Advertisement
Guest User

Untitled

a guest
Apr 23rd, 2018
3,917
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 22.13 KB | None | 0 0
  1. Password: ***********
  2. Username: admin
  3. Password: ***********
  4. Type help or '?' for a list of available commands.
  5. NET-GW-01> show run
  6. NET-GW-01> show running-config
  7. ^
  8. ERROR: % Invalid input detected at '^' marker.
  9. ERROR: Command authorization failed
  10. NET-GW-01> enable
  11. Password: ***********
  12. NET-GW-01# show run
  13. NET-GW-01# show running-config
  14. : Saved
  15. :
  16. ASA Version 8.2(5)
  17. !
  18. hostname NET-GW-01
  19. enable password 8Ry2YjIyt7RRXU24 encrypted
  20. passwd 2KFQnbNIdI.2KYOU encrypted
  21. names
  22. name 192.168.254.0 ANYcon
  23. name 192.168.88.27 VM-SQL-VAULT02
  24. name 212.112.132.223 KIT_Aeroe_212.112.132.223
  25. name 77.243.45.27 KIT_Odense_77.243.45.27
  26. name 93.167.198.91 KIT_PRTG_93.167.198.91
  27. name 192.168.88.13 HYPERV01
  28. name 192.168.88.19 VM-DC-02
  29. name 192.168.88.12 HyperV01-iLo
  30. name 85.27.130.66 KIT_STOFA_85.27.130.66 description KIT_STOFA
  31. !
  32. interface Ethernet0/0
  33. switchport access vlan 2
  34. !
  35. interface Ethernet0/1
  36. !
  37. interface Ethernet0/2
  38. switchport access vlan 12
  39. !
  40. interface Ethernet0/3
  41. switchport trunk allowed vlan 1,12
  42. switchport trunk native vlan 1
  43. switchport mode trunk
  44. !
  45. interface Ethernet0/4
  46. !
  47. interface Ethernet0/5
  48. !
  49. interface Ethernet0/6
  50. !
  51. interface Ethernet0/7
  52. !
  53. interface Vlan1
  54. nameif inside
  55. security-level 100
  56. ip address 192.168.88.1 255.255.255.0
  57. !
  58. interface Vlan2
  59. nameif outside
  60. security-level 0
  61. ip address dhcp setroute
  62. !
  63. interface Vlan12
  64. nameif iptelefon
  65. security-level 75
  66. ip address 192.168.100.1 255.255.255.0
  67. !
  68. ftp mode passive
  69. clock timezone EU 1
  70. clock summer-time WEST recurring last Sun Mar 2:00 last Sun Oct 3:00
  71. object-group network internal_lan
  72. object-group network KIT
  73. description Kortermann-IT Addresses
  74. network-object host 94.189.39.101
  75. network-object host 93.167.195.82
  76. network-object host KIT_Aeroe_212.112.132.223
  77. network-object host KIT_Odense_77.243.45.27
  78. network-object host KIT_PRTG_93.167.198.91
  79. network-object host KIT_STOFA_85.27.130.66
  80. object-group protocol TCPUDP
  81. protocol-object udp
  82. protocol-object tcp
  83. access-list inside-out extended permit ip any host 93.167.195.82
  84. access-list inside-out extended permit udp host 192.168.88.2 host 8.8.8.8 eq domain
  85. access-list inside-out extended permit udp host 192.168.88.2 host 8.8.4.4 eq domain
  86. access-list inside-out extended permit tcp host 192.168.88.2 any eq smtp
