sho ver Cisco PIX Firewall Version 6.3(5)125 Cisco PIX Device Manager Version 3.0(4) Compiled on Thu 01-Feb-07 15:13 by morlee secondstory up 2 hours 28 mins Hardware: PIX-501, 16 MB RAM, CPU Am5x86 133 MHz Flash E28F640J3 @ 0x3000000, 8MB BIOS Flash E28F640J3 @ 0xfffd8000, 128KB 0: ethernet0: address is 0011.212d.3bc6, irq 9 1: ethernet1: address is 0011.212d.3bc7, irq 10 Licensed Features: Failover: Disabled VPN-DES: Enabled VPN-3DES-AES: Enabled Maximum Physical Interfaces: 2 Maximum Interfaces: 2 Cut-through Proxy: Enabled Guards: Enabled URL-filtering: Enabled Inside Hosts: 50 Throughput: Unlimited IKE peers: 10 This PIX has a Restricted (R) license. Serial Number: 808212584 (0x302c5868) Running Activation Key: 0xca78ff2a 0x37033f1a 0xa98cb031 0xc2be5656 Configuration last modified by enable_15 at 13:02:43.223 CST Tue Sep 9 2008 secondstory# sho conf : Saved : Written by enable_15 at 12:55:55.830 CST Tue Sep 9 2008 PIX Version 6.3(5)125 interface ethernet0 100full interface ethernet1 100full nameif ethernet0 outside security0 nameif ethernet1 inside security100 enable password BQUPipTrIIbitSr0 encrypted passwd 2KFQnbNIdI.2KYOU encrypted hostname secondstory domain-name secondstorypromotions.com clock timezone CST -6 fixup protocol dns maximum-length 512 fixup protocol ftp 21 fixup protocol h323 h225 1720 fixup protocol h323 ras 1718-1719 fixup protocol http 80 fixup protocol rsh 514 fixup protocol rtsp 554 fixup protocol sip 5060 fixup protocol sip udp 5060 fixup protocol skinny 2000 fixup protocol smtp 25 fixup protocol sqlnet 1521 fixup protocol tftp 69 names name 10.2.1.6 SHAMPOO name 10.2.1.4 SOAP name 10.2.1.3 LOTION name 10.2.1.2 SUNSCREEN access-list out permit ip any any access-list 111 permit ip 10.5.5.0 255.255.255.0 10.2.1.0 255.255.255.0 pager lines 24 mtu outside 1500 mtu inside 1500 ip address outside dhcp setroute ip address inside 10.5.5.254 255.255.255.0 ip audit info action alarm ip audit attack action alarm pdm history enable arp timeout 14400 global (outside) 1 interface nat (inside) 1 0.0.0.0 0.0.0.0 0 0 access-group out in interface inside timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00 timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00 timeout sip-disconnect 0:02:00 sip-invite 0:03:00 timeout uauth 0:05:00 absolute aaa-server TACACS+ protocol tacacs+ aaa-server TACACS+ max-failed-attempts 3 aaa-server TACACS+ deadtime 10 aaa-server RADIUS protocol radius aaa-server RADIUS max-failed-attempts 3 aaa-server RADIUS deadtime 10 aaa-server LOCAL protocol local no snmp-server location no snmp-server contact snmp-server community public no snmp-server enable traps floodguard enable sysopt connection permit-ipsec crypto ipsec transform-set DYN-TS esp-3des esp-sha-hmac crypto map IPSEC 10 ipsec-isakmp crypto map IPSEC 10 match address 111 crypto map IPSEC 10 set peer 216.203.117.82 crypto map IPSEC 10 set transform-set DYN-TS crypto map IPSEC interface outside isakmp enable outside isakmp key ******** address 216.203.117.82 netmask 255.255.255.255 isakmp policy 10 authentication pre-share isakmp policy 10 encryption 3des isakmp policy 10 hash sha isakmp policy 10 group 1 isakmp policy 10 lifetime 86400 telnet 10.5.5.0 255.255.255.0 inside telnet timeout 10 ssh timeout 5 console timeout 0 dhcpd address 10.5.5.100-10.5.5.227 inside dhcpd dns 192.168.0.1 205.171.3.26 dhcpd lease 3600 dhcpd ping_timeout 750 dhcpd enable inside terminal width 80 Cryptochecksum:fc7cce7dfb81516be9b3f076e71bf7c7 secondstory#