cacao2
Newbie | Редактировать | Профиль | Сообщение | Цитировать | Сообщить модератору
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname cisco
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 10 log
security passwords min-length 6
logging message-counter syslog
logging buffered 4096
logging console critical
!
aaa new-model
!
!
aaa authentication login local_auth local
!
!
aaa session-id common
clock timezone MSK 3
!
!
dot11 syslog
no ip source-route
no ip gratuitous-arps
!
!
!
!
ip cef
no ip bootp server
ip domain name usadba.local
ip name-server 88.210.40.100
ip name-server 194.106.202.130
login block-for 10 attempts 10 within 10
no ipv6 cef
!
multilink bundle-name authenticated
!
async-bootp dns-server 10.10.1.1
vpdn enable
!
vpdn-group VPN
! Default PPTP VPDN group
description VPN Clients
accept-dialin
protocol pptp
virtual-template 1
!
!
!
подчищено)
!
!
!
archive
log config
hidekeys
!
!
ip ssh time-out 60
ip ssh authentication-retries 2
!
!
!
interface FastEthernet0
ip address x.x.x.x 255.255.255.252
ip verify unicast source reachable-via rx allow-default 100
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip nat enable
ip virtual-reassembly
speed auto
full-duplex
!
interface FastEthernet1
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
shutdown
duplex auto
speed auto
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
!
interface FastEthernet5
!
interface FastEthernet6
!
interface FastEthernet7
!
interface FastEthernet8
!
interface FastEthernet9
!
interface Virtual-Template1
ip address 10.10.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
peer default ip address pool VPNPool
ppp authentication ms-chap-v2
!
interface Vlan1
ip address 172.16.0.1 255.255.255.0 secondary
ip address 172.16.1.1 255.255.255.0 secondary
ip address 193.168.1.1 255.255.255.0 secondary
ip address 192.168.1.168 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip nat enable
ip virtual-reassembly
!
interface Async1
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
encapsulation slip
!
ip local pool VPNPool 10.10.1.2 10.10.1.20
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 x.x.x.x 10 permanent
no ip http server
ip http authentication local
no ip http secure-server
!
!
ip dns server
ip nat inside source list 192 interface FastEthernet0 overload
ip nat inside source static tcp 192.168.1.169 5929 interface FastEthernet0 5929
ip nat inside source static tcp 192.168.1.169 5928 interface FastEthernet0 5928
ip nat inside source static tcp 192.168.1.171 5922 interface FastEthernet0 5922
ip nat inside source static tcp 192.168.1.171 5923 interface FastEthernet0 5923
ip nat inside source static tcp 192.168.1.237 5920 interface FastEthernet0 5920
ip nat inside source static tcp 192.168.1.237 5921 interface FastEthernet0 5921
ip nat inside source static tcp 192.168.1.232 5930 interface FastEthernet0 5930
ip nat inside source static tcp 192.168.1.232 5931 interface FastEthernet0 5931
ip nat inside source static tcp 192.168.1.177 5920 interface FastEthernet0 5932
ip nat inside source static tcp 192.168.1.177 5921 interface FastEthernet0 5933
ip nat inside source static tcp 192.168.1.172 5926 interface FastEthernet0 5926
ip nat inside source static tcp 192.168.1.172 5927 interface FastEthernet0 5927
ip nat inside source list VPNCli interface FastEthernet0 overload
!
ip access-list standard VPNCli
permit 10.10.1.0 0.0.0.255
!
!
logging trap debugging
logging facility local2
access-list 100 permit udp any any eq bootpc
access-list 192 permit ip host 192.168.1.0 any
access-list 192 permit ip 193.168.1.0 0.0.0.255 any
access-list 192 permit ip 172.16.0.0 0.0.0.255 any
access-list 192 permit ip 172.16.1.0 0.0.0.255 any
dialer-list 1 protocol ip permit
dialer-list 1 protocol ipx permit
no cdp run
!
!
!
!
!
snmp-server community public RO
!
control-plane
!
banner motd ^C have fun! ^C
!
line con 0
login authentication local_auth
transport output telnet
line 1
exec-timeout 15 0
login authentication local_auth
modem InOut
stopbits 1
speed 115200
flowcontrol hardware
line aux 0
login authentication local_auth
transport output telnet
line vty 0 4
password 7 101D5A4C5541425D5E51
login authentication local_auth
transport input telnet ssh
!
ntp server 192.43.244.18 prefer
end
|
Всего записей: 6 | Зарегистр. 22-10-2009 | Отправлено: 16:53 08-09-2010 | Исправлено: cacao2, 17:08 08-09-2010 |
|
