PIX Version 6.3(5)
interface ethernet0 auto
interface ethernet1 auto
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password encrypted
passwd encrypted
hostname qo-londongate
domain-name mdigitalm.com
clock timezone GMT 0
clock summer-time CDT recurring
fixup protocol dns maximum-length 512
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
names
access-list outbound_on_inside permit ip any any
access-list nonat permit ip 10.100.10.0 255.255.255.0 10.200.0.0 255.255.0.0
access-list nonat permit ip 10.100.10.0 255.255.255.0 10.204.0.0 255.255.0.0
access-list nonat permit ip 10.100.10.0 255.255.255.0 192.168.10.0 255.255.255.0
access-list encrypt-acl permit ip 10.100.10.0 255.255.255.0 10.200.0.0 255.255.0.0
access-list encrypt-acl permit ip 10.100.10.0 255.255.255.0 10.204.0.0 255.255.0.0
access-list encrypt-acl permit ip 10.100.10.0 255.255.255.0 192.168.10.0 255.255.255.0
access-list inbound_on_outside permit ip any any
pager lines 24
logging buffered debugging
icmp permit any outside
icmp permit any inside
mtu outside 1500
mtu inside 1500
ip address outside 88.96.245.73 255.255.255.248
ip address inside 10.100.10.1 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
pdm logging informational 100
pdm history enable
arp timeout 14400
global (outside) 73 interface
global (outside) 74 88.96.245.74 netmask 255.255.255.248
global (outside) 75 88.96.245.75 netmask 255.255.255.248
global (outside) 76 88.96.245.76 netmask 255.255.255.248
nat (inside) 74 10.100.10.0 255.255.255.0 0 0
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
access-group inbound_on_outside in interface outside
access-group outbound_on_inside in interface inside
route outside 0.0.0.0 0.0.0.0 88.96.245.78 1
timeout xlate 0:05:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout sip-disconnect 0:02:00 sip-invite 0:03:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server TACACS+ max-failed-attempts 3
aaa-server TACACS+ deadtime 10
aaa-server RADIUS protocol radius
aaa-server RADIUS max-failed-attempts 3
aaa-server RADIUS deadtime 10
aaa-server LOCAL protocol local
http server enable
http 10.100.10.0 255.255.255.0 inside
http 10.100.10.42 255.255.255.255 inside
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
floodguard enable
sysopt connection permit-ipsec
isakmp enable outside
isakmp policy 10 authentication rsa-sig
isakmp policy 10 encryption des
isakmp policy 10 hash sha
isakmp policy 10 group 1
isakmp policy 10 lifetime 86400
vpngroup neospire idle-time 1800
telnet timeout 5
ssh 10.204.0.0 255.255.0.0 inside
ssh 10.100.10.0 255.255.255.0 inside
ssh timeout 10
console timeout 0
terminal width 80
Cryptochecksum:2325e1ac8d8f30942e0ddd8a6a55283e
qo-londongate(config)# sh xlate
8 in use, 141 most used
PAT Global 88.96.245.74(1048) Local 10.100.10.42(1566)
PAT Global 88.96.245.74(1043) Local 10.100.10.42(1559)
PAT Global 88.96.245.74(1042) Local 10.100.10.42(1558)
PAT Global 88.96.245.74(1045) Local 10.100.10.42(1561)
PAT Global 88.96.245.74(1044) Local 10.100.10.42(1560)
PAT Global 88.96.245.74(1047) Local 10.100.10.42(1563)
PAT Global 88.96.245.74(1046) Local 10.100.10.42(1562)
PAT Global 88.96.245.74(1025) Local 10.100.10.42(4863)
qo-londongate(config)#
qo-londongate(config)# sh conn
44 in use, 138 most used
TCP out 82.34.146.117:53164 in 10.100.10.42:1586 idle 0:00:07 Bytes 0 flags saA
TCP out 82.34.146.117:53164 in 10.100.10.42:1584 idle 0:00:08 Bytes 0 flags saA
TCP out 80.42.60.135:29482 in 10.100.10.42:1568 idle 0:00:26 Bytes 0 flags saA
TCP out 80.42.60.135:29482 in 10.100.10.42:1561 idle 0:00:28 Bytes 0 flags saA
TCP out 81.233.65.62:65213 in 10.100.10.42:1558 idle 0:00:31 Bytes 0 flags saA
TCP out 88.162.237.87:64248 in 10.100.10.42:1570 idle 0:00:26 Bytes 0 flags saA
TCP out 88.162.237.87:64248 in 10.100.10.42:1563 idle 0:00:28 Bytes 0 flags saA
TCP out 212.139.180.116:62520 in 10.100.10.42:1597 idle 0:00:02 Bytes 0 flags saA
TCP out 212.139.180.116:62520 in 10.100.10.42:1599 idle 0:00:01 Bytes 0 flags saA
TCP out 85.227.177.133:28723 in 10.100.10.42:1589 idle 0:00:04 Bytes 0 flags saA
TCP out 85.227.177.133:28723 in 10.100.10.42:1594 idle 0:00:03 Bytes 0 flags saA
UDP out 212.23.6.100:53 in 10.100.10.42:4863 idle 0:00:19 flags -
TCP out 213.204.171.80:27136 in 10.100.10.42:1600 idle 0:00:00 Bytes 0 flags saA
TCP out 82.34.146.117:443 in 10.100.10.42:1588 idle 0:00:05 Bytes 0 flags saA
TCP out 88.222.181.32:58765 in 10.100.10.42:1583 idle 0:00:09 Bytes 0 flags saA
TCP out 88.222.181.32:58765 in 10.100.10.42:1585 idle 0:00:07 Bytes 0 flags saA
TCP out 82.34.146.117:80 in 10.100.10.42:1593 idle 0:00:03 Bytes 0 flags saA
UDP out 212.23.6.100:53 in 10.100.10.42:1582 idle 0:00:07 flags -
TCP out 86.20.139.2:43935 in 10.100.10.42:1571 idle 0:00:26 Bytes 0 flags saA
TCP out 86.20.139.2:43935 in 10.100.10.42:1573 idle 0:00:24 Bytes 0 flags saA
TCP out 84.64.150.44:51357 in 10.100.10.42:1592 idle 0:00:04 Bytes 0 flags saA
Syslog logging: enabled
Facility: 20
Timestamp logging: disabled
Standby logging: disabled
Console logging: disabled
Monitor logging: disabled
Buffer logging: level debugging, 261 messages logged
Trap logging: disabled
History logging: disabled
Device ID: disabled
translation from inside:10.100.10.42/1598 to outside:88.96.245.74/1079
302013: Built outbound TCP connection 336 for outside:85.197.149.204/443 (85.197.149.204/443) to inside:10.100.10.42/1598 (88.96.245.74/1079)
305011: Built dynamic TCP translation from inside:10.100.10.42/1599 to outside:88.96.245.74/1080
302013: Built outbound TCP connection 337 for outside:212.139.180.116/62520 (212.139.180.116/62520) to inside:10.100.10.42/1599 (88.96.245.74/1080)
305011: Built dynamic TCP translation from inside:10.100.10.42/1600 to outside:88.96.245.74/1081
302013: Built outbound TCP connection 338 for outside:213.204.171.80/27136 (213.204.171.80/27136) to inside:10.100.10.42/1600 (88.96.245.74/1081)
710005: UDP request discarded from 10.100.10.42/137 to inside:10.100.10.255/netbios-ns
305011: Built dynamic TCP translation from inside:10.100.10.42/1601 to outside:88.96.245.74/1082
302013: Built outbound TCP connection 339 for outside:85.197.149.204/80 (85.197.149.204/80) to inside:10.100.10.42/1601 (88.96.245.74/1082)
710005: UDP request discarded from 10.100.10.42/137 to inside:10.100.10.255/netbios-ns
305011: Built dynamic TCP translation from inside:10.100.10.42/1602 to outside:88.96.245.74/1083
302013: Built outbound TCP connection 340 for outside:85.24.189.25/1714 (85.24.189.25/1714) to inside:10.100.10.42/1602 (88.96.245.74/1083)
305011: Built dynamic TCP translation from inside:10.100.10.42/1603 to outside:88.96.245.74/1084
302013: Built outbound TCP connection 341 for outside:213.204.171.80/27136 (213.204.171.80/27136) to inside:10.100.10.42/1603 (88.96.245.74/1084)