ASA Version 7.2(3) ! hostname ciscoasa domain-name default.domain.invalid enable password 8Ry2YjIyt7RRXU24 encrypted names ! interface Vlan1 nameif inside security-level 100 ip address 192.168.100.1 255.255.255.0 ! interface Vlan2 nameif outside security-level 0 pppoe client vpdn group eu ip address pppoe setroute ! interface Vlan3 nameif gast security-level 40 ip address 192.168.123.1 255.255.255.0 ! interface Ethernet0/0 switchport access vlan 2 ! interface Ethernet0/1 ! interface Ethernet0/2 ! interface Ethernet0/3 ! interface Ethernet0/4 ! interface Ethernet0/5 switchport trunk allowed vlan 3 switchport mode trunk speed 100 duplex half ! interface Ethernet0/6 switchport access vlan 3 ! interface Ethernet0/7 switchport access vlan 3 ! passwd 2KFQnbNIdI.2KYOU encrypted ftp mode passive dns server-group DefaultDNS domain-name default.domain.invalid same-security-traffic permit inter-interface same-security-traffic permit intra-interface access-list gast_access_in extended permit ip any any access-list gast_access_in extended permit ip any 192.168.100.0 255.255.255.0 pager lines 24 logging enable logging asdm informational mtu inside 1500 mtu outside 1500 mtu gast 1500 no failover monitor-interface inside monitor-interface outside monitor-interface gast icmp unreachable rate-limit 1 burst-size 1 asdm image disk0:/asdm-523.bin no asdm history enable arp timeout 14400 global (outside) 1 interface nat (inside) 1 0.0.0.0 0.0.0.0 static (inside,gast) 192.168.100.0 192.168.100.0 netmask 255.255.255.0 static (gast,inside) 192.168.123.0 192.168.123.0 netmask 255.255.255.0 access-group gast_access_in in interface gast route outside 0.0.0.0 0.0.0.0 83.189.96.1 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout uauth 0:05:00 absolute http server enable http 192.168.100.0 255.255.255.0 inside no snmp-server location no snmp-server contact snmp-server enable traps snmp authentication linkup linkdown coldstart telnet timeout 5 ssh timeout 5 console timeout 0 vpdn group eu request dialout pppoe vpdn group eu localname eu vpdn group eu ppp authentication chap vpdn username eu password ********* store-local dhcpd auto_config outside ! dhcpd address 192.168.100.2-192.168.100.254 inside ! dhcpd address 192.168.123.10-192.168.123.20 gast dhcpd enable gast ! ! class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters message-length maximum 512 policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect rsh inspect rtsp inspect esmtp inspect sqlnet inspect skinny inspect sunrpc inspect xdmcp inspect sip inspect netbios inspect tftp inspect icmp ! service-policy global_policy global prompt hostname context Cryptochecksum:33227505133f627c6fa2ffb95d34deed : end asdm image disk0:/asdm-523.bin no asdm history enable