trepaned

Cisco 1841 Comcast Set up

May 3rd, 2017
255
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
C 3.10 KB | None | 0 0
  1. version 15.1
  2. service timestamps debug datetime msec
  3. service timestamps log datetime msec
  4. !
  5. hostname rXXXX
  6. !
  7. boot-start-marker
  8. boot-end-marker
  9. !
  10. !
  11. !
  12. no aaa new-model
  13. !
  14. dot11 syslog
  15. ip source-route
  16. !
  17. !
  18. !
  19. !
  20. !
  21. ip cef
  22. no ip domain lookup
  23. ipv6 unicast-routing
  24. ipv6 cef
  25. ipv6 dhcp pool dhcpv6-ghost
  26.  prefix-delegation pool comcast-ipv6
  27.  dns-server FA32:66dd:455C::255
  28.  domain-name localnet.tld
  29. !
  30. ipv6 inspect name traffic ftp
  31. ipv6 inspect name traffic udp
  32. ipv6 inspect name traffic icmp
  33. !
  34. multilink bundle-name authenticated
  35. !
  36. crypto pki token default removal timeout 0
  37. !
  38. !
  39. !
  40. !
  41. license udi pid CISCOXXXX sn XXXXXXXXXX
  42. username ama privilege 15 secret 4 XXXXXXXXXXXXXXXXXX
  43. !        
  44. redundancy
  45. !
  46. !
  47. ip ssh version 2
  48. !
  49. !
  50. !
  51. !
  52. !
  53. !
  54. !
  55. interface FastEthernet0/0
  56.  description "Connected to Comcast - DHCP"
  57.  ip address dhcp
  58.  ip access-group 105 in
  59.  ip nat outside
  60.  ip virtual-reassembly in
  61.  duplex auto
  62.  speed auto
  63.  ipv6 address autoconfig default
  64.  ipv6 enable
  65.  ipv6 verify unicast reverse-path
  66.  ipv6 dhcp client pd comcast-ipv6
  67.  ipv6 inspect traffic out
  68.  ipv6 traffic-filter wan-in in
  69.  ipv6 traffic-filter wan-out out
  70.  no cdp enable
  71. !
  72. interface FastEthernet0/1
  73.  description "Lan Interface"
  74.  ip address 192.168.128.1 255.255.255.224
  75.  ip nat inside
  76.  ip virtual-reassembly in
  77.  duplex auto
  78.  speed auto
  79.  ipv6 address FD33:33EE:365C::1/48
  80.  ipv6 address comcast-ipv6 ::1/64
  81.  ipv6 address prefix-from-comcast ::1/64
  82.  ipv6 address autoconfig
  83.  ipv6 enable
  84.  ipv6 nd other-config-flag
  85.  ipv6 dhcp server dhcpv6-ghost
  86. !
  87. ip forward-protocol nd
  88. no ip http server
  89. no ip http secure-server
  90. !        
  91. !
  92. ip nat inside source list 1 interface FastEthernet0/0 overload
  93. !
  94. ip access-list extended outside-int
  95. !
  96. access-list 1 permit 192.168.128.0 0.0.0.31
  97. access-list 105 deny   tcp any any eq ftp-data
  98. access-list 105 deny   tcp any any eq ftp
  99. access-list 105 deny   tcp any any eq 22
  100. access-list 105 deny   tcp any any eq telnet
  101. access-list 105 deny   tcp any any eq smtp
  102. access-list 105 deny   tcp any any eq domain
  103. access-list 105 deny   udp any any eq domain
  104. access-list 105 deny   tcp any any eq www
  105. access-list 105 deny   tcp any any eq 135
  106. access-list 105 deny   tcp any any eq 136
  107. access-list 105 deny   tcp any any eq 137
  108. access-list 105 deny   tcp any any eq 138
  109. access-list 105 deny   tcp any any eq 139
  110. access-list 105 deny   tcp any any eq 443
  111. access-list 105 deny   tcp any any eq 445
  112. access-list 105 deny   tcp any any eq 3306
  113. access-list 105 permit ip any any
  114. access-list 106 permit tcp any any established
  115. access-list 106 permit udp any eq bootps any eq bootpc
  116. !
  117. !
  118. !
  119. !
  120. !
  121. !
  122. ipv6 access-list wan-in
  123.  permit icmp any any
  124.  permit udp any any eq 546
  125.  permit tcp any any established
  126.  sequence 100 deny ipv6 any any
  127. !
  128. ipv6 access-list wan-out
  129.  permit icmp any any
  130.  permit tcp any any
  131.  permit udp any any
  132.  sequence 100 deny ipv6 any any
  133. !
  134. control-plane
  135. !
  136. !
  137. !        
  138. line con 0
  139.  logging synchronous
  140.  login local
  141. line aux 0
  142. line vty 0 4
  143.  login local
  144.  transport input ssh
  145. line vty 5 15
  146.  login local
  147.  transport input ssh
  148. !
  149. scheduler allocate 20000 1000
  150. end
Advertisement
Add Comment
Please, Sign In to add comment