Advertisement
Guest User

ebusinessbpo.com /Azpired Cisco ASA Running Config

a guest
Oct 6th, 2015
167
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 47.75 KB | None | 0 0
  1. aut-num: AS59366
  2. as-name: EBUSINESSBPOINC-AS-AP
  3. descr: eBusinessBPO Inc.
  4. country: PH
  5. admin-c: EIA3-AP
  6. tech-c: EIA3-AP
  7. mnt-by: MAINT-EBUSINESSBPOINC-PH
  8. mnt-irt: IRT-EBUSINESSBPOINC-PH
  9. mnt-routes: MAINT-EBUSINESSBPOINC-PH
  10. changed: it@ebusinessbpo.com 20140520
  11. source: APNIC
  12.  
  13. W A R N I N G
  14. -------------------
  15. RESTRICTED RIGHTS LEGEND
  16.  
  17. Access to eBusinessBPO Inc. System is restricted to those
  18. individuals with specific Permissions. If you are not an
  19. authorized user, Disconnect now. Any attempts to gain
  20. unauthorized access will be prosecuted to the fullest
  21. extent of the law.
  22.  
  23.  
  24. This is CBASA1 Device, Please take a backup before do any changes.
  25. Thank you,
  26.  
  27.  
  28. :
  29. ASA Version 9.1(2)
  30. !
  31. hostname cbasa2
  32. domain-name ebusinessbpo.com
  33. names
  34. !
  35. interface GigabitEthernet0/0
  36. nameif VLAN
  37. security-level 100
  38. no ip address
  39. !
  40. interface GigabitEthernet0/0.3
  41. vlan 3
  42. nameif DATA1
  43. security-level 100
  44. ip address 192.168.3.1 255.255.255.0 standby 192.168.3.2
  45. !
  46. interface GigabitEthernet0/0.4
  47. shutdown
  48. vlan 4
  49. nameif PCIVoip
  50. security-level 100
  51. ip address 192.168.4.1 255.255.255.0 standby 192.168.4.2
  52. !
  53. interface GigabitEthernet0/0.5
  54. shutdown
  55. vlan 5
  56. nameif VPNPCI_LA
  57. security-level 100
  58. ip address 172.18.120.1 255.255.255.0 standby 172.18.120.2
  59. !
  60. interface GigabitEthernet0/0.9
  61. vlan 9
  62. nameif SGVLan
  63. security-level 100
  64. ip address 192.168.9.1 255.255.255.0 standby 192.168.9.2
  65. !
  66. interface GigabitEthernet0/0.14
  67. vlan 14
  68. nameif TrainingRoom
  69. security-level 100
  70. ip address 192.168.14.1 255.255.255.0 standby 192.168.14.2
  71. !
  72. interface GigabitEthernet0/0.15
  73. shutdown
  74. vlan 15
  75. nameif VFServer
  76. security-level 100
  77. ip address 10.170.36.3 255.255.255.0 standby 10.170.36.4
  78. !
  79. interface GigabitEthernet0/0.16
  80. shutdown
  81. vlan 16
  82. nameif VFAgents
  83. security-level 100
  84. ip address 10.170.37.3 255.255.255.0 standby 10.170.37.4
  85. !
  86. interface GigabitEthernet0/0.17
  87. shutdown
  88. vlan 17
  89. nameif VFAgents2
  90. security-level 100
  91. ip address 10.170.38.3 255.255.255.0 standby 10.170.38.4
  92. !
  93. interface GigabitEthernet0/0.18
  94. vlan 18
  95. nameif SixthFloor
  96. security-level 100
  97. ip address 192.168.20.1 255.255.255.0 standby 192.168.20.2
  98. !
  99. interface GigabitEthernet0/0.56
  100. vlan 56
  101. nameif R&D
  102. security-level 100
  103. ip address 192.168.0.1 255.255.255.0
  104. !
  105. interface GigabitEthernet0/0.57
  106. vlan 57
  107. nameif WireLess
  108. security-level 100
  109. ip address 192.168.12.1 255.255.255.0 standby 192.168.12.2
  110. !
  111. interface GigabitEthernet0/1
  112. nameif WAN
  113. security-level 0
  114. ip address 103.231.134.10 255.255.255.0 standby 103.231.134.11
  115. !
  116. interface GigabitEthernet0/2
  117. nameif ASA
  118. security-level 0
  119. ip address 10.3.3.2 255.255.255.0 standby 10.3.3.102
  120. !
  121. interface GigabitEthernet0/3
  122. no nameif
  123. security-level 0
  124. no ip address
  125. !
  126. interface GigabitEthernet0/4
  127. shutdown
  128. no nameif
  129. security-level 0
  130. no ip address
  131. !
  132. interface GigabitEthernet0/5
  133. description LAN/STATE Failover Interface
  134. !
  135. interface Management0/0
  136. management-only
  137. nameif management
  138. security-level 100
  139. ip address 10.50.50.1 255.255.255.0
  140. !
  141. banner login -------------------
  142. banner login W A R N I N G
  143. banner login -------------------
  144. banner login RESTRICTED RIGHTS LEGEND
  145. banner login
  146. banner login Access to eBusinessBPO Inc. System is restricted to those
  147. banner login individuals with specific Permissions. If you are not an
  148. banner login authorized user, Disconnect now. Any attempts to gain
  149. banner login unauthorized access will be prosecuted to the fullest
  150. banner login extent of the law.
  151. banner motd This is CBASA1 Device, Please take a backup before do any changes.
  152. banner motd Thank you,
  153. banner motd
  154. banner motd -Raj
  155. banner asdm -------------------
  156. banner asdm W A R N I N G
  157. banner asdm -------------------
  158. banner asdm RESTRICTED RIGHTS LEGEND
  159. banner asdm
  160. banner asdm Access to eBusinessBPO Inc. System is restricted to those
  161. banner asdm individuals with specific Permissions. If you are not an
  162. banner asdm authorized user, Disconnect now. Any attempts to gain
  163. banner asdm unauthorized access will be prosecuted to the fullest
  164. banner asdm extent of the law.
