Current configuration : 11251 bytes
!
! Last configuration change at 14:42:09 PCTime Sun Jul 15 2007 by iain
! NVRAM config last updated at 21:30:13 PCTime Sun Jul 15 2007 by iain
!
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname wan
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 3 log
security passwords min-length 6
logging buffered 51200
logging console critical
enable secret 5 zzz
!
aaa new-model
!
!
aaa group server radius rad_eap
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization ipmobile default group rad_pmip
aaa accounting network acct_methods start-stop group rad_acct
!
!
aaa session-id common
clock timezone PCTime 0
dot11 activity-timeout unknown default 3600
!
dot11 ssid LMP-AIR-2
authentication open
authentication key-management wpa
wpa-psk ascii 7 xxx
!
no ip source-route
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 81.187.153.246
!
ip dhcp pool Wireless
import all
network 81.187.153.240 255.255.255.248
default-router 81.187.153.241
dns-server 81.187.153.230
lease 7
!
!
ip tcp synwait-time 10
no ip bootp server
ip domain name duckend.org.uk
ip name-server 217.169.20.20
ip name-server 217.169.20.21
ip ssh time-out 60
ip ssh authentication-retries 2
ip inspect name DEFAULT100 cuseeme
ip inspect name DEFAULT100 ftp
ip inspect name DEFAULT100 h323
ip inspect name DEFAULT100 icmp
ip inspect name DEFAULT100 netshow
ip inspect name DEFAULT100 rcmd
ip inspect name DEFAULT100 realaudio
ip inspect name DEFAULT100 rtsp
ip inspect name DEFAULT100 esmtp
ip inspect name DEFAULT100 sqlnet
ip inspect name DEFAULT100 streamworks
ip inspect name DEFAULT100 tftp
ip inspect name DEFAULT100 tcp
ip inspect name DEFAULT100 udp
ip inspect name DEFAULT100 vdolive
ip inspect name CHILD100 https
ip inspect name CHILD100 http java-list 2 urlfilter
ip urlfilter exclusive-domain permit .shockwave.com
ip urlfilter exclusive-domain permit .apple.com
ip urlfilter exclusive-domain permit .gallifreyone.com
ip urlfilter exclusive-domain permit .runescape.com
ip urlfilter exclusive-domain permit .pokemoncrater.com
ip urlfilter exclusive-domain permit .battleon.com
ip urlfilter exclusive-domain permit .stream.aol.com
ip urlfilter exclusive-domain permit .thawte.com
ip urlfilter exclusive-domain permit .puzzlepirates.com
ip urlfilter exclusive-domain permit .windowsupdate.com
ip urlfilter exclusive-domain permit .cricinfo.com
ip urlfilter exclusive-domain permit .giantsleepover.com
ip urlfilter exclusive-domain permit .miniclip.com
ip urlfilter exclusive-domain permit .public-trust.com
ip urlfilter exclusive-domain permit .bmsnet.hostinguk.com
ip urlfilter exclusive-domain permit .microsoft.com
ip urlfilter exclusive-domain permit 62.49.219.106
ip urlfilter exclusive-domain permit .yetisports.org
ip urlfilter exclusive-domain permit .noradsanta.org
ip urlfilter exclusive-domain permit .globalsign.net
ip urlfilter exclusive-domain permit .apple.com.edgesuite.net
ip urlfilter exclusive-domain permit .stanwickweather.org.uk
ip urlfilter exclusive-domain permit .bedmod.co.uk
ip urlfilter exclusive-domain permit .stickcricket.co.uk
ip urlfilter exclusive-domain permit .bbc.co.uk
!
multilink bundle-name authenticated
!
crypto pki trustpoint TP-self-signed-2728462622
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2728462622
revocation-check none
rsakeypair TP-self-signed-2728462622
!
!
crypto pki certificate chain TP-self-signed-2728462622
certificate self-signed 01
3082024A 308201B3 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32373238 34363236 3232301E 170D3036 31323038 32323431
33315A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 37323834
36323632 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100BB7B 8B7C4F8F 590744EE C86E4B88 098E6149 366ABB8F B01DE66D 29A3D26A
2C298311 FD17076E 3637468B 49A968B0 4285D42B 370C52E8 B989A8FD 2DC46E68
C2B1BCED 47579D96 86EDF1D2 0FD1629D 05DBA41F 200ADDED B041EA45 42255C86
33C32A4D F5DA2CE5 A59066ED AB5E496C 4F0E01A4 50AB2316 3D715131 8029C21B
C2F90203 010001A3 72307030 0F060355 1D130101 FF040530 030101FF 301D0603
551D1104 16301482 1277616E 2E647563 6B656E64 2E6F7267 2E756B30 1F060355
1D230418 30168014 793C942E 8619AC49 90B9A667 1BE2828C 2F6656F6 301D0603
551D0E04 16041479 3C942E86 19AC4990 B9A6671B E2828C2F 6656F630 0D06092A
864886F7 0D010104 05000381 81000F2E B3A27BAE 5F3EC51D 7A1EB81E 702D69B3
9D1056B2 0BA81DF4 9CE3FED2 9B3735B1 9393810C 56B04E0E F0CFC844 D7E37279
6BEDFCB7 8032E5D5 C4816330 996DB5BD D0B996B4 7556AED7 732A7F32 7207456A
B10728A0 35B48C2D F0E3281E 4EBE83DB 37E48807 61BBD643 DB7A07D1 9D41252D
FD1F3840 413D3DB9 5CBAE2D0 D4FE
quit
!
!
username iain privilege 15 secret 5 ddd
!
!
!
bridge irb
!
!
!
interface ATM0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
shutdown
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
description $FW_OUTSIDE$$ES_WAN$
shutdown
no snmp trap link-status
pvc 0/38
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
switchport access vlan 10
switchport trunk native vlan 10
switchport mode trunk
!
interface FastEthernet3
switchport access vlan 30
!
interface Dot11Radio0
no ip address
!
encryption mode ciphers tkip
!
ssid LMP-AIR-2
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
channel 2462
station-role root
world-mode dot11d country GB both
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Vlan1
ip address 81.187.153.225 255.255.255.240
!
interface Vlan30
ip address 192.168.10.1 255.255.255.0
ip access-group sdm_vlan30_in in
ip nat inside
ip inspect CHILD100 in
ip virtual-reassembly
!
interface Vlan20
no ip address
bridge-group 1
!
interface Vlan10
ip address 172.16.2.2 255.255.255.0
ip nat outside
ip virtual-reassembly
!
interface Dialer0
description $FW_OUTSIDE$
ip address negotiated
ip access-group 101 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip nbar protocol-discovery
ip flow ingress
ip flow egress
ip nat outside
ip inspect DEFAULT100 out
ip virtual-reassembly
encapsulation ppp
ip route-cache flow
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname xxx
ppp chap password 7 yyy
!
interface BVI1
description $ES_LAN$$FW_INSIDE$
ip address 81.187.153.241 255.255.255.248
ip access-group 100 in
ip tcp adjust-mss 1412
!
ip route 0.0.0.0 0.0.0.0 172.16.2.1 permanent
ip route 81.187.153.224 255.255.255.240 Vlan1 permanent
ip route 81.187.153.240 255.255.255.248 Vlan20 permanent
ip route 172.16.2.0 255.255.255.0 Vlan10 permanent
ip route 192.168.10.0 255.255.255.0 Vlan30 permanent
!
ip flow-cache timeout active 1
ip flow-export version 5
ip flow-export destination 81.187.153.230 9996
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip dns server
ip nat inside source static network 192.168.10.2 81.187.153.250 /31
!
ip access-list extended sdm_vlan30_in
remark SDM_ACL Category=1
remark Auto generated by SDM for NTP (123) 0.uk.pool.ntp.org
permit ip any any
!
logging trap debugging
access-list 2 remark JavaPermit
access-list 2 remark SDM_ACL Category=1
access-list 2 permit any
access-list 100 remark auto generated by Cisco SDM Express firewall configuration
access-list 100 remark SDM_ACL Category=1
access-list 100 permit ip any any
access-list 101 remark auto generated by Cisco SDM Express firewall configuration
access-list 101 remark SDM_ACL Category=1
dialer-list 1 protocol ip permit
snmp-server community xxx RO
snmp-server ifindex persist
no cdp run
!
!
!
radius-server attribute 32 include-in-access-req format %h
radius-server vsa send accounting
!
control-plane
!
bridge 1 protocol ieee
bridge 1 route ip
banner login ^CAuthorized access only!
Disconnect IMMEDIATELY if you are not an authorized user!^C
!
line con 0
no modem enable
transport output telnet
line aux 0
transport output telnet
line vty 0 4
privilege level 15
transport input telnet ssh
!
scheduler max-task-time 5000
scheduler allocate 4000 1000
scheduler interval 500
end