C3620#sh run
Building configuration...
Current configuration : 6052 bytes
!
version 12.3
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname C3620
!
boot-start-marker
boot system slot0:c3620-ik9o3s6-mz.123-22.bin
boot system slot1:c3620-ik9o3s6-mz.123-22.bin
boot system tftp c3620-ik9o3s6-mz.123-22.bin 192.168.0.4
boot-end-marker
!
logging buffered 51200 warnings
!
aaa new-model
!
!
aaa session-id common
ip subnet-zero
no ip source-route
!
!
ip cef
ip domain name themattreid.com
ip name-server 192.168.0.4
ip name-server 64.105.172.26
ip dhcp excluded-address 192.168.0.1 192.168.0.100
ip dhcp excluded-address 192.168.1.1 192.168.1.100
ip dhcp binding cleanup interval 10
!
ip dhcp pool dhcp-pool
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
dns-server 192.168.0.4
lease 7
!
ip dhcp pool dhcp-pool-1
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 192.168.0.4
lease infinite
!
no ip bootp server
ip inspect audit-trail
ip inspect max-incomplete low 500
ip inspect max-incomplete high 1000
ip inspect one-minute low 500
ip inspect one-minute high 1000
ip inspect name SPI-0 tcp
ip inspect name SPI-0 udp
ip inspect name SPI-0 icmp
ip inspect name SPI-0 ftp
ip inspect name SPI-0 rcmd
ip inspect name SPI-0 smtp
ip inspect name SPI-0 fragment maximum 256 timeout 1
ip inspect name SPI-0 http
ip audit attack action alarm drop reset
ip audit po max-events 100
ip audit protected 192.168.0.4
ip audit smtp spam 50
ip audit name INFO info list 99 action alarm
ip audit name ATTACK attack list 98 action alarm drop reset
!
!
!
!
!
!
!
!
!
!
!
!
!
!
ip tcp synwait-time 100
ip ssh time-out 60
ip ssh authentication-retries 2
!
class-map match-any SDMScave-FastEthernet0/1
match protocol napster
match protocol fasttrack
match protocol gnutella
class-map match-any SDMTrans-FastEthernet0/1
match protocol citrix
match protocol finger
match protocol notes
match protocol novadigm
match protocol pcanywhere
match protocol secure-telnet
match protocol sqlnet
match protocol sqlserver
match protocol ssh
match protocol telnet
match protocol xwindows
class-map match-any SDMVoice-FastEthernet0/1
match protocol rtp audio
class-map match-any SDMSVideo-FastEthernet0/1
match protocol cuseeme
match protocol netshow
match protocol rtspplayer
match protocol streamwork
match protocol vdolive
class-map match-any SDMIVideo-FastEthernet0/1
match protocol rtp video
class-map match-any SDMManage-FastEthernet0/1
match protocol dhcp
match protocol dns
match protocol imap
match protocol kerberos
match protocol ldap
match protocol secure-imap
match protocol secure-ldap
match protocol snmp
match protocol socks
match protocol syslog
class-map match-any SDMRout-FastEthernet0/1
match protocol bgp
match protocol egp
match protocol eigrp
match protocol rip
match protocol rsvp
class-map match-any SDMBulk-FastEthernet0/1
match protocol exchange
match protocol ftp
match protocol irc
match protocol nntp
match protocol pop3
match protocol printer
match protocol secure-ftp
match protocol secure-irc
match protocol secure-nntp
match protocol secure-pop3
match protocol smtp
match protocol tftp
!
!
policy-map SDM-Pol-FastEthernet0/1
class SDMManage-FastEthernet0/1
bandwidth remaining percent 8
set dscp cs2
class SDMVoice-FastEthernet0/1
priority percent 49
set dscp ef
class SDMRout-FastEthernet0/1
bandwidth remaining percent 8
set dscp cs6
class SDMTrans-FastEthernet0/1
set dscp af21
bandwidth remaining percent 50
class SDMBulk-FastEthernet0/1
bandwidth remaining percent 34
set dscp default
!
!
!
!
!
!
interface Null0
no ip unreachables
!
interface FastEthernet0/0
ip address dhcp
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip route-cache flow
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 192.168.0.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip nbar protocol-discovery
ip inspect SPI-0 in
ip inspect SPI-0 out
ip audit ATTACK in
ip audit ATTACK out
ip route-cache flow
duplex auto
speed auto
service-policy output SDM-Pol-FastEthernet0/1
!
interface FastEthernet1/0
ip address 192.168.1.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip route-cache flow
duplex auto
speed auto
!
router rip
version 2
redistribute connected
redistribute static
network 192.168.0.0
network 192.168.1.0
!
ip nat inside source list 120 interface FastEthernet0/0 overload
ip nat inside source static tcp 192.168.0.4 9601 interface FastEthernet0/0 9601
ip nat inside source static tcp 192.168.0.4 9600 interface FastEthernet0/0 9600
ip nat inside source static tcp 192.168.0.104 2234 interface FastEthernet0/0 2234
ip nat inside source static tcp 192.168.0.4 9599 interface FastEthernet0/0 9599
no ip http server
no ip http secure-server
ip classless
!
!
logging facility syslog
logging 192.168.0.4
access-list 98 deny 192.168.0.0 0.0.255.255
access-list 98 permit any
access-list 99 deny 192.168.0.0 0.0.255.255
access-list 99 permit any
access-list 120 permit ip 192.168.0.0 0.0.255.255 any
access-list 125 permit ip 192.168.0.0 0.0.0.255 any
no cdp run
!
snmp-server community public RO
!
!
!
gateway
!
!
banner login ^CWelcome to here. Go away.^C
!
line con 0
transport output none
line aux 0
transport output none
line vty 0 4
transport input none
line vty 5 15
access-class 125 in
privilege level 15
transport input ssh
!
scheduler allocate 4000 1000
ntp server 198.144.202.250
ntp server 140.192.21.130
!
end