API tools faq
paste
Guest User

Untitled

a guest
Nov 24th, 2017
930
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.72 KB | None | 0 0
raw download clone embed print report
  1. Result of the command: "show running-config"
  2.  
  3. : Saved
  4. :
  5. : Serial Number: JMX17124065
  6. : Hardware: ASA5505, 512 MB RAM, CPU Geode 500 MHz
  7. :
  8. ASA Version 9.2(3)3
  9. !
  10. hostname MARKASA
  11. enable password 8Ry2YjIyt7U24 encrypted
  12. names
  13. !
  14. interface Ethernet0/0
  15. !
  16. interface Ethernet0/1
  17. switchport access vlan 2
  18. !
  19. interface Ethernet0/2
  20. switchport access vlan 2
  21. !
  22. interface Ethernet0/3
  23. switchport access vlan 2
  24. !
  25. interface Ethernet0/4
  26. switchport access vlan 2
  27. !
  28. interface Ethernet0/5
  29. switchport access vlan 2
  30. !
  31. interface Ethernet0/6
  32. switchport access vlan 2
  33. !
  34. interface Ethernet0/7
  35. switchport access vlan 2
  36. !
  37. interface Vlan1
  38. description OUTSIDE
  39. nameif outside
  40. security-level 0
  41. ip address dhcp setroute
  42. !
  43. interface Vlan2
  44. description INSIDE
  45. nameif inside
  46. security-level 100
  47. ip address 172.21.21.1 255.255.255.0
  48. !
  49. ftp mode passive
  50. object network 192.168.1.254
  51. host 192.168.1.254
  52. object network 10.182.10.1
  53. host 10.182.10.1
  54. object network desktop
  55. host 172.21.21.100
  56. object network office-aws
  57. subnet 10.10.3.0 255.255.255.0
  58. description office-aws
  59. object network office-aws-out
  60. subnet 10.10.2.0 255.255.255.0
  61. description office-aws-out
  62. object network 10.183.10.1
  63. host 10.183.10.1
  64. object-group protocol DM_INLINE_PROTOCOL_1
  65. protocol-object icmp
  66. protocol-object icmp6
  67. object-group protocol DM_INLINE_PROTOCOL_2
  68. protocol-object icmp
  69. protocol-object icmp6
  70. object-group network markPATIP
  71. network-object object 10.182.10.1
  72. access-list inside_access_in extended permit object-group DM_INLINE_PROTOCOL_1 any any
  73. access-list inside_access_in extended permit ip any any
  74. access-list outside_access_in extended permit object-group DM_INLINE_PROTOCOL_2 any any
  75. access-list outside_access_in extended permit tcp any object desktop eq 3389
  76. access-list outside_cryptomap extended permit ip 172.21.21.0 255.255.255.0 object-group markPATIP
  77. access-list outside_cryptomap_1 extended permit ip 172.21.21.0 255.255.255.0 object 10.183.10.1
  78. access-list ACL-THROTTLE extended permit ip host 172.21.21.100 any
  79. access-list ACL-THROTTLE extended permit ip any host 172.21.21.100
  80. pager lines 24
  81. logging enable
  82. logging asdm informational
  83. mtu outside 1500
  84. mtu inside 1500
  85. no failover
  86. icmp unreachable rate-limit 1 burst-size 1
  87. no asdm history enable
  88. arp timeout 14400
  89. no arp permit-nonconnected
  90. nat (inside,any) source static any any destination static 10.183.10.1 10.183.10.1 no-proxy-arp
  91. nat (inside,any) source static any any destination static markPATIP markPATIP no-proxy-arp
  92. !
  93. object network desktop
  94. nat (inside,outside) static interface service tcp 3389 3389
  95. !
  96. nat (inside,outside) after-auto source dynamic any interface
  97. access-group outside_access_in in interface outside
  98. access-group inside_access_in in interface inside
  99. timeout xlate 3:00:00
  100. timeout pat-xlate 0:00:30
  101. timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
  102. timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
  103. timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
  104. timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
  105. timeout tcp-proxy-reassembly 0:01:00
  106. timeout floating-conn 0:00:00
  107. dynamic-access-policy-record DfltAccessPolicy
  108. user-identity default-domain LOCAL
  109. aaa authentication http console LOCAL
  110. aaa authentication ssh console LOCAL
  111. aaa authentication enable console LOCAL
  112. aaa authentication telnet console LOCAL
  113. aaa authorization command LOCAL
  114. aaa authorization exec authentication-server auto-enable
  115. http server enable
  116. http 0.0.0.0 0.0.0.0 outside
  117. http 172.21.21.0 255.255.255.0 inside
  118. no snmp-server location
  119. no snmp-server contact
  120. crypto ipsec ikev1 transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
  121. crypto ipsec ikev1 transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
  122. crypto ipsec ikev1 transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
  123. crypto ipsec ikev1 transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
  124. crypto ipsec ikev1 transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
  125. crypto ipsec ikev1 transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
  126. crypto ipsec ikev1 transform-set ESP-AES-128-SHA-TRANS esp-aes esp-sha-hmac
  127. crypto ipsec ikev1 transform-set ESP-AES-128-SHA-TRANS mode transport
  128. crypto ipsec ikev1 transform-set ESP-AES-128-MD5-TRANS esp-aes esp-md5-hmac
  129. crypto ipsec ikev1 transform-set ESP-AES-128-MD5-TRANS mode transport
  130. crypto ipsec ikev1 transform-set ESP-AES-192-SHA-TRANS esp-aes-192 esp-sha-hmac
  131. crypto ipsec ikev1 transform-set ESP-AES-192-SHA-TRANS mode transport
  132. crypto ipsec ikev1 transform-set ESP-AES-192-MD5-TRANS esp-aes-192 esp-md5-hmac
  133. crypto ipsec ikev1 transform-set ESP-AES-192-MD5-TRANS mode transport
  134. crypto ipsec ikev1 transform-set ESP-AES-256-SHA-TRANS esp-aes-256 esp-sha-hmac
  135. crypto ipsec ikev1 transform-set ESP-AES-256-SHA-TRANS mode transport
  136. crypto ipsec ikev1 transform-set ESP-AES-256-MD5-TRANS esp-aes-256 esp-md5-hmac
  137. crypto ipsec ikev1 transform-set ESP-AES-256-MD5-TRANS mode transport
  138. crypto ipsec ikev1 transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
  139. crypto ipsec ikev1 transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
  140. crypto ipsec ikev1 transform-set ESP-3DES-SHA-TRANS esp-3des esp-sha-hmac
  141. crypto ipsec ikev1 transform-set ESP-3DES-SHA-TRANS mode transport
  142. crypto ipsec ikev1 transform-set ESP-3DES-MD5-TRANS esp-3des esp-md5-hmac
  143. crypto ipsec ikev1 transform-set ESP-3DES-MD5-TRANS mode transport
  144. crypto ipsec ikev1 transform-set ESP-DES-SHA esp-des esp-sha-hmac
  145. crypto ipsec ikev1 transform-set ESP-DES-MD5 esp-des esp-md5-hmac
  146. crypto ipsec ikev1 transform-set ESP-DES-SHA-TRANS esp-des esp-sha-hmac
  147. crypto ipsec ikev1 transform-set ESP-DES-SHA-TRANS mode transport
  148. crypto ipsec ikev1 transform-set ESP-DES-MD5-TRANS esp-des esp-md5-hmac
  149. crypto ipsec ikev1 transform-set ESP-DES-MD5-TRANS mode transport
  150. crypto ipsec security-association pmtu-aging infinite
  151. crypto map outside_map1 1 match address outside_cryptomap
  152. crypto map outside_map1 1 set pfs
  153. crypto map outside_map1 1 set peer 8.8.8.8
  154. crypto map outside_map1 1 set ikev1 transform-set ESP-AES-256-SHA
  155. crypto map outside_map1 2 match address outside_cryptomap_1
  156. crypto map outside_map1 2 set pfs
  157. crypto map outside_map1 2 set peer 4.4.4.4
  158. crypto map outside_map1 2 set ikev1 transform-set ESP-AES-256-SHA
  159. crypto map outside_map1 2 set nat-t-disable
  160. crypto map outside_map1 interface outside
  161. crypto ca trustpool policy
  162. crypto ikev1 enable outside
  163. crypto ikev1 policy 10
  164. authentication crack
  165. encryption aes-256
  166. hash sha
  167. group 2
  168. lifetime 86400
  169. crypto ikev1 policy 20
  170. authentication rsa-sig
  171. encryption aes-256
  172. hash sha
  173. group 2
  174. lifetime 86400
  175. crypto ikev1 policy 30
  176. authentication pre-share
  177. encryption aes-256
  178. hash sha
  179. group 2
  180. lifetime 86400
  181. crypto ikev1 policy 40
  182. authentication crack
  183. encryption aes-192
  184. hash sha
  185. group 2
  186. lifetime 86400
  187. crypto ikev1 policy 50
  188. authentication rsa-sig
  189. encryption aes-192
  190. hash sha
  191. group 2
  192. lifetime 86400
  193. crypto ikev1 policy 60
  194. authentication pre-share
  195. encryption aes-192
  196. hash sha
  197. group 2
  198. lifetime 86400
  199. crypto ikev1 policy 70
  200. authentication crack
  201. encryption aes
  202. hash sha
  203. group 2
  204. lifetime 86400
  205. crypto ikev1 policy 80
  206. authentication rsa-sig
  207. encryption aes
  208. hash sha
  209. group 2
  210. lifetime 86400
  211. crypto ikev1 policy 90
  212. authentication pre-share
  213. encryption aes
  214. hash sha
  215. group 2
  216. lifetime 86400
  217. crypto ikev1 policy 100
  218. authentication crack
  219. encryption 3des
  220. hash sha
  221. group 2
  222. lifetime 86400
  223. crypto ikev1 policy 110
  224. authentication rsa-sig
  225. encryption 3des
  226. hash sha
  227. group 2
  228. lifetime 86400
  229. crypto ikev1 policy 120
  230. authentication pre-share
  231. encryption 3des
  232. hash sha
  233. group 2
  234. lifetime 86400
  235. crypto ikev1 policy 130
  236. authentication crack
  237. encryption des
  238. hash sha
  239. group 2
  240. lifetime 86400
  241. crypto ikev1 policy 140
  242. authentication rsa-sig
  243. encryption des
  244. hash sha
  245. group 2
  246. lifetime 86400
  247. crypto ikev1 policy 150
  248. authentication pre-share
  249. encryption des
  250. hash sha
  251. group 2
  252. lifetime 86400
  253. telnet timeout 5
  254. ssh stricthostkeycheck
  255. ssh 0.0.0.0 0.0.0.0 outside
  256. ssh 172.21.21.0 255.255.255.0 inside
  257. ssh timeout 5
  258. ssh key-exchange group dh-group1-sha1
  259. console timeout 0
  260.  
  261. dhcp-client client-id interface outside
  262. dhcpd address 172.21.21.100-172.21.21.200 inside
  263. dhcpd dns 8.8.8.8 8.8.4.4 interface inside
  264. dhcpd lease 604800 interface inside
  265. dhcpd enable inside
  266. !
  267. threat-detection basic-threat
  268. threat-detection statistics host
  269. threat-detection statistics port
  270. threat-detection statistics protocol
  271. threat-detection statistics access-list
  272. no threat-detection statistics tcp-intercept
  273. group-policy DfltGrpPolicy attributes
  274. vpn-tunnel-protocol ikev1 l2tp-ipsec ssl-clientless
  275. username office password //jJGJenOvHlL encrypted privilege 15
  276. tunnel-group 8.8.8.8 type ipsec-l2l
  277. tunnel-group 8.8.8.8 ipsec-attributes
  278. ikev1 pre-shared-key *****
  279. tunnel-group 4.4.4.4 type ipsec-l2l
  280. tunnel-group 4.4.4.4 ipsec-attributes
  281. ikev1 pre-shared-key *****
  282. !
  283. class-map CM-THROTTLE
  284. match access-list ACL-THROTTLE
  285. !
  286. !
  287. policy-map global-policy
  288. class class-default
  289. user-statistics accounting
  290. policy-map PM-THROTTLE
  291. class CM-THROTTLE
  292. police output 1000000 2000
  293. police input 1000000 2000
  294. !
  295. service-policy global-policy global
  296. prompt hostname context
  297. no call-home reporting anonymous
  298. call-home
  299. profile CiscoTAC-1
  300. no active
  301. destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
  302. destination address email [email protected]
  303. destination transport-method http
  304. subscribe-to-alert-group diagnostic
  305. subscribe-to-alert-group environment
  306. subscribe-to-alert-group inventory periodic monthly
  307. subscribe-to-alert-group configuration periodic monthly
  308. subscribe-to-alert-group telemetry periodic daily
  309. Cryptochecksum:9e50fb3105450e4dd0909768cbbdf8ef
  310. : end
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!