spare-msfc#sh conf
Using 19960 out of 522200 bytes
!
! Last configuration change at 10:28:57 edt Wed Jun 7 2006 by paolo
! NVRAM config last updated at 11:07:24 edt Wed Jun 7 2006 by paolo
!
version 12.1
no service pad
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
no service prompt config
!
hostname spare-msfc
!
boot system flash bootflash:c6msfc2-dsv-mz.121-26.E3.bin
boot system flash bootflash:c6msfc2-dsv-mz.121-26.E1.bin
aaa new-model
aaa authentication login default local group tacacs+
aaa authentication enable default group tacacs+ enable none
aaa authorization exec default local group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
enable password 7 0520570C2A01635A
!
username noc password 7 080A1D4D02542844
username hello password 7 11011C091B1D
clock timezone est -5
clock summer-time edt recurring
ip subnet-zero
no ip source-route
no ip rcmd domain-lookup
ip rcmd rcp-enable
ip rcmd rsh-enable
ip rcmd remote-host quan 132.206.27.3 quan enable
ip rcmd remote-host jacek 132.206.27.3 jacek enable
ip rcmd remote-host noc 132.206.27.3 noc enable
ip rcmd remote-host noc 132.216.216.211 noc enable
ip rcmd remote-host noc 132.216.216.212 noc enable
ip rcmd remote-host noc 132.216.216.213 noc enable
ip rcmd remote-host noc 132.216.216.214 noc enable
ip rcmd remote-host noc 132.216.216.215 noc enable
ip rcmd remote-host noc 132.216.216.216 noc enable
ip rcmd remote-host quan 132.216.216.213 quan enable
ip rcmd remote-host noc 132.216.216.217 noc enable
ip rcmd remote-host jacek 132.216.216.217 jacek enable
ip wccp 97 password 7 04481A1306255E5B05
!
!
ip name-server 132.206.44.21
ip name-server 132.216.44.21
!
ip multicast-routing
ip multicast cache-headers
ip sap cache-timeout 30
ip accounting-threshold 10240
appletalk routing
ipx routing 00d0.004f.cbfc
ipx internal-network 9030
mls rp ipx
redundancy
 high-availability
 single-router-mode
module ContentSwitchingModule 6
 vlan 33 server
  ip address 132.216.8.79 255.255.255.192
  gateway 132.216.8.65
!
 vlan 32 client
  ip address 132.216.8.79 255.255.255.192
!
 serverfarm TEST
  nat server
  no nat client
  predictor leastconns
!
!
!
!
interface Loopback0
 ip address 132.216.249.31 255.255.255.255
 no ip mroute-cache

Address of inside global address

interface Loopback1
 ip address 192.197.121.105 255.255.255.255
!
interface Vlan1
 ip address 132.216.215.1 255.255.255.0
 no ip mroute-cache
!
interface Vlan10
 description "paolo testing, TEMP MOVED TO BURNSIDE1 VLAN3"
 ip address 132.216.11.193 255.255.255.192
 ip access-group vlan10_out out
 ip helper-address 132.216.130.2
 no ip redirects
 ip local-proxy-arp
 ip route-cache same-interface
 shutdown
!
NAT INSIDE ADDRESS:

interface Vlan25
 description "NAT test inside"
 ip address 172.21.1.1 255.255.255.0
 ip helper-address 132.216.130.2
 ip nat inside
!
interface Vlan26
 description "nat testing, Paolo"
 ip address 10.1.2.1 255.255.255.0
 ip nat inside
 shutdown
!
interface Vlan32
 ip address 132.216.8.65 255.255.255.192
 ip helper-address 132.216.130.2
 no ip redirects
 ip dhcp relay information trusted
 ip dvmrp unicast-routing
 no ip dvmrp auto-summary
 no ip mroute-cache
 ip sap listen
!
interface Vlan40
 description "Security_ASA_appliance_testing"
 ip address 132.216.63.37 255.255.255.252
!
interface Vlan125
 description "dars 2821 testing"
 ip address 198.168.188.1 255.255.255.0
!
interface Vlan241
 no ip address
 shutdown
!
interface Vlan500
 description "Spiro HSRP test"
 ip address 10.3.3.1 255.255.255.0
 no ip redirects
 shutdown
 standby 100 ip 10.3.3.3
 standby 100 priority 150
 standby 100 preempt
 standby 101 ip 10.3.3.4
 standby 101 priority 50
 standby 101 preempt
!
interface Vlan750
 ip address 172.31.0.1 255.255.255.0
 no ip redirects
 no ip unreachables
 ip pim sparse-mode
!
interface Vlan850
 description Just_A_Test
 no ip address
 shutdown
!
interface Vlan946
 ip address 132.216.216.159 255.255.255.254
 no ip redirects
 no ip unreachables
!
interface Vlan947
 ip address 132.216.216.156 255.255.255.254
 ip pim sparse-mode

IP NAT OUTSIDE ADDRESS;

interface Vlan992
 description "connection to burnisde-core"
 ip address 132.216.216.181 255.255.255.252
 ip nat outside
 ip pim sparse-mode
 ip sap listen
 appletalk cable-range 55992-55992 55992.141
 appletalk zone McGill Backbone
 ipx encapsulation ARPA
 ipx network 84D8D8B4
!
router ospf 1
 log-adjacency-changes
 area 1.1.1.1 stub no-summary
 redistribute static metric 1 subnets
 redistribute rip metric 1 subnets
 passive-interface Vlan1
 network 132.206.65.160 0.0.0.15 area 0
 network 132.206.253.0 0.0.0.63 area 0
 network 132.216.63.36 0.0.0.3 area 0
 network 132.216.201.0 0.0.0.255 area 0
 network 132.216.216.0 0.0.0.255 area 0
 network 132.216.249.0 0.0.0.255 area 0
 network 172.31.0.0 0.0.255.255 area 1.1.1.1

ADVERTIZING THE "inside global address"

 network 192.197.121.104 0.0.0.3 area 0
 network 198.168.188.0 0.0.0.255 area 0
 default-metric 1
!
router rip
 redistribute ospf 1 metric 1
 network 132.206.0.0
 network 132.216.0.0
 default-metric 1
 distribute-list 3 out ospf 1
 distribute-list 3 out
 distribute-list 2 in
 distance 255
!

Defining the NAT POOL:

ip nat pool mypatpool 192.197.121.105 192.197.121.105 netmask 255.255.255.252
ip nat inside source list 24 pool mypatpool overload
ip nat inside source static 10.1.1.7 132.216.63.201
ip classless
no ip forward-protocol udp tftp
no ip forward-protocol udp time
no ip forward-protocol udp netbios-ns
no ip forward-protocol udp netbios-dgm
no ip forward-protocol udp tacacs
no ip http server
!
!
ip access-list extended WebAthen
ip access-list extended paolo
 permit tcp any host 132.206.251.65 eq 22
ip access-list extended rogue_dhcp
 permit udp host 132.216.130.2 any eq bootps
 permit udp host 132.216.130.2 any eq bootpc
 deny   udp any any eq bootps
 deny   udp any any eq bootpc
 permit ip any any
ip access-list extended template_in
 permit udp any any eq bootps
 permit udp any any eq bootpc
 deny   ip 0.0.0.0 255.255.255.0 any
 deny   ip 0.0.0.255 255.255.255.0 any
 deny   ip any 0.0.0.0 255.255.255.0
 permit udp any any eq rip
 deny   ip any 0.0.0.255 255.255.255.0
 permit ip 132.216.130.0 0.0.0.255 any
 deny   ip any any
ip access-list extended template_out
 permit udp any any eq bootps
 permit udp any any eq bootpc
 deny   ip 0.0.0.0 255.255.255.0 any
 deny   ip 0.0.0.255 255.255.255.0 any
 deny   ip any 0.0.0.0 255.255.255.0
 permit udp any eq rip any
 deny   ip any 0.0.0.255 255.255.255.0
 deny   ip 132.216.130.0 0.0.0.255 any
 permit ip any any

NAT ACCESS LISTS

access-list 24 permit 172.21.1.0 0.0.0.255

!
snmp-server engineID local 000000090200000021000000
snmp-server community booktoad RW 21
snmp-server community mcgill RO 21
snmp-server community public view v1default RO
snmp-server host 132.206.27.3 public
!
!
ipx router eigrp 100
 network 84D8D8B4
 log-neighbor-changes
!
!
ipx router nlsp area1
 area-address 0 0
 log-adjacency-changes
!
!
ipx router rip
 no network 84D8D8B4
!
!
!
tacacs-server host 132.216.216.211
tacacs-server host 132.206.27.3
tacacs-server timeout 7
tacacs-server key vortex
!
banner motd ^C
**                    Use of this is governed by the
**        "Code of Conduct for Users of McGill Computing Facilities"
**          "McGill Computing Facilities Management Guidelines"
**                    Unauthorized use is prohibited.
^C
!
line con 0
line vty 0 4
 access-class 11 in
 access-class 10 out
 exec-timeout 0 0
 password 7 045802150C2E
 logging synchronous
!
ntp clock-period 17180064
ntp peer 192.35.82.50
ntp server 132.202.199.1
ntp peer 128.59.64.60
!
end
 
Current configuration : 202 bytes
!
interface Vlan25
 description "NAT test inside"
 ip address 172.21.1.1 255.255.255.0
 ip access-group vlan25_in in
 ip access-group vlan25_out out
 ip helper-address 132.216.130.2
 ip nat inside
end
 
spare-msfc#           sh run int loop
spare-msfc#           sh run int loopback 1
Building configuration...
 
Current configuration : 71 bytes
!
interface Loopback1
 ip address 192.197.121.105 255.255.255.255
end
 
spare-msfc#sh run int vlan 992
Building configuration...
 
Current configuration : 286 bytes
!

Vlan 992 used as the nat outside address;

interface Vlan992
 description "connection to burnisde-core"
 ip address 132.216.216.181 255.255.255.252
 ip nat outside
 ip pim sparse-mode
 ip sap listen
 appletalk cable-range 55992-55992 55992.141
 appletalk zone McGill Backbone
 ipx encapsulation ARPA
 ipx network 84D8D8B4
end
 
spare-msfc#q
Connection closed by foreign host.