  165. ftp mode passive
  166. clock timezone PHST 8
  167. dns domain-lookup VLAN
  168. dns domain-lookup WAN
  169. dns server-group DefaultDNS
  170. name-server 8.8.8.8
  171. name-server 4.2.2.2
  172. domain-name ebusinessbpo.com
  173. same-security-traffic permit inter-interface
  174. same-security-traffic permit intra-interface
  175. object network EASTERN
  176. subnet 115.85.25.16 255.255.255.248
  177. object network GLOBE
  178. subnet 222.127.28.136 255.255.255.252
  179. object network LAN
  180. subnet 192.168.1.0 255.255.255.0
  181. object network PCIVoip
  182. subnet 192.168.4.0 255.255.255.0
  183. object network SERVER
  184. subnet 192.168.10.0 255.255.255.0
  185. object network SGVLan
  186. subnet 192.168.9.0 255.255.255.0
  187. object network ServVoip4
  188. subnet 172.18.4.0 255.255.255.0
  189. object network ServerVoip5
  190. subnet 172.18.5.0 255.255.255.0
  191. object network SixthFloor
  192. subnet 192.168.20.0 255.255.255.0
  193. object network TRCR
  194. subnet 192.168.8.0 255.255.255.0
  195. object network TrainingRoom
  196. subnet 192.168.14.0 255.255.255.0
  197. object network VFAgents
  198. subnet 10.170.37.0 255.255.255.0
  199. object network VFAgents2
  200. subnet 10.170.38.0 255.255.255.0
  201. object network VFServer
  202. subnet 10.170.36.0 255.255.255.0
  203. object network VOICE2
  204. subnet 192.168.6.0 255.255.255.0
  205. object network VPNPCI_LA
  206. subnet 172.18.120.0 255.255.255.0
  207. object network WireLess
  208. subnet 192.168.12.0 255.255.255.0
  209. object network YCabTaxi
  210. subnet 192.168.16.0 255.255.255.0
  211. object network Bell_SX
  212. subnet 10.10.75.0 255.255.255.0
  213. object network PCI_Server
  214. subnet 172.18.3.0 255.255.255.0
  215. object network PCI_Voice
  216. subnet 172.18.1.0 255.255.255.0
  217. object network SGVPN
  218. subnet 10.1.10.0 255.255.255.252
  219. object network Internet
  220. subnet 0.0.0.0 0.0.0.0
  221. object network WAN_GW
  222. host 112.199.114.1
  223. object network OBJ_ANY
  224. subnet 0.0.0.0 0.0.0.0
  225. object network PCI1
  226. subnet 172.18.1.0 255.255.255.0
  227. object network PCI3
  228. subnet 172.18.3.0 255.255.255.0
  229. object network PCI_GW
  230. host 192.168.250.5
  231. object network FL_VPN
  232. subnet 10.1.1.0 255.255.255.0
  233. object network NETWORK_OBJ_192.168.8.0_24
  234. subnet 192.168.8.0 255.255.255.0
  235. object network BBCom
  236. subnet 66.234.136.0 255.255.255.0
  237. object network SG_IPSec1
  238. subnet 10.1.10.0 255.255.255.252
  239. object network SG_IPSec2
  240. subnet 172.16.0.0 255.255.0.0
  241. object network TDMaan
  242. subnet 192.168.7.0 255.255.255.0
  243. object network Gateway1
  244. host 192.168.10.31
  245. object network Gateway3
  246. host 192.168.10.63
  247. object network Test
  248. host 192.168.7.155
  249. object network VF01
  250. subnet 192.30.91.0 255.255.255.0
  251. description VF01
  252. object network VF02
  253. subnet 192.30.209.0 255.255.255.0
  254. description VF02
  255. object network VF03
  256. subnet 10.170.0.0 255.255.0.0
  257. description VF03
  258. object network VF04
  259. subnet 10.70.33.0 255.255.255.0
  260. description VF04
  261. object network VF05
  262. subnet 10.0.4.0 255.255.255.0
  263. description VF05
  264. object network VF06
  265. host 152.178.39.7
  266. description VF06
  267. object network VF07
  268. subnet 10.64.0.0 255.255.0.0
  269. description VF07
  270. object network VF08
  271. subnet 10.70.0.0 255.255.0.0
  272. description VF08
  273. object network VF09
  274. subnet 10.71.0.0 255.255.0.0
  275. description VF09
  276. object network VF10
  277. host 65.118.49.147
  278. object network VF11
  279. host 152.178.55.39
  280. object network VF12
  281. host 152.178.31.7
  282. object network VF13
  283. host 152.178.47.71
  284. object network VF14
  285. host 216.220.36.75
  286. object network VF15
  287. host 129.33.160.116
  288. object network VF16
  289. subnet 10.55.212.0 255.255.255.0
  290. object network VF17
  291. host 192.30.100.75
  292. object network VF18
  293. host 192.30.100.94
  294. object network IPLC-G
  295. subnet 172.18.9.0 255.255.255.0
  296. object network IPLC-P
  297. subnet 172.18.8.0 255.255.255.0
  298. object network LA-BBCOM
  299. subnet 66.234.136.0 255.255.255.0
  300. object network LA-BBCOM2
  301. subnet 172.18.7.0 255.255.255.0
  302. object network LA-BBCOM3
  303. subnet 172.17.128.128 255.255.255.248
  304. object network VF19
  305. host 204.8.249.125
  306. object network VF20
  307. host 206.175.128.7
  308. object network VF21
  309. host 208.73.211.70
  310. object network VF22
  311. host 208.87.34.15
  312. object network VF23
  313. host 208.224.248.192
  314. object network VF_GW
  315. host 10.170.1.250
  316. description VF_Gateway
  317. object network LA-GW-G
  318. host 172.18.9.3
  319. description LA-GW-G
  320. object network LA-GW-P
  321. host 172.18.8.3
  322. description LA-GW-P
  323. object network BL-PR-VPN1
  324. subnet 10.20.75.0 255.255.255.0
  325. object network BL-PR-VPN2
  326. subnet 172.32.159.0 255.255.255.0
  327. object network BL-SC-VPN1
  328. subnet 10.10.75.0 255.255.255.0
  329. object network FAX
  330. host 192.168.10.202
  331. object network PCICDE
  332. subnet 172.18.10.0 255.255.255.0
  333. object network FL-MPLS
  334. host 63.158.130.153
  335. object network EBI-Full
  336. subnet 192.168.0.0 255.255.0.0
  337. description EBI-Full
  338. object network GW-EBI-PF
  339. host 10.2.2.2
  340. object network CAM411
  341. host 192.168.20.8
  342. object network PiraTel2
  343. subnet 67.159.184.0 255.255.255.0
  344. object network PiraTel1
  345. subnet 98.158.145.248 255.255.255.248
  346. object network PiraTel3
  347. subnet 98.158.146.192 255.255.255.248
  348. object network FL_CSWR
  349. host 192.168.10.60
  350. object network NETWORK_OBJ_172.18.5.0_24
  351. subnet 172.18.5.0 255.255.255.0
  352. object network ASA-GW
  353. host 10.3.3.1
  354. object network 5StareCAM
  355. host 192.168.3.10
  356. object network pbx
  357. host 192.168.10.3
  358. object network 411_Net
  359. subnet 24.120.201.32 255.255.255.224
  360. object network Taxi_VPN
  361. subnet 10.30.1.0 255.255.255.0
  362. object network NETWORK_OBJ_192.168.9.0_24
  363. subnet 192.168.9.0 255.255.255.0
  364. object network Taxi_VPN2
  365. host 192.168.168.35
  366. object network LuxorCab_VPN
  367. subnet 192.9.210.0 255.255.255.0
  368. object network Kelti-NAT
  369. host 192.9.210.235
  370. object network Luxor_VPN_NAT
  371. range 192.9.210.201 192.9.210.209
  372. object network obj-192.168.9.0
  373. subnet 192.168.9.0 255.255.255.0
  374. object network obj-192.9.210.0
  375. subnet 192.9.210.0 255.255.255.0
  376. object network LA-LAN
  377. subnet 172.18.6.0 255.255.255.0
  378. object network Memphis_VPN
  379. subnet 192.168.1.0 255.255.255.0
  380. object network retail_radio
  381. host 166.78.162.35
  382. object network Retail_radio_station
  383. range 192.168.9.30 192.168.9.34
  384. object-group network ALL_VLAN
  385. description ALL_VLAN
  386. network-object 172.18.120.0 255.255.255.0
  387. network-object 172.18.4.0 255.255.255.0
  388. network-object 172.18.5.0 255.255.255.0