  87. access-list inside-out extended deny ip host 192.168.88.2 any log debugging inactive
  88. access-list inside-out extended deny ip host 192.168.88.3 any
  89. access-list inside-out extended deny ip host 192.168.88.4 any
  90. access-list inside-out extended deny ip host 192.168.88.8 any
  91. access-list inside-out extended permit ip any any
  92. access-list outside-in extended permit tcp any interface outside eq smtp
  93. access-list outside-in extended permit tcp object-group KIT interface outside eq https
  94. access-list outside-in extended permit tcp object-group KIT interface outside eq 8080
  95. access-list outside-in extended permit object-group TCPUDP object-group KIT interface outside eq www
  96. access-list outside-in extended permit ip object-group KIT interface outside
  97. access-list inside_nat0_outbound extended permit ip 192.168.88.0 255.255.255.0 ANYcon 255.255.255.0
  98. access-list inside_nat0_outbound extended permit ip 192.168.88.0 255.255.255.0 host 192.168.1.4
  99. access-list inside_nat0_outbound extended permit ip 192.168.88.0 255.255.255.0 192.168.1.0 255.255.255.0
  100. access-list Split standard permit 192.168.88.0 255.255.255.0
  101. access-list outside_1_cryptomap extended permit ip 192.168.88.0 255.255.255.0 192.168.1.0 255.255.255.0
  102. access-list vpn-kapacitet-filter extended permit tcp ANYcon 255.255.255.0 host VM-SQL-VAULT02 eq www
  103. access-list vpn-kapacitet-filter extended permit udp ANYcon 255.255.255.0 host VM-DC-02 eq domain
  104. access-list outside_access_in extended permit tcp object-group KIT interface outside eq 8080
  105. pager lines 24
  106. logging enable
  107. logging timestamp
  108. logging trap informational
  109. logging asdm informational
  110. logging host inside VM-DC-02
  111. mtu inside 1500
  112. mtu outside 1500
  113. mtu iptelefon 1500
  114. ip local pool AnyConPool 192.168.254.1-192.168.254.254 mask 255.255.255.0
  115. no failover
  116. icmp unreachable rate-limit 1 burst-size 1
  117. no asdm history enable
  118. arp timeout 14400
  119. global (outside) 1 interface
  120. nat (inside) 0 access-list inside_nat0_outbound
  121. nat (inside) 1 0.0.0.0 0.0.0.0
  122. nat (iptelefon) 1 0.0.0.0 0.0.0.0
  123. static (inside,outside) tcp interface smtp 192.168.88.2 smtp netmask 255.255.255.255
  124. static (inside,outside) tcp interface https VM-SQL-VAULT02 https netmask 255.255.255.255
  125. static (inside,outside) tcp interface www VM-SQL-VAULT02 www netmask 255.255.255.255
  126. static (inside,outside) tcp interface 8080 VM-SQL-VAULT02 8080 netmask 255.255.255.255
  127. static (inside,outside) tcp interface 3389 VM-DC-02 3389 netmask 255.255.255.255
  128. static (inside,outside) tcp interface 3390 HYPERV01 3389 netmask 255.255.255.255
  129. static (inside,outside) tcp interface 8445 HyperV01-iLo https netmask 255.255.255.255
  130. static (inside,outside) tcp interface telnet HyperV01-iLo telnet netmask 255.255.255.255
  131. static (inside,outside) tcp interface 9300 HyperV01-iLo 9300 netmask 255.255.255.255
  132. static (inside,outside) tcp interface 17990 HyperV01-iLo 17990 netmask 255.255.255.255
  133. static (inside,outside) tcp interface 3002 HyperV01-iLo 3002 netmask 255.255.255.255
  134. access-group inside-out in interface inside
  135. access-group outside-in in interface outside
  136. timeout xlate 3:00:00
  137. timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
  138. timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
  139. timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
  140. timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
  141. timeout tcp-proxy-reassembly 0:01:00
  142. timeout floating-conn 0:00:00
  143. dynamic-access-policy-record DfltAccessPolicy
  144. aaa-server KeoRadius protocol radius
  145. aaa-server KeoRadius (inside) host VM-DC-02
  146. key *****
  147. radius-common-pw *****
  148. aaa authentication enable console LOCAL
  149. aaa authentication http console LOCAL
  150. aaa authentication serial console LOCAL
  151. aaa authentication ssh console LOCAL
  152. aaa authentication telnet console LOCAL
  153. aaa authorization command LOCAL
  154. http server enable 8444
  155. http 192.168.1.0 255.255.255.0 inside
  156. http 0.0.0.0 0.0.0.0 inside
  157. http 81.27.215.178 255.255.255.255 outside
  158. http ANYcon 255.255.255.0 inside
  159. http ANYcon 255.255.255.0 outside
  160. snmp-server host inside VM-DC-02 community *****
  161. no snmp-server location
  162. no snmp-server contact
  163. snmp-server community *****
  164. snmp-server enable traps snmp authentication linkup linkdown coldstart
  165. crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
  166. crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
  167. crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
  168. crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
  169. crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
  170. crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
  171. crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
  172. crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
  173. crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
  174. crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
  175. crypto ipsec security-association lifetime seconds 28800
  176. crypto ipsec security-association lifetime kilobytes 4608000
  177. crypto map outside_map 1 match address outside_1_cryptomap
  178. crypto map outside_map 1 set peer 217.30.38.60
  179. crypto map outside_map 1 set transform-set ESP-AES-128-SHA
  180. crypto map outside_map interface outside
  181. crypto ca trustpoint _SmartCallHome_ServerCA
  182. crl configure
  183. crypto ca trustpoint ASDM_TrustPoint0
  184. enrollment terminal
  185. fqdn mail.keofitt.dk
  186. subject-name CN=mail.keofitt.dk,OU=IT,O=Keofitt A/S,C=DK
  187. keypair AnyConnect
  188. crl configure
  189. crypto ca trustpoint ASDM_TrustPoint1
  190. enrollment terminal
  191. subject-name CN=mail.keofitt.dk,OU=IT,O=Keofitt A/S,C=DK,St=Fyn,L=Svendborg
  192. keypair AnyConnect
  193. crl configure
  194. crypto ca certificate chain _SmartCallHome_ServerCA
  195. certificate ca 6ecc7aa5a7032009b8cebcf4e952d491
  196. 308205ec 308204d4 a0030201 0202106e cc7aa5a7 032009b8 cebcf4e9 52d49130
  197. 0d06092a 864886f7 0d010105 05003081 ca310b30 09060355 04061302 55533117
  198. 30150603 55040a13 0e566572 69536967 6e2c2049 6e632e31 1f301d06 0355040b
  199. 13165665 72695369 676e2054 72757374 204e6574 776f726b 313a3038 06035504
  200. 0b133128 63292032 30303620 56657269 5369676e 2c20496e 632e202d 20466f72
  201. 20617574 686f7269 7a656420 75736520 6f6e6c79 31453043 06035504 03133c56
  202. 65726953 69676e20 436c6173 73203320 5075626c 69632050 72696d61 72792043
  203. 65727469 66696361 74696f6e 20417574 686f7269 7479202d 20473530 1e170d31
  204. 30303230 38303030 3030305a 170d3230 30323037 32333539 35395a30 81b5310b
  205. 30090603 55040613 02555331 17301506 0355040a 130e5665 72695369 676e2c20
  206. 496e632e 311f301d 06035504 0b131656 65726953 69676e20 54727573 74204e65
  207. 74776f72 6b313b30 39060355 040b1332 5465726d 73206f66 20757365 20617420
  208. 68747470 733a2f2f 7777772e 76657269 7369676e 2e636f6d 2f727061 20286329
  209. 3130312f 302d0603 55040313 26566572 69536967 6e20436c 61737320 33205365
  210. 63757265 20536572 76657220 4341202d 20473330 82012230 0d06092a 864886f7
  211. 0d010101 05000382 010f0030 82010a02 82010100 b187841f c20c45f5 bcab2597
  212. a7ada23e 9cbaf6c1 39b88bca c2ac56c6 e5bb658e 444f4dce 6fed094a d4af4e10
  213. 9c688b2e 957b899b 13cae234 34c1f35b f3497b62 83488174 d188786c 0253f9bc
  214. 7f432657 5833833b 330a17b0 d04e9124 ad867d64 12dc744a 34a11d0a ea961d0b
  215. 15fca34b 3bce6388 d0f82d0c 948610ca b69a3dca eb379c00 48358629 5078e845
  216. 63cd1941 4ff595ec 7b98d4c4 71b350be 28b38fa0 b9539cf5 ca2c23a9 fd1406e8
  217. 18b49ae8 3c6e81fd e4cd3536 b351d369 ec12ba56 6e6f9b57 c58b14e7 0ec79ced
  218. 4a546ac9 4dc5bf11 b1ae1c67 81cb4455 33997f24 9b3f5345 7f861af3 3cfa6d7f
  219. 81f5b84a d3f58537 1cb5a6d0 09e4187b 384efa0f 02030100 01a38201 df308201
  220. db303406 082b0601 05050701 01042830 26302406 082b0601 05050730 01861868
  221. 7474703a 2f2f6f63 73702e76 65726973 69676e2e 636f6d30 12060355 1d130101
  222. ff040830 060101ff 02010030 70060355 1d200469 30673065 060b6086 480186f8
  223. 45010717 03305630 2806082b 06010505 07020116 1c687474 70733a2f 2f777777
  224. 2e766572 69736967 6e2e636f 6d2f6370 73302a06 082b0601 05050702 02301e1a
  225. 1c687474 70733a2f 2f777777 2e766572 69736967 6e2e636f 6d2f7270 61303406
  226. 03551d1f 042d302b 3029a027 a0258623 68747470 3a2f2f63 726c2e76 65726973
  227. 69676e2e 636f6d2f 70636133 2d67352e 63726c30 0e060355 1d0f0101 ff040403
  228. 02010630 6d06082b 06010505 07010c04 61305fa1 5da05b30 59305730 55160969
  229. 6d616765 2f676966 3021301f 30070605 2b0e0302 1a04148f e5d31a86 ac8d8e6b
  230. c3cf806a d448182c 7b192e30 25162368 7474703a 2f2f6c6f 676f2e76 65726973
  231. 69676e2e 636f6d2f 76736c6f 676f2e67 69663028 0603551d 11042130 1fa41d30
  232. 1b311930 17060355 04031310 56657269 5369676e 4d504b49 2d322d36 301d0603
  233. 551d0e04 1604140d 445c1653 44c1827e 1d20ab25 f40163d8 be79a530 1f060355
  234. 1d230418 30168014 7fd365a7 c2ddecbb f03009f3 4339fa02 af333133 300d0609
  235. 2a864886 f70d0101 05050003 82010100 0c8324ef ddc30cd9 589cfe36 b6eb8a80
  236. 4bd1a3f7 9df3cc53 ef829ea3 a1e697c1 589d756c e01d1b4c fad1c12d 05c0ea6e
  237. b2227055 d9203340 3307c265 83fa8f43 379bea0e 9a6c70ee f69c803b d937f47a
  238. 6decd018 7d494aca 99c71928 a2bed877 24f78526 866d8705 404167d1 273aeddc
  239. 481d22cd 0b0b8bbc f4b17bfd b499a8e9 762ae11a 2d876e74 d388dd1e 22c6df16
  240. b62b8214 0a945cf2 50ecafce ff62370d ad65d306 4153ed02 14c8b558 28a1ace0
  241. 5becb37f 954afb03 c8ad26db e6667812 4ad99f42 fbe198e6 42839b8f 8f6724e8
  242. 6119b5dd cdb50b26 058ec36e c4c875b8 46cfe218 065ea9ae a8819a47 16de0c28
  243. 6c2527b9 deb78458 c61f381e a4c4cb66
  244. quit
  245. crypto ca certificate chain ASDM_TrustPoint0
  246. certificate 094b639dd3e2485ece1cf974790ae215
  247. 30820546 3082042e a0030201 02021009 4b639dd3 e2485ece 1cf97479 0ae21530
  248. 0d06092a 864886f7 0d01010b 05003070 310b3009 06035504 06130255 53311530
  249. 13060355 040a130c 44696769 43657274 20496e63 31193017 06035504 0b131077
  250. 77772e64 69676963 6572742e 636f6d31 2f302d06 03550403 13264469 67694365
  251. 72742053 48413220 48696768 20417373 7572616e 63652053 65727665 72204341
  252. 301e170d 31343039 32333030 30303030 5a170d31 37303932 37313230 3030305a
  253. 306c310b 30090603 55040613 02444b31 0c300a06 03550408 13034659 4e311230
  254. 10060355 04071309 5376656e 64626f72 67311430 12060355 040a130b 4b656f66
  255. 69747420 412f5331 0b300906 0355040b 13024954 31183016 06035504 03130f6d
  256. 61696c2e 6b656f66 6974742e 646b3082 0122300d 06092a86 4886f70d 01010105
  257. 00038201 0f003082 010a0282 010100bc 7728c760 84ac5cb2 442900b1 b0806027
  258. 8e82d7ae e063648f 5ff8e96c 739b87fd 10aeb8e5 cb841146 079bb216 d342af25
  259. 104a7b4a 0877ab8d 8a46b415 2955a7ca 7f185e78 8e1fe08b a6ba5129 5a4a7f41
  260. 70203a90 5d49a593 e343d8f5 1cdbb5b2 1aa150c9 257f2f16 2a946cec 8aac3ad3
  261. d23eadb7 06b14219 abdfed27 923c6f6f 2faaeda6 288fac77 8d7a2f50 dff6537d
  262. a68171f0 f2b76718 e543f222 9e8b2e3f 2e49b5b6 a95acaa4 00c0eb54 a748df43
  263. df120788 37c5547e 0f9f33a6 961ab186 c53bf9c5 c0ed9a6c 6bf00acc b7db0d40
  264. 078908df 07511786 af2ac17c 6b3916a0 6eb26852 026de441 a5c483da c9d584f5
  265. 62dfb472 e9ecb17e c98b8fd8 06652102 03010001 a38201de 308201da 301f0603
  266. 551d2304 18301680 145168ff 90af0207 753cccd9 656462a2 12b85972 3b301d06
  267. 03551d0e 04160414 e2385747 60d646a2 de9cec1a 8fd10863 8b931bcd 301a0603
  268. 551d1104 13301182 0f6d6169 6c2e6b65 6f666974 742e646b 300e0603 551d0f01
  269. 01ff0404 030205a0 301d0603 551d2504 16301406 082b0601 05050703 0106082b
  270. 06010505 07030230 75060355 1d1f046e 306c3034 a032a030 862e6874 74703a2f
  271. 2f63726c 332e6469 67696365 72742e63 6f6d2f73 6861322d 68612d73 65727665
  272. 722d6732 2e63726c 3034a032 a030862e 68747470 3a2f2f63 726c342e 64696769
  273. 63657274 2e636f6d 2f736861 322d6861 2d736572 7665722d 67322e63 726c3042
  274. 0603551d 20043b30 39303706 09608648 0186fd6c 0101302a 30280608 2b060105
  275. 05070201 161c6874 7470733a 2f2f7777 772e6469 67696365 72742e63 6f6d2f43
  276. 50533081 8306082b 06010505 07010104 77307530 2406082b 06010505 07300186
  277. 18687474 703a2f2f 6f637370 2e646967 69636572 742e636f 6d304d06 082b0601
  278. 05050730 02864168 7474703a 2f2f6361 63657274 732e6469 67696365 72742e63
  279. 6f6d2f44 69676943 65727453 48413248 69676841 73737572 616e6365 53657276
  280. 65724341 2e637274 300c0603 551d1301 01ff0402 3000300d 06092a86 4886f70d
  281. 01010b05 00038201 0100244f a362f44c 8e41d8a5 cdde0868 7d928285 a3bba3b4
  282. 0549ced6 80960526 cbf7133a f8de2bce ccfc6882 8b2197cb bd690044 1c48b0e4
  283. 0492d053 db5a4aac 4bcdfa86 15958824 f00a8bda 846383be df19da51 679147a4
  284. 2efd74a4 647d9f5f d22621ac e47c736e 9442743b f3e381c3 d17760c5 63afd04f
  285. a4c4d044 86ae4236 2d96acd9 6fa20c50 66065809 9ecb2178 d2e1b4f5 17b887f8
  286. ff7856d0 024c9994 ad9d47bc 1d175a6e 2a57b48e cb5a73eb 44e499f6 5eb53e62
  287. 28d2c759 80ae4b07 cc45110c a9665b06 768085af 6ee8fe57 35f3d193 7e416aa1
  288. 81a67c41 3498f64c 475cb758 54fe082b 1f4cb169 75c1ac02 20d1743e 39faa0c7
  289. 93052055 2590e86f db78
  290. quit
  291. crypto ca certificate chain ASDM_TrustPoint1
  292. certificate 0f70efd323dc1622a672c3d76c5cff7e
  293. 30820535 3082041d a0030201 0202100f 70efd323 dc1622a6 72c3d76c 5cff7e30
  294. 0d06092a 864886f7 0d01010b 05003070 310b3009 06035504 06130255 53311530
  295. 13060355 040a130c 44696769 43657274 20496e63 31193017 06035504 0b131077
  296. 77772e64 69676963 6572742e 636f6d31 2f302d06 03550403 13264469 67694365
  297. 72742053 48413220 48696768 20417373 7572616e 63652053 65727665 72204341
  298. 301e170d 31373039 32393030 30303030 5a170d31 38313030 34313230 3030305a
  299. 3051310b 30090603 55040613 02444b31 12301006 03550407 13095376 656e6462
  300. 6f726731 14301206 0355040a 130b4b65 6f666974 7420412f 53311830 16060355
  301. 0403130f 6d61696c 2e6b656f 66697474 2e646b30 82012230 0d06092a 864886f7
  302. 0d010101 05000382 010f0030 82010a02 82010100 bc7728c7 6084ac5c b2442900
  303. b1b08060 278e82d7 aee06364 8f5ff8e9 6c739b87 fd10aeb8 e5cb8411 46079bb2
  304. 16d342af 25104a7b 4a0877ab 8d8a46b4 152955a7 ca7f185e 788e1fe0 8ba6ba51
  305. 295a4a7f 4170203a 905d49a5 93e343d8 f51cdbb5 b21aa150 c9257f2f 162a946c
  306. ec8aac3a d3d23ead b706b142 19abdfed 27923c6f 6f2faaed a6288fac 778d7a2f
  307. 50dff653 7da68171 f0f2b767 18e543f2 229e8b2e 3f2e49b5 b6a95aca a400c0eb
  308. 54a748df 43df1207 8837c554 7e0f9f33 a6961ab1 86c53bf9 c5c0ed9a 6c6bf00a
  309. ccb7db0d 40078908 df075117 86af2ac1 7c6b3916 a06eb268 52026de4 41a5c483
  310. dac9d584 f562dfb4 72e9ecb1 7ec98b8f d8066521 02030100 01a38201 e8308201
  311. e4301f06 03551d23 04183016 80145168 ff90af02 07753ccc d9656462 a212b859
  312. 723b301d 0603551d 0e041604 14e23857 4760d646 a2de9cec 1a8fd108 638b931b
  313. cd301a06 03551d11 04133011 820f6d61 696c2e6b 656f6669 74742e64 6b300e06
  314. 03551d0f 0101ff04 04030205 a0301d06 03551d25 04163014 06082b06 01050507
  315. 03010608 2b060105 05070302 30750603 551d1f04 6e306c30 34a032a0 30862e68
  316. 7474703a 2f2f6372 6c332e64 69676963 6572742e 636f6d2f 73686132 2d68612d
  317. 73657276 65722d67 312e6372 6c3034a0 32a03086 2e687474 703a2f2f 63726c34
  318. 2e646967 69636572 742e636f 6d2f7368 61322d68 612d7365 72766572 2d67312e
  319. 63726c30 4c060355 1d200445 30433037 06096086 480186fd 6c010130 2a302806
  320. 082b0601 05050702 01161c68 74747073 3a2f2f77 77772e64 69676963 6572742e
  321. 636f6d2f 43505330 08060667 810c0102 02308183 06082b06 01050507 01010477
  322. 30753024 06082b06 01050507 30018618 68747470 3a2f2f6f 6373702e 64696769
  323. 63657274 2e636f6d 304d0608 2b060105 05073002 86416874 74703a2f 2f636163
  324. 65727473 2e646967 69636572 742e636f 6d2f4469 67694365 72745348 41324869
  325. 67684173 73757261 6e636553 65727665 7243412e 63727430 0c060355 1d130101
  326. ff040230 00300d06 092a8648 86f70d01 010b0500 03820101 001b14ab b4ef65e2
  327. e1253c9c a1161cbf 8a35422b c4a2dae3 fec66e50 77d9c910 eb98e448 478d47c9
  328. 46aae4da 9c926881 41f8bf2b 9fbee621 a08f6b87 16bca141 174b4e13 1b89987a
  329. 5f115c40 d3df79cf 8f2a6a81 86f3604d 7411cc8c f2c45566 6207b191 695fe482
  330. 43d620a2 2e78ae70 63d2aa7c e9e13735 f1661751 d8fea80f 386d8216 0e726b63
  331. 728ae068 12071add a75cd6e0 ac98aa31 f1282ad9 2519ff9e 6402468d da592f8e
  332. e07651bf e83f038d 4268cd56 61b92ade 5b88d46b 1c9eef2b 98b9bda9 b64eb503
  333. 728b3124 e769b973 8fd4d465 a6ec922c 796876f2 374fc275 442a8284 e4285b9c
  334. 3ce1b365 e93d3973 17a39961 75ce847f 6e976930 8ae85d0b 2a
  335. quit
  336. crypto isakmp enable outside
  337. crypto isakmp policy 10
  338. authentication pre-share
  339. encryption 3des
  340. hash sha
  341. group 2
  342. lifetime 28800
  343. telnet 0.0.0.0 0.0.0.0 inside
  344. telnet timeout 5
  345. ssh 0.0.0.0 0.0.0.0 inside
  346. ssh 81.27.215.178 255.255.255.255 outside
  347. ssh timeout 5
  348. console timeout 0
  349. dhcpd auto_config outside
  350. !
  351. dhcpd address 192.168.100.10-192.168.100.137 iptelefon
  352. dhcpd dns 8.8.8.8 8.8.4.4 interface iptelefon
  353. dhcpd enable iptelefon
  354. !
  355.  
  356. threat-detection basic-threat
  357. threat-detection statistics access-list
  358. no threat-detection statistics tcp-intercept
  359. ntp server VM-DC-02 source inside
  360. ntp server 192.168.88.2
  361. ssl trust-point ASDM_TrustPoint1 inside
  362. ssl trust-point ASDM_TrustPoint1 outside
  363. webvpn
  364. port 8443
  365. enable inside
  366. enable outside
  367. dtls port 8443
  368. anyconnect-essentials
  369. svc image disk0:/anyconnect-win-3.1.10010-k9.pkg 1
  370. svc image disk0:/anyconnect-macosx-i386-3.1.14018-k9.pkg 2
  371. svc profiles Keofitt-profile disk0:/keofitt-profile.xml
  372. svc enable
  373. tunnel-group-list enable
  374. group-policy DfltGrpPolicy attributes
  375. dns-server value 192.168.88.19
  376. vpn-tunnel-protocol IPSec l2tp-ipsec svc webvpn
  377. split-tunnel-policy tunnelspecified
  378. split-tunnel-network-list value Split
  379. default-domain value keofitt.local
  380. group-policy GP-Soby-Site-to-Site internal
  381. group-policy GP-Soby-Site-to-Site attributes
  382. vpn-tunnel-protocol IPSec
  383. group-policy GP-ANYCONNECT-KAPACITET internal
  384. group-policy GP-ANYCONNECT-KAPACITET attributes
  385. dns-server value 192.168.88.19
  386. vpn-filter value vpn-kapacitet-filter
  387. vpn-tunnel-protocol svc
  388. split-tunnel-network-list value Split
  389. default-domain value keofitt.local
  390. split-dns value koefitt.local
  391. group-policy ANYCONECT internal
  392. group-policy ANYCONECT attributes
  393. wins-server none
  394. dns-server value 192.168.88.19
  395. vpn-tunnel-protocol svc
  396. split-tunnel-network-list value Split
  397. default-domain value keofitt.local
  398. split-dns value koefitt.local
  399. webvpn
  400. svc modules value vpngina
  401. svc profiles value Keofitt-profile
  402. username appbureauet password REVvHOTjkle/KMZY encrypted privilege 0
  403. username appbureauet attributes
  404. group-lock value TG-ANYCONNECT-KAPACITET
  405. service-type remote-access
  406. username admin password ZoIIhUPb6qEvVoe1 encrypted privilege 15
  407. username kapacitet2 password FJwzmDeVnIy7U/Vc encrypted
  408. username kapacitet2 attributes
  409. group-lock value TG-ANYCONNECT-KAPACITET
  410. service-type remote-access
  411. username kapacitet3 password FJwzmDeVnIy7U/Vc encrypted
  412. username kapacitet3 attributes
  413. group-lock value TG-ANYCONNECT-KAPACITET
  414. service-type remote-access
  415. username kapacitet password FJwzmDeVnIy7U/Vc encrypted privilege 0
  416. username kapacitet attributes
  417. group-lock value TG-ANYCONNECT-KAPACITET
  418. service-type remote-access
  419. username kapacitet4 password FJwzmDeVnIy7U/Vc encrypted
  420. username kapacitet4 attributes
  421. group-lock value TG-ANYCONNECT-KAPACITET
  422. service-type remote-access
  423. tunnel-group KEOFITT type remote-access
  424. tunnel-group KEOFITT general-attributes
  425. address-pool AnyConPool
  426. authentication-server-group KeoRadius
  427. default-group-policy ANYCONECT
  428. tunnel-group KEOFITT webvpn-attributes
  429. group-alias VPN enable
  430. group-url https://87.48.128.50/VPN enable
  431. tunnel-group 217.30.38.60 type ipsec-l2l
  432. tunnel-group 217.30.38.60 general-attributes
  433. default-group-policy GP-Soby-Site-to-Site
  434. tunnel-group 217.30.38.60 ipsec-attributes
  435. pre-shared-key *****
  436. peer-id-validate nocheck
  437. tunnel-group TG-ANYCONNECT-KAPACITET type remote-access
  438. tunnel-group TG-ANYCONNECT-KAPACITET general-attributes
  439. address-pool AnyConPool
  440. default-group-policy GP-ANYCONNECT-KAPACITET
  441. tunnel-group TG-ANYCONNECT-KAPACITET webvpn-attributes
  442. group-alias Kapacitet enable
  443. group-url https://87.48.128.50/Kapacitet enable
  444. !
  445. class-map inspection_default
  446. match default-inspection-traffic
  447. !
  448. !
  449. policy-map global_policy
  450. class inspection_default
  451. inspect icmp
  452. inspect http
  453. inspect ftp
  454. inspect tftp
  455. inspect dns
  456. inspect netbios
  457. inspect rsh
  458. inspect rtsp
  459. inspect pptp
  460. inspect ipsec-pass-thru
  461. !
  462. service-policy global_policy global
  463. prompt hostname context
  464. call-home reporting anonymous
  465. Cryptochecksum:825d3386791974e5d444ec0fab05101f
  466. : end
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement