rendered paste bodyPIX Version 7.0(4) <context>
!
hostname NWOPS
names
name 10.1.56.1 OSS1
name 10.1.56.2 OSS2
name 10.1.56.3 OSS3
name 10.1.56.41 ACS-Server1-NMS
name 10.1.56.42 ACS-Server2-NMS
name 10.1.56.43 SNMP-Server1-NMS
name 10.1.56.44 SNMP-Server2-NMS
name 10.1.57.41 ACS-Server1-NOC
name 10.1.57.42 ACS-Server2-NOC
name 10.1.57.43 SNMP-Server1-NOC
name 10.1.57.44 SNMP-Server2-NOC
name 10.1.58.20 BAC-Server1
name 10.1.58.41 ACS-Server1
name 10.1.58.42 ACS-Server2
name 10.1.58.43 SNMP-Server1
name 10.1.71.20 BAC-Server1-BOSSOOB
name 10.1.71.241 ACS-Server1-BOSSOOB
name 10.1.71.242 ACS-Server2-BOSSOOB
name 10.1.71.243 SNMP-Server1-BOSSOOB
name 10.1.71.244 SNMP-Server2-BOSSOOB
name 10.1.71.245 SNMP-Poller1-BOSSOOB
name 10.1.120.241 ACS-Server1-RAN
name 10.1.120.242 ACS-Server2-RAN
name 10.1.120.243 SNMP-Server1-RAN
name 10.1.120.244 SNMP-Server2-RAN
name 10.1.120.245 SNMP-Poller1-RAN
name 10.195.11.14 BAC-Server1-NWCORP
name 67.109.29.141 ACS-Server1-Outside
name 67.109.29.142 ACS-Server2-Outside
name 67.109.29.143 SNMP-Server1-Outside
name 67.109.29.144 SNMP-Server2-Outside
name 67.109.29.145 SNMP-Poller1-Outside
name 10.1.55.0 NMS_Lab-Net
name 10.1.56.0 NMS-Net
name 10.1.57.0 NOC-Net
name 10.1.58.0 NMC-Net
name 10.1.70.0 BOSSOOB-Net
name 10.1.76.0 NWOPS_Shared-Net
name 10.1.120.0 RAN-Net
name 10.1.121.0 GON-Net
name 10.1.140.0 IPW-Net
name 10.1.176.0 Nortel_OOB-Net
name 10.195.11.0 BOSS_Dev-Net
name 67.109.29.0 Outside-Net
name 67.109.29.192 GoNetwork-Net
!
interface GigabitEthernet0.800
description NMS Network
nameif NMS
security-level 80
ip address 10.1.56.254 255.255.255.0
!
interface GigabitEthernet0.801
description NOC Network
nameif NOC
security-level 90
ip address 10.1.57.254 255.255.255.0
!
interface GigabitEthernet0.802
description NMC Network
nameif inside
security-level 100
ip address 10.1.58.254 255.255.254.0
!
interface GigabitEthernet0.805
description NMS Lab Network
nameif NMS-Lab
security-level 60
ip address 10.1.55.254 255.255.255.0
!
interface GigabitEthernet1.814
description NWOPS-to-Core_Services Bridge Network
nameif NWOPS-Shared
security-level 30
ip address 10.1.76.1 255.255.255.192
!
interface GigabitEthernet2.840
description Nortel OOB Network
nameif Nortel-OOB
security-level 20
ip address 10.1.176.253 255.255.255.0
!
interface GigabitEthernet3.910
description Frontside Public Network
nameif outside
security-level 0
ip address 67.109.29.130 255.255.255.192
!
interface GigabitEthernet3.920
description BOSS Development Network
nameif BOSS-Dev
security-level 10
ip address 10.195.11.13 255.255.255.128
!
interface GigabitEthernet3.940
description IPW Management Network
nameif IPW
security-level 20
ip address 10.1.140.253 255.255.255.0
!
interface GigabitEthernet4
description RAN Network
nameif RAN
security-level 50
ip address 10.1.120.253 255.255.255.0
!
interface Ethernet0
description BOSS Out-Of-Band Management Network
nameif BOSSOOB
security-level 40
ip address 10.1.71.254 255.255.254.0
!
passwd ihaQR2o533jPad8a encrypted
object-group network IPW-Subnets
network-object IPW-Net 255.255.255.0
network-object Outside-Net 255.255.255.0
object-group service PDC-Server-TCP tcp
port-object eq 135
port-object eq 445
port-object eq 88
port-object eq ldap
port-object range 22100 22250
object-group service PDC-Server-UDP udp
port-object eq domain
port-object eq 88
port-object eq 389
port-object eq 445
object-group service NMS-Server-TCP tcp
port-object eq 162
port-object range 165 168
port-object eq 8080
object-group service NMS-Server-UDP udp
port-object range snmp snmptrap
object-group network PDC-Servers
network-object host ACS-Server1
network-object host ACS-Server2
object-group network ACS-Servers-RAN
network-object host ACS-Server1-RAN
network-object host ACS-Server2-RAN
object-group network PDC-Servers-NMS
network-object host ACS-Server1-NMS
network-object host ACS-Server2-NMS
object-group network PDC-Servers-NOC
network-object host ACS-Server1-NOC
network-object host ACS-Server2-NOC
object-group network RVPN-Hosts
network-object host 10.1.59.127
network-object host 10.1.59.128
network-object 10.1.59.192 255.255.255.240
access-list acl_NOC extended permit icmp any any
access-list acl_NOC extended permit tcp NOC-Net 255.255.255.0 object-group PDC-Servers-NOC object-group PDC-Server-TCP
access-list acl_NOC extended permit udp NOC-Net 255.255.255.0 object-group PDC-Servers-NOC object-group PDC-Server-UDP
access-list acl_NOC extended permit tcp NOC-Net 255.255.255.0 host SNMP-Server1-NOC object-group NMS-Server-TCP
access-list acl_NOC extended permit udp NOC-Net 255.255.255.0 host SNMP-Server1-NOC object-group NMS-Server-UDP
access-list acl_NOC extended deny ip any object-group PDC-Servers-NOC
access-list acl_NOC extended deny ip any host SNMP-Server1-NOC
access-list acl_NOC extended permit ip any any
access-list acl_NMS extended permit icmp any any
access-list acl_NMS extended permit tcp NMS-Net 255.255.255.0 object-group PDC-Servers-NMS object-group PDC-Server-TCP
access-list acl_NMS extended permit udp NMS-Net 255.255.255.0 object-group PDC-Servers-NMS object-group PDC-Server-UDP
access-list acl_NMS extended permit tcp NMS-Net 255.255.255.0 host SNMP-Server1-NMS object-group NMS-Server-TCP
access-list acl_NMS extended permit udp NMS-Net 255.255.255.0 host SNMP-Server1-NMS object-group NMS-Server-UDP
access-list acl_NMS extended deny ip any object-group PDC-Servers-NMS
access-list acl_NMS extended deny ip any host SNMP-Server1-NMS
access-list acl_NMS extended permit ip any any
access-list acl_RAN extended permit tcp RAN-Net 255.255.255.0 object-group ACS-Servers-RAN eq tacacs
access-list acl_RAN extended permit udp RAN-Net 255.255.254.0 object-group ACS-Servers-RAN eq domain
access-list acl_RAN extended permit udp RAN-Net 255.255.254.0 object-group ACS-Servers-RAN range 1812 1813
access-list acl_RAN extended permit udp RAN-Net 255.255.254.0 host SNMP-Poller1-RAN eq snmptrap
access-list acl_RAN extended permit tcp RAN-Net 255.255.254.0 host SNMP-Poller1-RAN eq ftp
access-list acl_RAN extended permit udp RAN-Net 255.255.254.0 host SNMP-Poller1-RAN eq tftp
access-list acl_RAN extended permit icmp any any
access-list acl_BOSSOOB extended permit tcp BOSSOOB-Net 255.255.254.0 host ACS-Server1-BOSSOOB eq tacacs
access-list acl_BOSSOOB extended permit tcp BOSSOOB-Net 255.255.254.0 host ACS-Server2-BOSSOOB eq tacacs
access-list acl_BOSSOOB extended permit udp BOSSOOB-Net 255.255.254.0 host SNMP-Poller1-BOSSOOB eq snmptrap
access-list acl_BOSSOOB extended permit tcp BOSSOOB-Net 255.255.254.0 10.1.70.192 255.255.255.224 range 6000 6010
access-list acl_BOSSOOB extended permit tcp BOSSOOB-Net 255.255.254.0 host BAC-Server1-BOSSOOB range 7937 9936
access-list acl_BOSSOOB extended permit icmp any any
access-list acl_IPW extended permit ip any any
access-list acl_NMS-Lab extended permit ip any any
access-list acl_NMS-Lab extended permit icmp any any
access-list acl_outside extended permit tcp Outside-Net 255.255.255.0 host ACS-Server1-Outside eq tacacs
access-list acl_outside extended permit tcp Outside-Net 255.255.255.0 host ACS-Server2-Outside eq tacacs
access-list acl_outside extended permit udp Outside-Net 255.255.255.0 host SNMP-Poller1-Outside eq snmptrap
access-list acl_outside extended permit tcp GoNetwork-Net 255.255.255.192 host SNMP-Poller1-Outside eq ftp
access-list acl_outside extended permit tcp 1.1.1.0 255.255.255.0 host SNMP-Poller1-Outside eq ftp
access-list acl_outside extended permit udp 67.109.29.128 255.255.255.192 host SNMP-Server2-Outside eq 3560
access-list acl_outside extended permit icmp any any
access-list acl_NWOPS-Shared extended permit ip any any
access-list acl_BOSS-Dev extended permit tcp BOSS_Dev-Net 255.255.255.128 host BAC-Server1-NWCORP range 7937 9936
access-list acl_BOSS-Dev extended permit icmp any any
access-list acl_inside extended permit icmp any any
access-list acl_inside extended permit udp object-group RVPN-Hosts host 10.1.105.1 eq domain
access-list acl_inside extended permit udp object-group RVPN-Hosts host 10.1.105.11 eq ntp
access-list acl_inside extended deny ip object-group RVPN-Hosts 10.1.105.0 255.255.255.0
access-list acl_inside extended permit ip any any
access-list acl_Nortel-OOB extended permit ip any any
pager lines 24
logging enable
logging buffered debugging
mtu NMS 1500
mtu NOC 1500
mtu inside 1500
mtu BOSSOOB 1500
mtu outside 1500
mtu IPW 1500
mtu RAN 1500
mtu BOSS-Dev 1500
mtu NWOPS-Shared 1500
mtu NMS-Lab 1500
mtu Nortel-OOB 1500
no asdm history enable
arp timeout 14400
global (NMS) 1 10.1.56.250
global (NMS) 2 10.1.56.249
global (NOC) 1 10.1.57.250
global (BOSSOOB) 1 10.1.71.250
global (BOSSOOB) 2 10.1.71.249
global (BOSSOOB) 3 10.1.71.248
global (outside) 2 67.109.29.188
global (outside) 3 67.109.29.187
global (outside) 1 interface
global (outside) 4 67.109.29.189
global (outside) 5 67.109.29.186
global (IPW) 1 10.1.140.250
global (IPW) 2 10.1.140.249
global (IPW) 3 10.1.140.248
global (RAN) 1 10.1.120.250
global (RAN) 2 10.1.120.249
global (RAN) 3 10.1.120.248
global (RAN) 5 10.1.120.247
global (BOSS-Dev) 1 interface
global (NWOPS-Shared) 1 10.1.76.62
global (NWOPS-Shared) 2 10.1.76.61
global (NWOPS-Shared) 3 10.1.76.60
global (NWOPS-Shared) 5 10.1.76.59
global (NMS-Lab) 1 10.1.55.250
global (Nortel-OOB) 1 10.1.176.250
nat (NMS) 3 NMS-Net 255.255.255.0
nat (NOC) 2 NOC-Net 255.255.255.0
nat (inside) 1 NMC-Net 255.255.254.0
nat (IPW) 4 IPW-Net 255.255.255.0
nat (NMS-Lab) 5 NMS_Lab-Net 255.255.255.0
static (inside,NOC) ACS-Server1-NOC ACS-Server1 netmask 255.255.255.255 dns tcp 1000 200
static (inside,NOC) ACS-Server2-NOC ACS-Server2 netmask 255.255.255.255 dns tcp 1000 200
static (inside,NOC) SNMP-Server1-NOC SNMP-Server1 netmask 255.255.255.255 dns tcp 1000 200
static (inside,NMS) ACS-Server1-NMS ACS-Server1 netmask 255.255.255.255 dns tcp 1000 200
static (inside,NMS) ACS-Server2-NMS ACS-Server2 netmask 255.255.255.255 dns tcp 1000 200
static (inside,NMS) SNMP-Server1-NMS SNMP-Server1 netmask 255.255.255.255 dns tcp 1000 200
static (inside,RAN) ACS-Server1-RAN ACS-Server1 netmask 255.255.255.255 tcp 200 200
static (inside,RAN) ACS-Server2-RAN ACS-Server2 netmask 255.255.255.255 tcp 200 200
static (inside,BOSSOOB) ACS-Server1-BOSSOOB ACS-Server1 netmask 255.255.255.255 tcp 200 200
static (inside,BOSSOOB) ACS-Server2-BOSSOOB ACS-Server2 netmask 255.255.255.255 tcp 200 200
static (inside,BOSSOOB) BAC-Server1-BOSSOOB BAC-Server1 netmask 255.255.255.255 tcp 500 200
static (inside,BOSSOOB) 10.1.70.192 10.1.59.192 netmask 255.255.255.255 tcp 200 200
static (inside,BOSS-Dev) BAC-Server1-NWCORP BAC-Server1 netmask 255.255.255.255 tcp 200 200
static (inside,outside) ACS-Server1-Outside ACS-Server1 netmask 255.255.255.255 tcp 200 200
static (inside,outside) ACS-Server2-Outside ACS-Server2 netmask 255.255.255.255 tcp 200 200
static (inside,outside) SNMP-Server1-Outside SNMP-Server1 netmask 255.255.255.255 tcp 200 200
static (NOC,outside) SNMP-Server2-Outside SNMP-Server2-NOC netmask 255.255.255.255 tcp 1000 200
static (NMS,RAN) SNMP-Poller1-RAN OSS3 netmask 255.255.255.255 tcp 1000 200
static (NMS,BOSSOOB) SNMP-Poller1-BOSSOOB OSS3 netmask 255.255.255.255 tcp 1000 200
static (NMS,outside) SNMP-Poller1-Outside OSS3 netmask 255.255.255.255 tcp 1000 200
access-group acl_NMS in interface NMS
access-group acl_NOC in interface NOC
access-group acl_inside in interface inside
access-group acl_BOSSOOB in interface BOSSOOB
access-group acl_outside in interface outside
access-group acl_IPW in interface IPW
access-group acl_RAN in interface RAN
access-group acl_BOSS-Dev in interface BOSS-Dev
access-group acl_NWOPS-Shared in interface NWOPS-Shared
access-group acl_NMS-Lab in interface NMS-Lab
access-group acl_Nortel-OOB in interface Nortel-OOB
route BOSSOOB 10.1.76.128 255.255.255.192 10.1.71.253 1
route BOSSOOB 10.1.88.0 255.255.254.0 10.1.71.253 1
route BOSSOOB 10.1.72.0 255.255.252.0 10.1.71.253 1
route outside 0.0.0.0 0.0.0.0 67.109.29.129 1
route IPW 10.1.136.0 255.255.255.0 10.1.140.254 1
route RAN GON-Net 255.255.255.0 10.1.120.254 1
route BOSS-Dev 10.195.0.0 255.255.240.0 10.195.11.1 1
route NWOPS-Shared 10.1.105.0 255.255.255.0 10.1.76.2 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00
timeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server TACACS+ host ACS-Server1
key
aaa-server TACACS+ host ACS-Server2
key
aaa authentication telnet console TACACS+ LOCAL
aaa authentication ssh console TACACS+ LOCAL
aaa authentication enable console TACACS+ LOCAL
snmp-server host NMS SNMP-Server2-NMS poll community nwbroadband
snmp-server host inside SNMP-Server1 community nwbroadband
snmp-server enable traps snmp authentication linkup linkdown coldstart
snmp-server enable traps syslog
snmp-server enable traps entity config-change fru-insert fru-remove
snmp-server enable traps remote-access session-threshold-exceeded
telnet 0.0.0.0 0.0.0.0 inside
telnet timeout 5
ssh NOC-Net 255.255.255.0 NOC
ssh 0.0.0.0 0.0.0.0 inside
ssh 0.0.0.0 0.0.0.0 outside
ssh timeout 5
dhcpd address 10.1.58.129-10.1.58.142 inside
dhcpd dns ACS-Server2 ACS-Server1
dhcpd lease 86400
dhcpd ping_timeout 750
dhcpd domain nwops.net
dhcpd enable inside
!
class-map class_http
match port tcp eq 8080
class-map inspection_default
match default-inspection-traffic
!
!
policy-map global_policy
class inspection_default
inspect dns maximum-length 512
inspect ftp
inspect h323 h225
inspect h323 ras
inspect netbios
inspect rsh
inspect rtsp
inspect skinny
inspect esmtp
inspect sqlnet
inspect sunrpc
inspect tftp
inspect sip
inspect xdmcp
class class_http
inspect http
!
service-policy global_policy global
Cryptochecksum:2d16e30a3cbc249cf6df3cfa242a870c