  389. network-object 192.168.1.0 255.255.255.0
  390. network-object 192.168.10.0 255.255.255.0
  391. network-object 192.168.12.0 255.255.255.0
  392. network-object 192.168.14.0 255.255.255.0
  393. network-object 192.168.16.0 255.255.255.0
  394. network-object 192.168.2.0 255.255.255.0
  395. network-object 192.168.20.0 255.255.255.0
  396. network-object 192.168.3.0 255.255.255.0
  397. network-object 192.168.4.0 255.255.255.0
  398. network-object 192.168.6.0 255.255.255.0
  399. network-object 192.168.8.0 255.255.255.0
  400. network-object 192.168.9.0 255.255.255.0
  401. object-group service DM_INLINE_SERVICE_2
  402. service-object tcp destination eq 465
  403. service-object tcp destination eq smtp
  404. service-object tcp-udp destination eq domain
  405. object-group service DM_INLINE_SERVICE_5
  406. service-object tcp-udp destination eq www
  407. service-object tcp destination eq 465
  408. service-object tcp destination eq https
  409. service-object tcp destination eq smtp
  410. object-group service DM_INLINE_SERVICE_1
  411. service-object tcp-udp destination eq www
  412. service-object tcp destination eq 465
  413. service-object tcp destination eq www
  414. service-object tcp destination eq https
  415. service-object tcp destination eq smtp
  416. object-group service DM_INLINE_SERVICE_3
  417. service-object tcp-udp destination eq www
  418. service-object tcp destination eq 465
  419. service-object tcp destination eq https
  420. service-object tcp destination eq smtp
  421. object-group service DM_INLINE_SERVICE_4
  422. service-object tcp-udp destination eq www
  423. service-object tcp destination eq 465
  424. service-object tcp destination eq https
  425. service-object tcp destination eq smtp
  426. object-group network DM_INLINE_NETWORK_27
  427. network-object host 192.168.10.131
  428. network-object object pbx
  429. network-object host 192.168.10.90
  430. object-group service DM_INLINE_SERVICE_7
  431. service-object tcp-udp destination eq www
  432. service-object tcp destination eq 465
  433. service-object tcp destination eq https
  434. service-object tcp destination eq smtp
  435. object-group service DM_INLINE_SERVICE_10
  436. service-object tcp-udp destination eq www
  437. service-object tcp destination eq 465
  438. service-object tcp destination eq https
  439. service-object tcp destination eq smtp
  440. object-group service DM_INLINE_SERVICE_8
  441. service-object tcp-udp destination eq www
  442. service-object tcp destination eq 465
  443. service-object tcp destination eq https
  444. service-object tcp destination eq smtp
  445. object-group service DM_INLINE_SERVICE_9
  446. service-object tcp-udp destination eq www
  447. service-object tcp destination eq 465
  448. service-object tcp destination eq https
  449. service-object tcp destination eq smtp
  450. object-group service DM_INLINE_SERVICE_13
  451. service-object icmp
  452. service-object icmp echo-reply
  453. service-object icmp source-quench
  454. service-object icmp time-exceeded
  455. object-group service DM_INLINE_SERVICE_12
  456. service-object icmp
  457. service-object tcp destination eq www
  458. object-group service DM_INLINE_SERVICE_11
  459. service-object icmp
  460. service-object icmp echo-reply
  461. service-object icmp source-quench
  462. service-object icmp time-exceeded
  463. object-group network VF_NET
  464. description VF_NET
  465. network-object object VF01
  466. network-object object VF02
  467. network-object object VF03
  468. network-object object VF04
  469. network-object object VF05
  470. network-object object VF07
  471. network-object object VF08
  472. network-object object VF09
  473. network-object object VF10
  474. network-object object VF11
  475. network-object object VF12
  476. network-object object VF13
  477. network-object object VF14
  478. network-object object VF15
  479. network-object object VF16
  480. network-object object VF17
  481. network-object object VF18
  482. network-object object VF06
  483. object-group network DM_INLINE_NETWORK_2
  484. network-object 172.18.8.0 255.255.255.0
  485. network-object 172.18.9.0 255.255.255.0
  486. object-group network DM_INLINE_NETWORK_3
  487. network-object 172.18.8.0 255.255.255.0
  488. network-object 172.18.9.0 255.255.255.0
  489. object-group network DM_INLINE_NETWORK_4
  490. network-object 172.18.8.0 255.255.255.0
  491. network-object 172.18.9.0 255.255.255.0
  492. object-group network DM_INLINE_NETWORK_10
  493. network-object 172.18.8.0 255.255.255.0
  494. network-object 172.18.9.0 255.255.255.0
  495. object-group network DM_INLINE_NETWORK_11
  496. network-object 172.18.8.0 255.255.255.0
  497. network-object 172.18.9.0 255.255.255.0
  498. network-object host 192.168.10.239
  499. object-group network DM_INLINE_NETWORK_12
  500. network-object 172.18.8.0 255.255.255.0
  501. network-object 172.18.9.0 255.255.255.0
  502. object-group network DM_INLINE_NETWORK_13
  503. network-object 172.18.8.0 255.255.255.0
  504. network-object 172.18.9.0 255.255.255.0
  505. network-object 24.120.201.32 255.255.255.224
  506. network-object host 192.168.10.239
  507. object-group network DM_INLINE_NETWORK_14
  508. network-object 172.18.8.0 255.255.255.0
  509. network-object 172.18.9.0 255.255.255.0
  510. object-group network DM_INLINE_NETWORK_15
  511. network-object 172.18.8.0 255.255.255.0
  512. network-object 172.18.9.0 255.255.255.0
  513. object-group network DM_INLINE_NETWORK_5
  514. network-object 172.18.8.0 255.255.255.0
  515. network-object 172.18.9.0 255.255.255.0
  516. object-group network DM_INLINE_NETWORK_6
  517. network-object 172.18.8.0 255.255.255.0
  518. network-object 172.18.9.0 255.255.255.0
  519. object-group network DM_INLINE_NETWORK_7
  520. network-object 172.18.8.0 255.255.255.0
  521. network-object 172.18.9.0 255.255.255.0
  522. object-group network DM_INLINE_NETWORK_8
  523. network-object 172.18.8.0 255.255.255.0
  524. network-object 172.18.9.0 255.255.255.0
  525. network-object 24.120.201.32 255.255.255.224
  526. network-object host 192.168.10.239
  527. object-group network DM_INLINE_NETWORK_9
  528. network-object 172.18.8.0 255.255.255.0
  529. network-object 172.18.9.0 255.255.255.0
  530. object-group service DM_INLINE_TCP_2 tcp
  531. port-object eq 465
  532. port-object eq smtp
  533. object-group service DM_INLINE_TCP_3 tcp
  534. port-object eq 465
  535. port-object eq smtp
  536. object-group service DM_INLINE_TCP_4 tcp
  537. port-object eq 465
  538. port-object eq smtp
  539. object-group service DM_INLINE_TCP_5 tcp
  540. port-object eq 465
  541. port-object eq smtp
  542. object-group protocol TCPUDP
  543. protocol-object udp
  544. protocol-object tcp
  545. object-group network DM_INLINE_NETWORK_21
  546. network-object object FAX
  547. network-object object Gateway1
  548. network-object object Gateway3
  549. network-object object pbx
  550. object-group network DM_INLINE_NETWORK_22
  551. network-object object LA-BBCOM
  552. network-object object LA-BBCOM3
  553. network-object object PiraTel1
  554. network-object object PiraTel2
  555. network-object object PiraTel3
  556. object-group network DM_INLINE_NETWORK_23
  557. network-object object BL-PR-VPN1
  558. network-object object BL-PR-VPN2
