Guest User

Untitled

a guest
Aug 21st, 2021
26
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. ------------------------
  2. en
  3. sanfran
  4. conf t
  5. no dhcpd address 192.168.1.5-192.168.1.36 inside // hapus ip address
  6. int vlan 1
  7. nameif inside
  8. ip address 192.168.3.129 255.255.255.128 // 1%
  9. security-level 100
  10. no shut
  11. exit
  12. int vlan 2
  13. nameif outside
  14. ip address 203.0.113.33 255.255.255.248
  15. security-level 0
  16. no shut
  17. exit
  18. int vlan 3 // 1%
  19. no forward interface vlan 1
  20. nameif dmz // 1%
  21. ip address 192.168.3.2 255.255.255.252
  22. security-level 50 // 1%
  23. no shut
  24. exit
  25. int eth 0/2
  26. switchport access vlan 3
  27. no shut
  28. exit
  29. ------------------------ Completion 4%
  30.  
  31. route outside 0.0.0.0 0.0.0.0 203.0.113.38
  32. dhcpd address 192.168.3.130-192.168.3.161 inside 2%
  33. dhcpd dns 203.0.113.1 interface inside 1%
  34. dhcpd enable inside
  35.  
  36. ------------------------ Completion 7%
  37.  
  38. object network inside-net
  39. subnet 192.168.3.0 255.255.255.128
  40. nat (inside,outside) dynamic interface 1%
  41.  
  42. ------------------------ Completion 8%
  43.  
  44. class-map inspection_default
  45. match default-inspection-traffic
  46. policy-map global_policy 1%
  47. class inspection_default 1%
  48. inspect icmp 1%
  49. inspect http
  50. inspect dns
  51. service-policy global_policy global
  52.  
  53. ------------------------- Completion 10%
  54.  
  55. object network dmz-server
  56. host 192.168.3.1 1%
  57. nat (dmz,outside) static 203.0.113.34 1% // udah bener
  58.  
  59. ------------------------- Completion 12%
  60.  
  61. access-list OUTSIDE-DMZ extended permit icmp any host 192.168.3.1 echo-reply
  62. access-list OUTSIDE-DMZ extended permit tcp any host 192.168.3.1
  63. access-group OUTSIDE-DMZ in interface outside // udah bener
  64.  
RAW Paste Data