.6 is a cisco 1800 series router
Yes I have access to it
Sh Run
logging buffered 1000000 informational
logging reload debugging
logging rate-limit console 5
no logging console
enable secret 5 $1$tcXv$wtK8ERTYUIO_)(*&%^&*(DovQnfMYwcuCQ0LjX1
!
aaa new-model
!
!
aaa group server tacacs+ BiHTac
server 10.250.100.142
!
aaa authentication login BiHTac group BiHTac local
aaa authentication enable default group BiHTac enable
aaa authorization commands 15 BiHTac group BiHTac if-authenticated
aaa accounting exec BiHTac
action-type start-stop
group BiHTac
!
!
!
!
!
!
aaa session-id common
!
!
!
dot11 syslog
ip source-route
!
!
!
!
ip cef
no ip domain lookup
!
multilink bundle-name authenticated
!
!
key chain BIHAUTH
key 99
key-string 7 1435411234567890--09876543456789257471
!
!
!
!
license udi pid CISCO1841 sn FTX0945W22J
username b privilahege 15 secret 5 $1$Q3#$%^&*()_WdJz9HD.
!
redundancy
!
!
interface FastEthernet0/0
description LAN_Network
no ip address
duplex auto
speed auto
!
!
interface FastEthernet0/0.99
description DMZ_LAN
encapsulation dot1Q 99 native
ip address 10.250.100.129 255.255.255.128
ip helper-address 10.250.100.140
no ip redirects
no ip proxy-arp
ip verify unicast reverse-path
ip flow ingress
ip pim sparse-mode
ip nat inside
ip virtual-reassembly
!
interface FastEthernet0/1
description EIGRP Transit to ASA
ip address 10.250.0.6 255.255.255.252
ip authentication mode eigrp 99 md5
ip authentication key-chain eigrp 99 BIHAUTH
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
!
interface Serial0/0/0
no ip address
shutdown
no fair-queue
!
!
!
router eigrp 99
network 10.250.0.4 0.0.0.3
network 10.250.100.128 0.0.0.127
passive-interface default
no passive-interface FastEthernet0/1
eigrp router-id 10.250.0.6
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source route-map DMZ interface FastEthernet0/1 overload
ip route 0.0.0.0 0.0.0.0 10.250.0.5
!
ip access-list extended internal-ips
permit ip 10.250.100.128 0.0.0.127 10.250.0.4 0.0.0.3
ip access-list extended vtyaccess
permit tcp 10.250.100.0 0.0.0.127 any range 22 telnet
permit tcp 10.250.100.128 0.0.0.127 any range 22 telnet
permit tcp 10.250.150.0 0.0.0.255 any range 22 telnet
permit tcp 10.250.160.0 0.0.0.7 any range 22 telnet
deny tcp any any
!
!
!
!
route-map DMZ permit 10
description NAT via DMZ
match ip address internal-ips
match interface FastEthernet0/1
!
!
tacacs-server host 10.250.100.142
tacacs-server timeout 1
tacacs-server directed-request
tacacs-server key 7 04795B5301011234567890-09876543234567890
!
control-plane
!
!
!
line con 0
exec-timeout 11 0
logging synchronous
line aux 0
exec-timeout 11 0
line vty 0 4
access-class vtyaccess in
exec-timeout 11 0
logging synchronous
login authentication BiHTac
transport input all
transport output all
!
scheduler allocate 20000 1000
end
BIH_DMZ_RTR# sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, + - replicated route
Gateway of last resort is 10.250.0.5 to network 0.0.0.0
S* 0.0.0.0/0 [1/0] via 10.250.0.5
10.0.0.0/8 is variably subnetted, 6 subnets, 3 masks
D 10.250.0.0/30 [90/28416] via 10.250.0.5, 1d23h, FastEthernet0/1
C 10.250.0.4/30 is directly connected, FastEthernet0/1
L 10.250.0.6/32 is directly connected, FastEthernet0/1
D 10.250.100.0/25 [90/30976] via 10.250.0.5, 1d23h, FastEthernet0/1
C 10.250.100.128/25 is directly connected, FastEthernet0/0.99
L 10.250.100.129/32 is directly connected, FastEthernet0/0.99
192.168.250.0/29 is subnetted, 1 subnets
D 192.168.250.0 [90/30976] via 10.250.0.5, 1d23h, FastEthernet0/1