  559. network-object object BL-SC-VPN1
  560. object-group service DM_INLINE_TCP_6 tcp
  561. port-object eq 465
  562. port-object eq smtp
  563. object-group network DM_INLINE_NETWORK_1
  564. network-object host 208.67.220.220
  565. network-object host 208.67.222.222
  566. object-group network DM_INLINE_NETWORK_16
  567. network-object object Taxi_VPN2
  568. network-object object Taxi_VPN
  569. object-group service DM_INLINE_TCP_1 tcp
  570. port-object eq 465
  571. port-object eq smtp
  572. object-group network DM_INLINE_NETWORK_17
  573. network-object object Taxi_VPN2
  574. network-object object Taxi_VPN
  575. object-group protocol DM_INLINE_PROTOCOL_1
  576. protocol-object ip
  577. protocol-object udp
  578. object-group protocol DM_INLINE_PROTOCOL_2
  579. protocol-object ip
  580. protocol-object udp
  581. object-group protocol DM_INLINE_PROTOCOL_3
  582. protocol-object ip
  583. protocol-object udp
  584. object-group protocol DM_INLINE_PROTOCOL_4
  585. protocol-object ip
  586. protocol-object udp
  587. object-group protocol DM_INLINE_PROTOCOL_5
  588. protocol-object ip
  589. protocol-object udp
  590. object-group protocol DM_INLINE_PROTOCOL_6
  591. protocol-object ip
  592. protocol-object udp
  593. object-group network DM_INLINE_NETWORK_18
  594. network-object host 107.150.53.202
  595. network-object object retail_radio
  596. object-group network DM_INLINE_NETWORK_19
  597. network-object host 107.150.53.202
  598. network-object object retail_radio
  599. object-group network DM_INLINE_NETWORK_20
  600. network-object host 107.150.53.202
  601. network-object object retail_radio
  602. object-group network DM_INLINE_NETWORK_24
  603. network-object host 107.150.53.202
  604. network-object object retail_radio
  605. object-group network DM_INLINE_NETWORK_25
  606. network-object host 107.150.53.202
  607. network-object object retail_radio
  608. object-group network DM_INLINE_NETWORK_26
  609. network-object 192.168.10.0 255.255.255.0
  610. network-object 192.168.14.0 255.255.255.0
  611. network-object 192.168.2.0 255.255.255.0
  612. network-object 192.168.3.0 255.255.255.0
  613. network-object 192.168.8.0 255.255.255.0
  614. network-object 192.168.9.0 255.255.255.0
  615. network-object object ServVoip4
  616. network-object object ServerVoip5
  617. object-group network DM_INLINE_NETWORK_28
  618. network-object 192.168.10.0 255.255.255.0
  619. network-object 192.168.8.0 255.255.255.0
  620. network-object object TDMaan
  621. access-list TRCR_access_in extended deny object-group DM_INLINE_SERVICE_7 any any inactive
  622. access-list TRCR_access_in extended permit ip any any
  623. access-list WAN_access_in remark ICMP type 11 for Windows Traceroute
  624. access-list WAN_access_in extended permit icmp any any time-exceeded
  625. access-list WAN_access_in remark ICMP type 3 for Cisco and Linux
  626. access-list WAN_access_in extended permit icmp any any unreachable
  627. access-list WAN_access_in extended permit ip any any
  628. access-list WAN_access_in_1 extended deny object-group DM_INLINE_PROTOCOL_1 any host 107.150.53.202
  629. access-list WAN_access_in_1 extended permit object-group TCPUDP any host 24.102.201.55
  630. access-list WAN_access_in_1 extended permit icmp any any unreachable
  631. access-list WAN_access_in_1 extended permit object-group DM_INLINE_SERVICE_11 any any
  632. access-list WAN_access_in_1 extended permit ip any any
  633. access-list WAN_access_in_1 extended permit object-group TCPUDP any object-group DM_INLINE_NETWORK_21 eq sip
  634. access-list VERIFONE_access_in extended permit ip any 192.168.1.0 255.255.255.0 inactive
  635. access-list VERIFONE_access_in extended deny ip any any
  636. access-list LAN_access_in extended permit tcp object Test any eq smtp inactive
  637. access-list LAN_access_in extended permit icmp any any time-exceeded
  638. access-list LAN_access_in extended permit icmp any any unreachable
  639. access-list LAN_access_in extended deny tcp any any eq smtp
  640. access-list LAN_access_in extended deny tcp any any eq 465
  641. access-list LAN_access_in extended permit ip any any
  642. access-list ADMIN_access_in extended deny ip any object-group DM_INLINE_NETWORK_14 inactive
  643. access-list ADMIN_access_in extended deny object-group DM_INLINE_SERVICE_1 any any inactive
  644. access-list ADMIN_access_in extended permit icmp any any time-exceeded
  645. access-list ADMIN_access_in extended permit icmp any any unreachable
  646. access-list ADMIN_access_in extended permit ip any any
  647. access-list DATA1_access_in extended deny object-group DM_INLINE_PROTOCOL_6 any object-group DM_INLINE_NETWORK_18
  648. access-list DATA1_access_in extended permit object-group TCPUDP any object-group DM_INLINE_NETWORK_1 eq domain
  649. access-list DATA1_access_in extended deny tcp any any object-group DM_INLINE_TCP_1
  650. access-list DATA1_access_in extended deny ip any object-group DM_INLINE_NETWORK_13
  651. access-list DATA1_access_in extended deny object-group DM_INLINE_SERVICE_4 any any inactive
  652. access-list DATA1_access_in extended permit ip any any
  653. access-list 10 standard permit host 24.102.201.55
  654. access-list YCabTaxi_access_in extended deny ip any object-group DM_INLINE_NETWORK_15 inactive
  655. access-list YCabTaxi_access_in extended deny object-group DM_INLINE_SERVICE_2 any any inactive
  656. access-list YCabTaxi_access_in extended permit ip any any
  657. access-list TrainingRoom_access_in extended permit ip any host 172.18.9.100
  658. access-list TrainingRoom_access_in extended deny object-group DM_INLINE_PROTOCOL_3 any object-group DM_INLINE_NETWORK_20
  659. access-list TrainingRoom_access_in extended deny tcp any any object-group DM_INLINE_TCP_4
  660. access-list TrainingRoom_access_in extended deny ip any object-group DM_INLINE_NETWORK_8
  661. access-list TrainingRoom_access_in extended deny object-group DM_INLINE_SERVICE_3 any any inactive
  662. access-list TrainingRoom_access_in extended permit ip any any
  663. access-list SGVLan_access_in extended permit ip object Retail_radio_station object retail_radio
  664. access-list SGVLan_access_in extended deny object-group DM_INLINE_PROTOCOL_5 any object-group DM_INLINE_NETWORK_25
  665. access-list SGVLan_access_in extended deny tcp any any object-group DM_INLINE_TCP_2
  666. access-list SGVLan_access_in extended deny ip any object-group DM_INLINE_NETWORK_11 inactive
  667. access-list SGVLan_access_in extended deny object-group DM_INLINE_SERVICE_5 any any inactive
  668. access-list SGVLan_access_in extended permit ip any any
  669. access-list SixthFloor_access_in extended permit ip any object-group DM_INLINE_NETWORK_27
  670. access-list SixthFloor_access_in extended deny ip any object-group DM_INLINE_NETWORK_26
  671. access-list SixthFloor_access_in extended deny object-group DM_INLINE_PROTOCOL_4 any object-group DM_INLINE_NETWORK_19
  672. access-list SixthFloor_access_in extended deny ip any host 192.168.10.239
  673. access-list SixthFloor_access_in extended permit ip any host 24.120.201.57
  674. access-list SixthFloor_access_in remark 411 Printer Allow for send email
  675. access-list SixthFloor_access_in extended permit tcp host 192.168.20.6 any object-group DM_INLINE_TCP_6
  676. access-list SixthFloor_access_in extended deny tcp any any object-group DM_INLINE_TCP_3
  677. access-list SixthFloor_access_in extended deny ip any object-group DM_INLINE_NETWORK_9
  678. access-list SixthFloor_access_in extended permit ip any any
  679. access-list VFAgents_access_in extended deny ip any object-group DM_INLINE_NETWORK_6
  680. access-list VFAgents_access_in extended deny object-group DM_INLINE_SERVICE_8 any any inactive
  681. access-list VFAgents_access_in extended permit ip any any
  682. access-list VOICE2_access_in extended deny object-group DM_INLINE_SERVICE_10 any any inactive
  683. access-list VOICE2_access_in extended permit ip any any
  684. access-list VFAgents2_access_in extended deny ip any object-group DM_INLINE_NETWORK_5
  685. access-list VFAgents2_access_in extended deny object-group DM_INLINE_SERVICE_9 any any inactive
  686. access-list VFAgents2_access_in extended permit ip any any
  687. access-list LAN_access_in_1 extended permit object-group DM_INLINE_SERVICE_12 any any
  688. access-list LAN_access_in_1 extended permit ip any any
  689. access-list ASA_access_in extended permit icmp any any unreachable
  690. access-list ASA_access_in extended permit object-group DM_INLINE_SERVICE_13 any any
  691. access-list ASA_access_in extended permit ip any any
  692. access-list SERVER_access_in extended permit ip any any
  693. access-list VERIFONE_access_in_1 extended deny ip any object-group DM_INLINE_NETWORK_7
  694. access-list VERIFONE_access_in_1 extended permit ip any any
  695. access-list X-Connect_access_in extended permit ip any any
  696. access-list WireLess_access_in extended deny ip any object-group DM_INLINE_NETWORK_28 inactive
  697. access-list WireLess_access_in extended deny object-group DM_INLINE_PROTOCOL_2 any object-group DM_INLINE_NETWORK_24
  698. access-list WireLess_access_in extended deny tcp any any object-group DM_INLINE_TCP_5
  699. access-list WireLess_access_in extended deny ip any object-group DM_INLINE_NETWORK_2 inactive
  700. access-list WireLess_access_in extended permit ip any any
  701. access-list VFServer_access_in extended deny ip any object-group DM_INLINE_NETWORK_4
  702. access-list VFServer_access_in extended permit ip any any
  703. access-list VPNPCI_LA_access_in extended deny ip any object-group DM_INLINE_NETWORK_3
  704. access-list VPNPCI_LA_access_in extended permit ip any any
  705. access-list PFROuters_access_in extended permit ip any any
  706. access-list ServVoip5_access_in extended deny ip any object-group DM_INLINE_NETWORK_10
  707. access-list ServVoip5_access_in extended permit ip any any
  708. access-list IPLC-P_access_in extended permit ip any any
  709. access-list IPLC-G_access_in extended permit ip any any
  710. access-list PCIVoip_access_in extended deny ip any object-group DM_INLINE_NETWORK_12
  711. access-list PCIVoip_access_in extended permit ip any any
  712. access-list EBI-PF_access_in extended permit ip any any
  713. access-list WAN_cryptomap extended permit ip 192.168.9.0 255.255.255.0 object-group DM_INLINE_NETWORK_16
  714. access-list WAN_cryptomap_1 extended permit ip 192.168.9.0 255.255.255.0 object LuxorCab_VPN
  715. access-list WAN_cryptomap_2 extended permit ip 192.168.9.0 255.255.255.0 object Memphis_VPN
  716. access-list WAN_cryptomap_3 extended permit ip object SGVLan object LuxorCab_VPN
  717. pager lines 24
  718. logging enable
  719. logging timestamp
  720. logging list sla-list message 622001
  721. logging list Email message 101001-101005
  722. logging list Email message 105001-105048
  723. logging list Email message 104001-104004
  724. logging list Email message 622001
  725. logging list Email message 103001-103007
  726. logging console debugging
  727. logging monitor emergencies
  728. logging trap critical
  729. logging asdm informational
  730. logging mail Email
  731. logging from-address cisco@ebusinessbpo.com
  732. logging recipient-address it@ebusinessbpo.com level alerts
  733. logging host ASA 192.168.10.160
  734. logging permit-hostdown
  735. no logging message 305012
  736. no logging message 305011
  737. no logging message 302015
  738. no logging message 302014
  739. no logging message 302013
  740. no logging message 302012
  741. no logging message 302016
  742. no logging message 302021
  743. no logging message 302020
  744. logging message 315011 level alerts
  745. logging message 621001 level alerts
  746. logging message 622001 level alerts
  747. logging message 606002 level alerts
  748. logging message 606001 level alerts
  749. logging message 775003 level alerts
  750. logging message 710001 level critical
  751. logging message 113015 level alerts
  752. logging message 611102 level alerts
  753. logging message 605004 level alerts
  754. logging message 302013 level critical
  755. mtu VLAN 1500
  756. mtu DATA1 1500
  757. mtu PCIVoip 1500
  758. mtu VPNPCI_LA 1500
  759. mtu SGVLan 1500
  760. mtu TrainingRoom 1500
  761. mtu VFServer 1500
  762. mtu VFAgents 1500
  763. mtu VFAgents2 1500
  764. mtu SixthFloor 1500
  765. mtu R&D 1500
  766. mtu WireLess 1500
  767. mtu WAN 1500
  768. mtu ASA 1500
  769. mtu management 1500
  770. failover
  771. failover lan unit secondary
  772. failover lan interface failover GigabitEthernet0/5
  773. failover key *****
  774. failover replication http
  775. failover link failover GigabitEthernet0/5
  776. failover interface ip failover 10.100.200.1 255.255.255.0 standby 10.100.200.2
  777. no monitor-interface VLAN
  778. no monitor-interface ASA
  779. no monitor-interface management
  780. icmp unreachable rate-limit 10 burst-size 5
  781. icmp permit any VLAN
  782. icmp permit any WAN
  783. asdm image disk0:/asdm-714.bin
  784. asdm history enable
  785. arp timeout 14400
  786. no arp permit-nonconnected
  787. nat (SGVLan,WAN) source static NETWORK_OBJ_192.168.9.0_24 NETWORK_OBJ_192.168.9.0_24 destination static DM_INLINE_NETWORK_17 DM_INLINE_NETWORK_17 no-proxy-arp route-lookup
  788. nat (SGVLan,WAN) source static SGVLan SGVLan destination static LuxorCab_VPN LuxorCab_VPN no-proxy-arp route-lookup
  789. nat (SGVLan,WAN) source static NETWORK_OBJ_192.168.9.0_24 NETWORK_OBJ_192.168.9.0_24 destination static LuxorCab_VPN LuxorCab_VPN no-proxy-arp route-lookup
  790. nat (SGVLan,WAN) source static NETWORK_OBJ_192.168.9.0_24 NETWORK_OBJ_192.168.9.0_24 destination static Memphis_VPN Memphis_VPN no-proxy-arp route-lookup
  791. !
  792. object network SixthFloor
  793. nat (SixthFloor,WAN) dynamic 103.231.134.110
  794. object network CAM411
  795. nat (SixthFloor,WAN) static 103.231.134.73
  796. object network 5StareCAM
  797. nat (DATA1,WAN) static 103.231.134.76
  798. !
  799. nat (any,WAN) after-auto source dynamic any interface
  800. access-group LAN_access_in in interface VLAN
  801. access-group DATA1_access_in in interface DATA1
  802. access-group PCIVoip_access_in in interface PCIVoip
  803. access-group VPNPCI_LA_access_in in interface VPNPCI_LA
  804. access-group SGVLan_access_in in interface SGVLan
  805. access-group TrainingRoom_access_in in interface TrainingRoom
  806. access-group VFServer_access_in in interface VFServer
  807. access-group VFAgents_access_in in interface VFAgents
  808. access-group VFAgents2_access_in in interface VFAgents2
  809. access-group SixthFloor_access_in in interface SixthFloor
  810. access-group YCabTaxi_access_in in interface R&D
  811. access-group WireLess_access_in in interface WireLess
  812. access-group WAN_access_in_1 in interface WAN
  813. access-group ASA_access_in in interface ASA
  814. route ASA 192.168.1.0 255.255.255.0 10.3.3.1 1 track 1
  815. route WAN 0.0.0.0 0.0.0.0 103.231.134.1 1
  816. route WAN 0.0.0.0 0.0.0.0 103.231.134.7 1
  817. route ASA 172.18.3.200 255.255.255.255 10.3.3.1 1
  818. route ASA 172.18.6.0 255.255.255.0 10.3.3.1 1
  819. route ASA 172.18.9.0 255.255.255.0 10.3.3.1 1
  820. route WAN 192.168.1.0 255.255.255.0 103.231.134.1 255
  821. route ASA 192.168.2.0 255.255.255.0 10.3.3.1 1
  822. route ASA 192.168.6.0 255.255.255.0 10.3.3.1 1
  823. route ASA 192.168.7.0 255.255.255.0 10.3.3.1 1
  824. route ASA 192.168.8.0 255.255.255.0 10.3.3.1 1
  825. route ASA 192.168.10.0 255.255.255.0 10.3.3.1 1
  826. timeout xlate 3:00:00
  827. timeout pat-xlate 0:00:30
  828. timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
  829. timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
  830. timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
  831. timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
  832. timeout tcp-proxy-reassembly 0:01:00
  833. timeout floating-conn 0:00:00
  834. dynamic-access-policy-record DfltAccessPolicy
  835. aaa-server radius protocol radius
  836. aaa-server radius (ASA) host 172.18.3.200
  837. key *****
  838. authentication-port 1812
  839. accounting-port 1813
  840. radius-common-pw *****
  841. no mschapv2-capable
  842. user-identity default-domain LOCAL
  843. aaa authentication http console radius LOCAL
  844. aaa authentication serial console radius LOCAL
  845. aaa authentication ssh console radius LOCAL
  846. http server enable
  847. http 192.168.7.0 255.255.255.0 management
  848. http 192.168.0.0 255.255.0.0 management
  849. http 199.180.158.194 255.255.255.255 WAN
  850. http 112.210.71.92 255.255.255.255 WAN
  851. http 0.0.0.0 0.0.0.0 ASA
  852. snmp-server group Authentication_Only v3 auth
  853. snmp-server host WAN 103.231.134.101 community ***** version 2c
  854. snmp-server host ASA 192.168.10.70 community ***** version 2c
  855. snmp-server host ASA 192.168.10.72 community ***** version 2c
  856. snmp-server host WAN 199.180.152.142 community *****
  857. snmp-server host WAN 199.180.158.166 community *****
  858. snmp-server host WAN 222.127.28.138 community *****
  859. snmp-server host WAN 222.137.6.136 community ***** version 2c
  860. snmp-server location CEBU
  861. snmp-server contact it@ebusinessbpo.com
  862. snmp-server community *****
  863. snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
  864. sysopt connection tcpmss 1350
  865. sla monitor 1
  866. type echo protocol ipIcmpEcho 172.18.9.3 interface ASA
  867. num-packets 3
  868. frequency 10
  869. sla monitor schedule 1 life forever start-time now
  870. crypto ipsec ikev1 transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
  871. crypto ipsec ikev1 transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
  872. crypto ipsec ikev1 transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
  873. crypto ipsec ikev1 transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
  874. crypto ipsec ikev1 transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
  875. crypto ipsec ikev1 transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
  876. crypto ipsec ikev1 transform-set ESP-AES-128-SHA-TRANS esp-aes esp-sha-hmac
  877. crypto ipsec ikev1 transform-set ESP-AES-128-SHA-TRANS mode transport
  878. crypto ipsec ikev1 transform-set ESP-AES-128-MD5-TRANS esp-aes esp-md5-hmac
  879. crypto ipsec ikev1 transform-set ESP-AES-128-MD5-TRANS mode transport
  880. crypto ipsec ikev1 transform-set ESP-AES-192-SHA-TRANS esp-aes-192 esp-sha-hmac
  881. crypto ipsec ikev1 transform-set ESP-AES-192-SHA-TRANS mode transport
  882. crypto ipsec ikev1 transform-set ESP-AES-192-MD5-TRANS esp-aes-192 esp-md5-hmac
  883. crypto ipsec ikev1 transform-set ESP-AES-192-MD5-TRANS mode transport
  884. crypto ipsec ikev1 transform-set ESP-AES-256-SHA-TRANS esp-aes-256 esp-sha-hmac
  885. crypto ipsec ikev1 transform-set ESP-AES-256-SHA-TRANS mode transport
  886. crypto ipsec ikev1 transform-set ESP-AES-256-MD5-TRANS esp-aes-256 esp-md5-hmac
  887. crypto ipsec ikev1 transform-set ESP-AES-256-MD5-TRANS mode transport
  888. crypto ipsec ikev1 transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
  889. crypto ipsec ikev1 transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
  890. crypto ipsec ikev1 transform-set ESP-3DES-SHA-TRANS esp-3des esp-sha-hmac
  891. crypto ipsec ikev1 transform-set ESP-3DES-SHA-TRANS mode transport
  892. crypto ipsec ikev1 transform-set ESP-3DES-MD5-TRANS esp-3des esp-md5-hmac
  893. crypto ipsec ikev1 transform-set ESP-3DES-MD5-TRANS mode transport
  894. crypto ipsec ikev1 transform-set ESP-DES-SHA esp-des esp-sha-hmac
  895. crypto ipsec ikev1 transform-set ESP-DES-MD5 esp-des esp-md5-hmac
  896. crypto ipsec ikev1 transform-set ESP-DES-SHA-TRANS esp-des esp-sha-hmac
  897. crypto ipsec ikev1 transform-set ESP-DES-SHA-TRANS mode transport
  898. crypto ipsec ikev1 transform-set ESP-DES-MD5-TRANS esp-des esp-md5-hmac
  899. crypto ipsec ikev1 transform-set ESP-DES-MD5-TRANS mode transport
  900. crypto ipsec ikev1 transform-set FinishLine esp-aes-256 esp-sha-hmac
  901. crypto ipsec ikev1 transform-set SG_VPN esp-3des esp-sha-hmac
  902. crypto ipsec ikev1 transform-set LA-DC esp-3des esp-sha-hmac
  903. crypto ipsec ikev1 transform-set PB esp-3des esp-sha-hmac
  904. crypto ipsec ikev1 transform-set Taxi esp-aes-256 esp-sha-hmac
  905. crypto ipsec ikev1 transform-set Memphis esp-aes-256 esp-sha-hmac
  906. crypto ipsec ikev2 ipsec-proposal AES256
  907. protocol esp encryption aes-256
  908. protocol esp integrity sha-1 md5
  909. crypto ipsec ikev2 ipsec-proposal AES192
  910. protocol esp encryption aes-192
  911. protocol esp integrity sha-1 md5
  912. crypto ipsec ikev2 ipsec-proposal AES
  913. protocol esp encryption aes
  914. protocol esp integrity sha-1 md5
  915. crypto ipsec ikev2 ipsec-proposal 3DES
  916. protocol esp encryption 3des
  917. protocol esp integrity sha-1 md5
  918. crypto ipsec ikev2 ipsec-proposal DES
  919. protocol esp encryption des
  920. protocol esp integrity sha-1 md5
  921. crypto ipsec security-association pmtu-aging infinite
  922. crypto ipsec df-bit clear-df WAN
  923. crypto map WAN_map 1 match address WAN_cryptomap
  924. crypto map WAN_map 1 set peer 12.139.35.2 50.198.0.153
  925. crypto map WAN_map 1 set ikev1 transform-set Taxi
  926. crypto map WAN_map 2 match address WAN_cryptomap_1
  927. crypto map WAN_map 2 set peer 198.91.123.39
  928. crypto map WAN_map 2 set ikev1 transform-set Taxi
  929. crypto map WAN_map 3 match address WAN_cryptomap_2
  930. crypto map WAN_map 3 set peer 74.203.130.106
  931. crypto map WAN_map 3 set ikev1 transform-set Memphis
  932. crypto map WAN_map 3 set ikev2 ipsec-proposal AES256 AES192 AES 3DES DES
  933. crypto map WAN_map 3 set nat-t-disable
  934. crypto map WAN_map 4 match address WAN_cryptomap_3
  935. crypto map WAN_map 4 set peer 198.91.123.39
