Branch office...
CUT...
!
hostname xxx
!
boot-start-marker
boot-end-marker
!
CUT...
!
no aaa new-model
!
resource policy
!
clock timezone xxx 1
clock summer-time xxx date Mar 30 2003 2:00 Oct 26 2003 3:00
clock calendar-valid
no ip source-route
!
!
ip cef
no ip dhcp use vrf connected
!
ip dhcp pool Magazzino
import all
network 192.168.201.0 255.255.255.0
dns-server 192.168.201.200
netbios-name-server 192.168.200.1
default-router 192.168.201.220
!
CUT...
!
ip tcp synwait-time 10
no ip bootp server
ip domain name ruscallarenato.it
ip name-server 151.99.125.2
ip name-server 151.99.0.100
ip name-server 192.168.200.1
ip ssh time-out 60
ip ssh authentication-retries 2
CUT...
!
!
CUT...
username xxx privilege 15 secret 5 xxxx
!
!
!
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp key xxx address yy.yy.yy.yy
!
!
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
!
crypto map SDM_CMAP_1 1 ipsec-isakmp
description Tunnel to yy.yy.yy.yy
set peer yy.yy.yy.yy
set transform-set ESP-3DES-SHA
match address 100
!
bridge irb
!
!
!
interface FastEthernet0
CUT...
shutdown
CUT..
!
interface BRI0
CUT...
shutdown
!
interface Dot11Radio0
CUT...
!
interface Dot11Radio1
CUT...
!
interface ATM0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
no atm ilmi-keepalive
dsl operating-mode itu-dmt
!
interface ATM0.1 point-to-point
ip address xx.xx.xx.xx 255.255.255.224
ip access-group 101 in
ip nat outside
ip virtual-reassembly
no snmp trap link-status
pvc 8/35
encapsulation aal5snap
!
crypto map SDM_CMAP_1
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-FE 1$$FW_INSIDE$
no ip address
ip tcp adjust-mss 1452
bridge-group 1
!
interface BVI1
description $ES_LAN$$FW_INSIDE$
ip address 192.168.201.200 255.255.255.0
ip access-group 110 in
ip nat inside
ip virtual-reassembly
!
ip route 0.0.0.0 0.0.0.0 ATM0.1
!
ip dns server
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source route-map SDM_RMAP_1 interface ATM0.1 overload
!
logging trap debugging
access-list 100 remark SDM_ACL Category=4
access-list 100 remark IPSec Rule
access-list 100 permit ip 192.168.201.0 0.0.0.255 192.168.200.0
0.0.0.255
access-list 101 MAXICUT...
access-list 102 remark Auto generated by SDM Management Access feature
access-list 102 remark SDM_ACL Category=1
access-list 102 permit ip any any
access-list 103 remark Auto generated by SDM Management Access feature
access-list 103 remark SDM_ACL Category=1
access-list 103 permit ip any any
access-list 105 remark SDM_ACL Category=2
access-list 105 remark IPSec Rule
access-list 105 deny ip 192.168.201.0 0.0.0.255 192.168.200.0
0.0.0.255
access-list 105 permit ip 192.168.201.0 0.0.0.255 any
no cdp run
!
!
!
route-map SDM_RMAP_1 permit 1
match ip address 105
!
!
!
!
control-plane
!
bridge 1 protocol ieee
bridge 1 route ip
CUT...
!
scheduler allocate 4000 1000
scheduler interval 500
ntp clock-period 17180045
ntp master
ntp update-calendar
ntp server 193.204.114.232 prefer
ntp server 193.204.114.233
!
webvpn context Default_context
ssl authenticate verify all
!
no inservice
!
end
