Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- version 15.1
- service timestamps debug datetime msec
- service timestamps log datetime msec
- !
- hostname rXXXX
- !
- boot-start-marker
- boot-end-marker
- !
- !
- !
- no aaa new-model
- !
- dot11 syslog
- ip source-route
- !
- !
- !
- !
- !
- ip cef
- no ip domain lookup
- ipv6 unicast-routing
- ipv6 cef
- ipv6 dhcp pool dhcpv6-ghost
- prefix-delegation pool comcast-ipv6
- dns-server FA32:66dd:455C::255
- domain-name localnet.tld
- !
- ipv6 inspect name traffic ftp
- ipv6 inspect name traffic udp
- ipv6 inspect name traffic icmp
- !
- multilink bundle-name authenticated
- !
- crypto pki token default removal timeout 0
- !
- !
- !
- !
- license udi pid CISCOXXXX sn XXXXXXXXXX
- username ama privilege 15 secret 4 XXXXXXXXXXXXXXXXXX
- !
- redundancy
- !
- !
- ip ssh version 2
- !
- !
- !
- !
- !
- !
- !
- interface FastEthernet0/0
- description "Connected to Comcast - DHCP"
- ip address dhcp
- ip access-group 105 in
- ip nat outside
- ip virtual-reassembly in
- duplex auto
- speed auto
- ipv6 address autoconfig default
- ipv6 enable
- ipv6 verify unicast reverse-path
- ipv6 dhcp client pd comcast-ipv6
- ipv6 inspect traffic out
- ipv6 traffic-filter wan-in in
- ipv6 traffic-filter wan-out out
- no cdp enable
- !
- interface FastEthernet0/1
- description "Lan Interface"
- ip address 192.168.128.1 255.255.255.224
- ip nat inside
- ip virtual-reassembly in
- duplex auto
- speed auto
- ipv6 address FD33:33EE:365C::1/48
- ipv6 address comcast-ipv6 ::1/64
- ipv6 address prefix-from-comcast ::1/64
- ipv6 address autoconfig
- ipv6 enable
- ipv6 nd other-config-flag
- ipv6 dhcp server dhcpv6-ghost
- !
- ip forward-protocol nd
- no ip http server
- no ip http secure-server
- !
- !
- ip nat inside source list 1 interface FastEthernet0/0 overload
- !
- ip access-list extended outside-int
- !
- access-list 1 permit 192.168.128.0 0.0.0.31
- access-list 105 deny tcp any any eq ftp-data
- access-list 105 deny tcp any any eq ftp
- access-list 105 deny tcp any any eq 22
- access-list 105 deny tcp any any eq telnet
- access-list 105 deny tcp any any eq smtp
- access-list 105 deny tcp any any eq domain
- access-list 105 deny udp any any eq domain
- access-list 105 deny tcp any any eq www
- access-list 105 deny tcp any any eq 135
- access-list 105 deny tcp any any eq 136
- access-list 105 deny tcp any any eq 137
- access-list 105 deny tcp any any eq 138
- access-list 105 deny tcp any any eq 139
- access-list 105 deny tcp any any eq 443
- access-list 105 deny tcp any any eq 445
- access-list 105 deny tcp any any eq 3306
- access-list 105 permit ip any any
- access-list 106 permit tcp any any established
- access-list 106 permit udp any eq bootps any eq bootpc
- !
- !
- !
- !
- !
- !
- ipv6 access-list wan-in
- permit icmp any any
- permit udp any any eq 546
- permit tcp any any established
- sequence 100 deny ipv6 any any
- !
- ipv6 access-list wan-out
- permit icmp any any
- permit tcp any any
- permit udp any any
- sequence 100 deny ipv6 any any
- !
- control-plane
- !
- !
- !
- line con 0
- logging synchronous
- login local
- line aux 0
- line vty 0 4
- login local
- transport input ssh
- line vty 5 15
- login local
- transport input ssh
- !
- scheduler allocate 20000 1000
- end
Advertisement
Add Comment
Please, Sign In to add comment