  936. crypto map WAN_map 4 set ikev1 transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5
  937. crypto map WAN_map 4 set ikev2 ipsec-proposal AES256 AES192 AES 3DES DES
  938. crypto map WAN_map interface WAN
  939. crypto ca trustpoint _SmartCallHome_ServerCA
  940. crl configure
  941. crypto ca trustpool policy
  942. crypto ca certificate chain _SmartCallHome_ServerCA
  943. certificate ca 6ecc7aa5a7032009b8cebcf4e952d491
  944. 308205ec 308204d4 a0030201 0202106e cc7aa5a7 032009b8 cebcf4e9 52d49130
  945. 0d06092a 864886f7 0d010105 05003081 ca310b30 09060355 04061302 55533117
  946. 30150603 55040a13 0e566572 69536967 6e2c2049 6e632e31 1f301d06 0355040b
  947. 13165665 72695369 676e2054 72757374 204e6574 776f726b 313a3038 06035504
  948. 0b133128 63292032 30303620 56657269 5369676e 2c20496e 632e202d 20466f72
  949. 20617574 686f7269 7a656420 75736520 6f6e6c79 31453043 06035504 03133c56
  950. 65726953 69676e20 436c6173 73203320 5075626c 69632050 72696d61 72792043
  951. 65727469 66696361 74696f6e 20417574 686f7269 7479202d 20473530 1e170d31
  952. 30303230 38303030 3030305a 170d3230 30323037 32333539 35395a30 81b5310b
  953. 30090603 55040613 02555331 17301506 0355040a 130e5665 72695369 676e2c20
  954. 496e632e 311f301d 06035504 0b131656 65726953 69676e20 54727573 74204e65
  955. 74776f72 6b313b30 39060355 040b1332 5465726d 73206f66 20757365 20617420
  956. 68747470 733a2f2f 7777772e 76657269 7369676e 2e636f6d 2f727061 20286329
  957. 3130312f 302d0603 55040313 26566572 69536967 6e20436c 61737320 33205365
  958. 63757265 20536572 76657220 4341202d 20473330 82012230 0d06092a 864886f7
  959. 0d010101 05000382 010f0030 82010a02 82010100 b187841f c20c45f5 bcab2597
  960. a7ada23e 9cbaf6c1 39b88bca c2ac56c6 e5bb658e 444f4dce 6fed094a d4af4e10
  961. 9c688b2e 957b899b 13cae234 34c1f35b f3497b62 83488174 d188786c 0253f9bc
  962. 7f432657 5833833b 330a17b0 d04e9124 ad867d64 12dc744a 34a11d0a ea961d0b
  963. 15fca34b 3bce6388 d0f82d0c 948610ca b69a3dca eb379c00 48358629 5078e845
  964. 63cd1941 4ff595ec 7b98d4c4 71b350be 28b38fa0 b9539cf5 ca2c23a9 fd1406e8
  965. 18b49ae8 3c6e81fd e4cd3536 b351d369 ec12ba56 6e6f9b57 c58b14e7 0ec79ced
  966. 4a546ac9 4dc5bf11 b1ae1c67 81cb4455 33997f24 9b3f5345 7f861af3 3cfa6d7f
  967. 81f5b84a d3f58537 1cb5a6d0 09e4187b 384efa0f 02030100 01a38201 df308201
  968. db303406 082b0601 05050701 01042830 26302406 082b0601 05050730 01861868
  969. 7474703a 2f2f6f63 73702e76 65726973 69676e2e 636f6d30 12060355 1d130101
  970. ff040830 060101ff 02010030 70060355 1d200469 30673065 060b6086 480186f8
  971. 45010717 03305630 2806082b 06010505 07020116 1c687474 70733a2f 2f777777
  972. 2e766572 69736967 6e2e636f 6d2f6370 73302a06 082b0601 05050702 02301e1a
  973. 1c687474 70733a2f 2f777777 2e766572 69736967 6e2e636f 6d2f7270 61303406
  974. 03551d1f 042d302b 3029a027 a0258623 68747470 3a2f2f63 726c2e76 65726973
  975. 69676e2e 636f6d2f 70636133 2d67352e 63726c30 0e060355 1d0f0101 ff040403
  976. 02010630 6d06082b 06010505 07010c04 61305fa1 5da05b30 59305730 55160969
  977. 6d616765 2f676966 3021301f 30070605 2b0e0302 1a04148f e5d31a86 ac8d8e6b
  978. c3cf806a d448182c 7b192e30 25162368 7474703a 2f2f6c6f 676f2e76 65726973
  979. 69676e2e 636f6d2f 76736c6f 676f2e67 69663028 0603551d 11042130 1fa41d30
  980. 1b311930 17060355 04031310 56657269 5369676e 4d504b49 2d322d36 301d0603
  981. 551d0e04 1604140d 445c1653 44c1827e 1d20ab25 f40163d8 be79a530 1f060355
  982. 1d230418 30168014 7fd365a7 c2ddecbb f03009f3 4339fa02 af333133 300d0609
  983. 2a864886 f70d0101 05050003 82010100 0c8324ef ddc30cd9 589cfe36 b6eb8a80
  984. 4bd1a3f7 9df3cc53 ef829ea3 a1e697c1 589d756c e01d1b4c fad1c12d 05c0ea6e
  985. b2227055 d9203340 3307c265 83fa8f43 379bea0e 9a6c70ee f69c803b d937f47a
  986. 6decd018 7d494aca 99c71928 a2bed877 24f78526 866d8705 404167d1 273aeddc
  987. 481d22cd 0b0b8bbc f4b17bfd b499a8e9 762ae11a 2d876e74 d388dd1e 22c6df16
  988. b62b8214 0a945cf2 50ecafce ff62370d ad65d306 4153ed02 14c8b558 28a1ace0
  989. 5becb37f 954afb03 c8ad26db e6667812 4ad99f42 fbe198e6 42839b8f 8f6724e8
  990. 6119b5dd cdb50b26 058ec36e c4c875b8 46cfe218 065ea9ae a8819a47 16de0c28
  991. 6c2527b9 deb78458 c61f381e a4c4cb66
  992. quit
  993. crypto ikev2 policy 1
  994. encryption aes-256
  995. integrity sha
  996. group 5 2
  997. prf sha
  998. lifetime seconds 86400
  999. crypto ikev2 policy 10
  1000. encryption aes-192
  1001. integrity sha
  1002. group 5 2
  1003. prf sha
  1004. lifetime seconds 86400
  1005. crypto ikev2 policy 20
  1006. encryption aes
  1007. integrity sha
  1008. group 5 2
  1009. prf sha
  1010. lifetime seconds 86400
  1011. crypto ikev2 policy 30
  1012. encryption 3des
  1013. integrity sha
  1014. group 5 2
  1015. prf sha
  1016. lifetime seconds 86400
  1017. crypto ikev2 policy 40
  1018. encryption des
  1019. integrity sha
  1020. group 5 2
  1021. prf sha
  1022. lifetime seconds 86400
  1023. crypto ikev2 enable WAN
  1024. crypto ikev1 enable WAN
  1025. crypto ikev1 policy 1
  1026. authentication pre-share
  1027. encryption aes-256
  1028. hash sha
  1029. group 5
  1030. lifetime 86400
  1031. crypto ikev1 policy 10
  1032. authentication crack
  1033. encryption aes-256
  1034. hash sha
  1035. group 2
  1036. lifetime 86400
  1037. crypto ikev1 policy 20
  1038. authentication rsa-sig
  1039. encryption aes-256
  1040. hash sha
  1041. group 2
  1042. lifetime 86400
  1043. crypto ikev1 policy 30
  1044. authentication pre-share
  1045. encryption aes-256
  1046. hash sha
  1047. group 2
  1048. lifetime 86400
  1049. crypto ikev1 policy 40
  1050. authentication crack
  1051. encryption aes-192
  1052. hash sha
  1053. group 2
  1054. lifetime 86400
  1055. crypto ikev1 policy 50
  1056. authentication rsa-sig
  1057. encryption aes-192
  1058. hash sha
  1059. group 2
  1060. lifetime 86400
  1061. crypto ikev1 policy 60
  1062. authentication pre-share
  1063. encryption aes-192
  1064. hash sha
  1065. group 2
  1066. lifetime 86400
  1067. crypto ikev1 policy 70
  1068. authentication crack
  1069. encryption aes
  1070. hash sha
  1071. group 2
  1072. lifetime 86400
  1073. crypto ikev1 policy 80
  1074. authentication rsa-sig
  1075. encryption aes
  1076. hash sha
  1077. group 2
  1078. lifetime 86400
  1079. crypto ikev1 policy 90
  1080. authentication pre-share
  1081. encryption aes
  1082. hash sha
  1083. group 2
  1084. lifetime 86400
  1085. crypto ikev1 policy 100
  1086. authentication crack
  1087. encryption 3des
  1088. hash sha
  1089. group 2
  1090. lifetime 86400
  1091. crypto ikev1 policy 110
  1092. authentication rsa-sig
  1093. encryption 3des
  1094. hash sha
  1095. group 2
  1096. lifetime 86400
  1097. crypto ikev1 policy 120
  1098. authentication pre-share
  1099. encryption 3des
  1100. hash sha
  1101. group 2
  1102. lifetime 86400
  1103. crypto ikev1 policy 130
  1104. authentication crack
  1105. encryption des
  1106. hash sha
  1107. group 2
  1108. lifetime 86400
  1109. crypto ikev1 policy 140
  1110. authentication rsa-sig
  1111. encryption des
  1112. hash sha
  1113. group 2
  1114. lifetime 86400
  1115. crypto ikev1 policy 150
  1116. authentication pre-share
  1117. encryption des
  1118. hash sha
  1119. group 2
  1120. lifetime 86400
  1121. !
  1122. track 1 rtr 1 reachability
  1123. !
  1124. track 4 rtr 4 reachability
  1125. telnet timeout 5
  1126. ssh 0.0.0.0 0.0.0.0 VLAN
  1127. ssh 103.231.134.0 255.255.255.0 WAN
  1128. ssh 0.0.0.0 0.0.0.0 ASA
  1129. ssh 192.168.0.0 255.255.0.0 management
  1130. ssh timeout 5
  1131. ssh version 2
  1132. ssh key-exchange group dh-group1-sha1
  1133. console timeout 0
  1134. dhcpd dns 208.67.222.222 208.67.220.220
  1135. dhcpd domain ebusinessbpo.lan
  1136. !
  1137. dhcpd dns 8.8.8.8 4.2.2.2 interface VLAN
  1138. dhcpd domain ebusinessbpo.com interface VLAN
  1139. !
  1140. dhcpd address 192.168.3.30-192.168.3.254 DATA1
  1141. dhcpd dns 208.67.222.222 208.67.220.220 interface DATA1
  1142. dhcpd domain ebusinessbpo.lan interface DATA1
  1143. dhcpd enable DATA1
  1144. !
  1145. dhcpd address 192.168.9.101-192.168.9.250 SGVLan
  1146. dhcpd dns 208.67.222.222 208.67.220.220 interface SGVLan
  1147. dhcpd domain ebusinessbpo.lan interface SGVLan
  1148. dhcpd enable SGVLan
  1149. !
  1150. dhcpd address 192.168.14.21-192.168.14.250 TrainingRoom
  1151. dhcpd dns 208.67.222.222 208.67.220.220 interface TrainingRoom
  1152. dhcpd domain ebusinessbpo.lan interface TrainingRoom
  1153. dhcpd enable TrainingRoom
  1154. !
  1155. dhcpd address 10.170.36.100-10.170.36.110 VFServer
  1156. dhcpd dns 8.8.8.8 4.2.2.2 interface VFServer
  1157. dhcpd domain ebusinessbpo.com interface VFServer
  1158. dhcpd enable VFServer
  1159. !
  1160. dhcpd address 10.170.37.150-10.170.37.254 VFAgents
  1161. dhcpd dns 192.30.91.51 192.30.91.68 interface VFAgents
  1162. dhcpd domain ebusinessbpo.com interface VFAgents
  1163. dhcpd enable VFAgents
  1164. !
  1165. dhcpd address 192.168.20.10-192.168.20.200 SixthFloor
  1166. dhcpd dns 208.67.222.222 208.67.220.220 interface SixthFloor
  1167. dhcpd domain ebusinessbpo.lan interface SixthFloor
  1168. dhcpd enable SixthFloor
  1169. !
  1170. dhcpd address 192.168.0.10-192.168.0.50 R&D
  1171. dhcpd dns 8.8.8.8 4.2.2.2 interface R&D
  1172. dhcpd domain ebusinessbpo.com interface R&D
  1173. dhcpd enable R&D
  1174. !
  1175. dhcpd address 192.168.12.21-192.168.12.250 WireLess
  1176. dhcpd dns 8.8.8.8 4.2.2.2 interface WireLess
  1177. dhcpd domain ebusinessbpo.lan interface WireLess
  1178. dhcpd enable WireLess
  1179. !
  1180. no threat-detection basic-threat
  1181. threat-detection statistics
  1182. threat-detection statistics tcp-intercept rate-interval 30 burst-rate 400 average-rate 200
  1183. ntp server 192.168.10.100 source ASA
  1184. group-policy GroupPolicy_198.91.123.39 internal
  1185. group-policy GroupPolicy_198.91.123.39 attributes
  1186. vpn-tunnel-protocol ikev1 ikev2
  1187. group-policy GroupPolicy_74.203.130.106 internal
  1188. group-policy GroupPolicy_74.203.130.106 attributes
  1189. vpn-tunnel-protocol ikev1 ikev2
  1190. group-policy GroupPolicy_198.91.123.34 internal
  1191. group-policy GroupPolicy_198.91.123.34 attributes
  1192. vpn-tunnel-protocol ikev1
  1193. group-policy GroupPolicy_12.139.35.2 internal
  1194. group-policy GroupPolicy_12.139.35.2 attributes
  1195. vpn-tunnel-protocol ikev1
  1196. username admin password m7qmICv/7AgaDVn3 encrypted privilege 15
  1197. tunnel-group 12.139.35.2 type ipsec-l2l
  1198. tunnel-group 12.139.35.2 general-attributes
  1199. default-group-policy GroupPolicy_12.139.35.2
  1200. tunnel-group 12.139.35.2 ipsec-attributes
  1201. ikev1 pre-shared-key *****
  1202. ikev2 remote-authentication pre-shared-key *****
  1203. ikev2 local-authentication pre-shared-key *****
  1204. tunnel-group 198.91.123.34 type ipsec-l2l
  1205. tunnel-group 198.91.123.34 general-attributes
  1206. default-group-policy GroupPolicy_198.91.123.34
  1207. tunnel-group 198.91.123.34 ipsec-attributes
  1208. ikev1 pre-shared-key *****
  1209. ikev2 remote-authentication pre-shared-key *****
  1210. ikev2 local-authentication pre-shared-key *****
  1211. tunnel-group 74.203.130.106 type ipsec-l2l
  1212. tunnel-group 74.203.130.106 general-attributes
  1213. default-group-policy GroupPolicy_74.203.130.106
  1214. tunnel-group 74.203.130.106 ipsec-attributes
  1215. ikev1 pre-shared-key *****
  1216. isakmp keepalive disable
  1217. ikev2 remote-authentication pre-shared-key *****
  1218. ikev2 local-authentication pre-shared-key *****
  1219. tunnel-group 198.91.123.39 type ipsec-l2l
  1220. tunnel-group 198.91.123.39 general-attributes
  1221. default-group-policy GroupPolicy_198.91.123.39
  1222. tunnel-group 198.91.123.39 ipsec-attributes
  1223. ikev1 pre-shared-key *****
  1224. ikev2 remote-authentication pre-shared-key *****
  1225. ikev2 local-authentication pre-shared-key *****
  1226. !
  1227. class-map icmp-class
  1228. class-map inspection_default
  1229. match default-inspection-traffic
  1230. !
  1231. !
  1232. policy-map type inspect dns preset_dns_map
  1233. parameters
  1234. message-length maximum client auto
  1235. message-length maximum 512
  1236. policy-map globa_default
  1237. class class-default
  1238. set connection decrement-ttl
  1239. policy-map global_policy
  1240. class inspection_default
  1241. inspect dns preset_dns_map
  1242. inspect ftp
  1243. inspect rsh
  1244. inspect sqlnet
  1245. inspect sunrpc
  1246. inspect xdmcp
  1247. inspect netbios
  1248. inspect tftp
  1249. inspect ip-options
  1250. inspect icmp
  1251. inspect icmp error
  1252. inspect http
  1253. class icmp-class
  1254. inspect icmp
  1255. set connection decrement-ttl
  1256. class class-default
  1257. set connection decrement-ttl
  1258. user-statistics accounting
  1259. policy-map globa_policy
  1260. !
  1261. service-policy global_policy global
  1262. smtp-server 209.126.96.57
  1263. prompt hostname state
  1264. service call-home
  1265. call-home reporting anonymous
  1266. call-home
  1267. no alert-group diagnostic
  1268. no alert-group environment
  1269. no alert-group snapshot
  1270. no alert-group telemetry
  1271. contact-email-addr raj@ebusinessbpo.com
  1272. contact-name Raj
  1273. phone-number +1-4242813868
  1274. sender from raj@ebusinessbpo.com
  1275. sender reply-to raj@ebusinessbpo.com
  1276. street-address 207 W. Los Angeles Ave. #365, Moorpark, CA 93021
  1277. mail-server mail.ebi-mail.com priority 1
  1278. profile CiscoTAC-1
  1279. destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
  1280. destination address email callhome@cisco.com
  1281. destination transport-method http
  1282. subscribe-to-alert-group diagnostic
  1283. subscribe-to-alert-group environment
  1284. subscribe-to-alert-group inventory periodic monthly 15
  1285. subscribe-to-alert-group configuration periodic monthly 15
  1286. subscribe-to-alert-group telemetry periodic daily
  1287. hpm topN enable
  1288. Cryptochecksum:584ef5334ec74151a076022694867c19
  1289. : end
  1290. cbasa2/act#
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement