!
version 12.4
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname B10S
!
boot-start-marker
boot-end-marker
!
!
aaa new-model
!
!
!
aaa session-id common
!
resource policy
!
clock timezone GMT -5
clock summer-time DST date Apr 3 2005 7:00 Oct 30 2005 6:00
no network-clock-participate slot 1
no network-clock-participate wic 0
ip cef
!
!
ip inspect max-incomplete high 1100
ip inspect max-incomplete low 900
ip inspect one-minute high 1100
ip inspect one-minute low 900
ip inspect name Ethernet_NAT ftp timeout 3600
ip inspect name Ethernet_NAT tcp timeout 3600
ip inspect name Ethernet_NAT http java-list 51 timeout 3600
ip inspect name Ethernet_NAT smtp timeout 3600
ip inspect name Ethernet_NAT udp timeout 15
ip inspect name Ethernet_NAT cuseeme timeout 3600
ip inspect name Ethernet_NAT h323 timeout 3600
ip inspect name Ethernet_NAT rcmd timeout 3600
ip inspect name Ethernet_NAT realaudio timeout 3600
ip inspect name Ethernet_NAT streamworks timeout 3600
ip inspect name Ethernet_NAT vdolive timeout 3600
ip inspect name Ethernet_NAT sqlnet timeout 3600
ip inspect name Ethernet_NAT tftp timeout 30
ip inspect name Ethernet_BVI smtp timeout 3600
ip inspect name Ethernet_BVI tcp timeout 3600
ip inspect name Ethernet_BVI udp timeout 15
!
!
no ip domain lookup
ip domain name maj3stic.com
!
!
!
!
no spanning-tree vlan 1
!
!
!
bridge irb
!
!
interface FastEthernet0/0
description Internet
no ip address
no ip proxy-arp
duplex auto
speed auto
bridge-group 32
!
interface FastEthernet0/1
description DMZ
no ip address
duplex auto
speed auto
bridge-group 32
!
interface FastEthernet1/0
!
interface FastEthernet1/1
!
interface FastEthernet1/2
!
interface FastEthernet1/3
!
interface FastEthernet1/4
!
interface FastEthernet1/5
!
interface FastEthernet1/6
!
interface FastEthernet1/7
!
interface FastEthernet1/8
!
interface FastEthernet1/9
!
interface FastEthernet1/10
!
interface FastEthernet1/11
!
interface FastEthernet1/12
!
interface FastEthernet1/13
!
interface FastEthernet1/14
!
interface FastEthernet1/15
!
interface Vlan1
description NAT
ip address 192.168.1.254 255.255.255.0
ip access-group 102 in
ip access-group 103 out
ip inspect Ethernet_NAT in
ip nat inside
ip virtual-reassembly
!
interface BVI32
ip address 70.166.2.177 255.255.255.192
ip access-group 150 in
no ip redirects
ip inspect Ethernet_BVI in
ip nat outside
ip virtual-reassembly
!
ip route 0.0.0.0 0.0.0.0 70.166.2.129 name Gateway
!
no ip http server
no ip http secure-server
ip nat pool n1 70.166.2.177 70.166.2.177 netmask 255.255.255.192
ip nat pool n2 70.166.2.178 70.166.2.178 netmask 255.255.255.192
ip nat pool n3 70.166.2.179 70.166.2.179 netmask 255.255.255.192
ip nat pool n4 70.166.2.181 70.166.2.181 netmask 255.255.255.192
ip nat inside source list 101 pool n1 overload
ip nat inside source list 102 pool n2 overload
ip nat inside source list 103 pool n3 overload
ip nat inside source list 104 pool n4 overload
!
logging trap debugging
logging facility user
logging 192.168.1.1
access-list 101 permit ip 0.0.0.1 255.255.255.0 any
access-list 102 permit ip 192.168.1.0 0.0.0.255 any
access-list 102 permit ip 0.0.0.250 255.255.255.0 any
access-list 103 permit tcp 70.166.2.0 0.0.0.255 host 192.168.1.0 eq domain
access-list 103 permit ip 0.0.0.200 255.255.255.0 any
access-list 103 permit icmp any any log
access-list 104 permit ip 192.168.1.0 0.0.0.254 any
access-list 104 permit tcp any any established
access-list 150 permit udp any any eq domain
access-list 150 permit udp any eq domain any range 1000 65000
access-list 150 permit tcp any any eq domain
access-list 150 permit tcp any eq domain any range 1000 65000
access-list 150 permit tcp 70.166.2.52 0.0.0.192 eq www any
access-list 150 permit tcp 70.166.2.52 0.0.0.192 eq smtp any
access-list 150 permit tcp 70.166.2.52 0.0.0.192 range 1000 65000 any eq smtp
access-list 150 permit tcp any 70.166.2.52 0.0.0.192 eq smtp
access-list 150 permit udp 70.166.2.52 0.0.0.192 range 1000 65000 any eq ntp
access-list 150 permit udp any 70.166.2.52 0.0.0.192 eq ntp
access-list 150 permit icmp any any log
access-list 150 permit udp any host 70.166.2.180 eq ntp
access-list 150 permit tcp host 70.166.2.180 eq www any
access-list 150 permit tcp host 70.166.2.180 eq smtp any
access-list 150 permit tcp host 70.166.2.180 range 1000 65000 any eq smtp
access-list 150 permit tcp any host 70.166.2.180 eq smtp
access-list 150 permit udp host 70.166.2.180 range 1000 65000 any eq ntp
snmp-server community public RO
snmp-server packetsize 4096
snmp-server queue-length 100
snmp-server enable traps envmon
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps ospf retransmit
snmp-server enable traps ospf lsa
snmp-server enable traps ospf cisco-specific state-change nssa-trans-change
snmp-server enable traps ospf cisco-specific state-change shamlink interface
snmp-server enable traps ospf cisco-specific state-change shamlink neighbor
snmp-server enable traps ospf cisco-specific errors
snmp-server enable traps ospf cisco-specific retransmit
snmp-server enable traps ospf cisco-specific lsa
snmp-server enable traps cpu threshold
snmp-server host 192.168.1.250 public
!
!
control-plane
!
bridge 32 protocol ieee
bridge 32 route ip
!
!
!!
ntp logging
ntp clock-period 17208319
ntp server 67.159.5.116
!
end