Current configuration : 6166 bytes ! ! Last configuration change at 12:13:55 PCTime Mon Jul 23 2007 by admin ! NVRAM config last updated at 11:51:32 PCTime Mon Jul 23 2007 by cisco ! version 12.4 no service pad service tcp-keepalives-in service tcp-keepalives-out service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone service password-encryption service sequence-numbers ! hostname Router871_Fundadores ! boot-start-marker boot-end-marker ! security authentication failure rate 3 log security passwords min-length 6 logging buffered 51200 debugging logging console critical enable secret 5 $xxx ! no aaa new-model ! resource policy ! clock timezone PCTime 9 30 ip subnet-zero no ip source-route ip cef ! ! no ip dhcp use vrf connected ip dhcp excluded-address 192.10.10.244 ! ip dhcp pool sdm-pool1 import all network 192.10.10.0 255.255.255.0 default-router 192.10.10.244 ! ! ip tcp synwait-time 10 no ip bootp server ip domain name gruponissantoreo.com ip name-server 200.22.148.193 ip name-server 200.33.148.201 ip ssh time-out 60 ip ssh authentication-retries 2 ip inspect name SDM_LOW cuseeme ip inspect name SDM_LOW dns ip inspect name SDM_LOW ftp ip inspect name SDM_LOW h323 ip inspect name SDM_LOW https ip inspect name SDM_LOW icmp ip inspect name SDM_LOW imap ip inspect name SDM_LOW pop3 ip inspect name SDM_LOW netshow ip inspect name SDM_LOW rcmd ip inspect name SDM_LOW realaudio ip inspect name SDM_LOW rtsp ip inspect name SDM_LOW esmtp ip inspect name SDM_LOW sqlnet ip inspect name SDM_LOW streamworks ip inspect name SDM_LOW tftp ip inspect name SDM_LOW tcp ip inspect name SDM_LOW udp ip inspect name SDM_LOW vdolive ! ! crypto pki trustpoint TP-self-signed-4010785119 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-4010785119 revocation-check none rsakeypair TP-self-signed-4010785119 ! ! crypto pki certificate chain TP-self-signed-4010785119 certificate self-signed 01 3082024F 308201B8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030 31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 69666963 6174652D 34303130 37383531 3139301E 170D3037 30373232 30323330 35365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D34 30313037 38353131 3930819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 8100B59C FA85D434 CF4EF148 551E796A B91C6887 750BDA5B F650AB6D 978BE3FC 9F1547AA DB5544E3 11D7578E 611CA824 F1F6D616 F1604570 448F53FE 14337AAE 98559565 8B68FE7D DA8218F8 6F80C469 61B9A415 75CEC0B2 A48F54D7 1312F584 3BAA496C B21558B0 A0A5D94A 17B7BB3B C7C56450 36A42DE1 76B6D67E 3F5925FD CFEB0203 010001A3 77307530 0F060355 1D130101 FF040530 030101FF 30220603 551D1104 1B301982 17796F75 726E616D 652E796F 7572646F 6D61696E 2E636F6D 301F0603 551D2304 18301680 1419511F 7A090811 9E831A4A 4C3BB69F 4BF1611D 89301D06 03551D0E 04160414 19511F7A 0908119E 831A4A4C 3BB69F4B F1611D89 300D0609 2A864886 F70D0101 04050003 81810085 95BB2A0A 4C7B1FAD 29F2A3FA 90380114 FECED959 7A953E52 748E5A7D 4A017347 EFD7A214 09C811B5 6CC00C99 5742B387 1AEC6F95 1ADF24EC CA6DEC07 6B84A7A3 12FC6424 BBB12CDE CB638E82 B24CE55B 813F099D CC05E506 E9FBAE89 0B1CCA28 7EEB8A17 1FD86882 E3261D45 01A62249 8C249692 EF7F545F 90A38C9A 6A5449 quit username admin privilege 15 secret 5 $xxx ! ! ! ! ! ! interface Loopback0 no ip address ! interface FastEthernet0 ! interface FastEthernet1 ! interface FastEthernet2 ! interface FastEthernet3 ! interface FastEthernet4 description $ES_WAN$$FW_OUTSIDE$ ip address 100.100.100.2 255.255.255.0 ip access-group 101 in ip verify unicast reverse-path no ip redirects no ip unreachables no ip proxy-arp ip nat outside ip inspect SDM_LOW out ip virtual-reassembly ip route-cache flow duplex auto speed auto ! interface Vlan1 description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$ES_LAN$$FW_INSIDE$ ip address 192.10.10.207 255.255.255.0 ip access-group 100 in no ip redirects no ip unreachables no ip proxy-arp ip nat inside ip virtual-reassembly ip route-cache flow ip tcp adjust-mss 1452 ! ip classless ip route 0.0.0.0 0.0.0.0 100.100.100.1 ! ! ip http server ip http authentication local ip http secure-server ip http timeout-policy idle 60 life 86400 requests 10000 ip nat inside source list 1 interface FastEthernet4 overload ! logging trap debugging access-list 1 remark INSIDE_IF=Vlan1 access-list 1 remark SDM_ACL Category=2 access-list 1 permit 192.10.10.0 0.0.0.255 access-list 100 remark auto generated by SDM firewall configuration access-list 100 remark SDM_ACL Category=1 access-list 100 permit ip 100.100.100.0 0.0.0.255 any access-list 100 permit ip host 255.255.255.255 any access-list 100 permit ip 127.0.0.0 0.255.255.255 any access-list 100 permit ip any any access-list 101 remark auto generated by SDM firewall configuration access-list 101 remark SDM_ACL Category=1 access-list 101 permit udp host 200.33.148.201 eq domain host 100.100.100.2 access-list 101 permit udp host 200.22.148.193 eq domain host 100.100.100.2 access-list 101 permit ip 192.10.10.0 0.0.0.255 any access-list 101 permit icmp any host 100.100.100.2 echo-reply access-list 101 permit icmp any host 100.100.100.2 time-exceeded access-list 101 permit icmp any host 100.100.100.2 unreachable access-list 101 permit ip 10.0.0.0 0.255.255.255 any access-list 101 permit ip 172.16.0.0 0.15.255.255 any access-list 101 permit ip 192.168.0.0 0.0.255.255 any access-list 101 permit ip 127.0.0.0 0.255.255.255 any access-list 101 permit ip host 255.255.255.255 any access-list 101 permit ip host 0.0.0.0 any access-list 101 permit ip any any log no cdp run ! ! control-plane ! banner login ^CAuthorized access only! Disconnect IMMEDIATELY if you are not an authorized user!^C ! line con 0 login local no modem enable transport output telnet line aux 0 login local transport output telnet line vty 0 4 privilege level 15 login local transport input telnet ssh ! scheduler max-task-time 5000 scheduler allocate 4000 1000 scheduler interval 500 end