XXX
- domain-name XXX
- clock timezone PST -8
- clock summer-time PDT recurring 2 Sun Mar 2:00 1 Sun Nov 2:00
- fixup protocol dns maximum-length 512
- fixup protocol ftp 21
- fixup protocol h323 h225 1720
- fixup protocol h323 ras 1718-1719
- fixup protocol http 80
- fixup protocol ils 389
- fixup protocol rsh 514
- fixup protocol rtsp 554
- fixup protocol sip 5060
- fixup protocol sip udp 5060
- fixup protocol skinny 2000
- fixup protocol smtp 25
- fixup protocol sqlnet 1521
- fixup protocol tftp 69
- names
- access-list acl_in permit ip host 10.1.1.30 any
- access-list acl_in permit icmp any any
- access-list acl_in permit ip any any
- access-list acl_out permit ip any host 192.168.1.2
- access-list VPN-acl permit ip 10.1.0.0 255.255.0.0 192.168.255.0 255.255.255.0
- access-list L2L-VPN-acl permit ip host 192.168.1.2 any
- pager lines 50
- mtu outside 1500
- mtu inside 1500
- mtu dmz 1500
- ip address outside 192.168.1.1 255.255.255.0
- ip address inside 10.1.1.1 255.255.255.0
- ip audit info action alarm
- ip audit attack action alarm
- pdm history enable
- arp timeout 14400
- global (outside) 1 interface
- nat (inside) 0 access-list VPN-acl
- nat (inside) 1 0.0.0.0 0.0.0.0 0 0
- static (inside,outside) 192.168.1.2 10.1.1.30 netmask 255.255.255.255 0 0
- access-group acl_out in interface outside
- access-group acl_in in interface inside
- access-group acl_dmz in interface dmz
- rip inside passive version 2
- rip inside default version 2
- route outside 0.0.0.0 0.0.0.0 192.168.1.250
- timeout xlate 3:00:00
- timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
- timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
- timeout sip-disconnect 0:02:00 sip-invite 0:03:00
- timeout uauth 0:05:00 absolute
- aaa-server TACACS+ protocol tacacs+
- aaa-server TACACS+ max-failed-attempts 3
- aaa-server TACACS+ deadtime 10
- aaa-server RADIUS protocol radius
- aaa-server RADIUS max-failed-attempts 3
- aaa-server RADIUS deadtime 10
- aaa-server LOCAL protocol local
- no snmp-server location
- no snmp-server contact
- snmp-server community public
- no snmp-server enable traps
- floodguard enable
- sysopt connection permit-ipsec
- telnet timeout 5
- ssh timeout 15
- management-access inside
- terminal width 80
- : end