Vous êtes sur la page 1sur 6

show run

Building configuration...
Current configuration : 6252 bytes
!
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname R1
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 3 log
security passwords min-length 6
logging buffered 51200 debugging
logging console critical
enable secret 5 $1$Ycbi$Y2Dz6clB5huH4IlWdmuAN1
!
aaa
--More--
new-model
!
!
aaa authentication login local_authen local
aaa authorization exec local_author local
!
aaa session-id common
memory-size iomem 15
no ip source-route
!
!
ip cef
!
!
no ip bootp server
no ip domain lookup
ip inspect name SDM_LOW cuseeme
ip inspect name SDM_LOW dns
ip inspect name SDM_LOW ftp
ip inspect name SDM_LOW h323
ip inspect name SDM_LOW https
ip inspect name SDM_LOW icmp
ip inspect name SDM_LOW imap
ip--More--
inspect name SDM_LOW pop3
ip inspect name SDM_LOW netshow
ip inspect name SDM_LOW rcmd
ip inspect name SDM_LOW realaudio
ip inspect name SDM_LOW rtsp
ip inspect name SDM_LOW esmtp
ip inspect name SDM_LOW sqlnet
ip inspect name SDM_LOW streamworks
ip inspect name SDM_LOW tftp
ip inspect name SDM_LOW tcp
ip inspect name SDM_LOW udp
ip inspect name SDM_LOW vdolive
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
!
voice-card 0
no dspfarm
!
!
!
!
!
!--More--
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-4116096827
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-4116096827
revocation-check none
rsakeypair TP-self-signed-4116096827
!
!
crypto pki certificate chain TP-self-signed-4116096827
certificate self-signed 01
3082023A 308201A3 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 34313136 30393638 3237301E 170D3038 31323232 32303435
35355A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D34 31313630
39363832 3730819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
--More--
8100E3CE AD08CBA1 731EFB40 38D8158A 590F81CE 9889E85B FD71949A C7AE8B03
9CB54259 5CA623A4 54A1D8CB BABA0EFE 960B6888 27F542E4 203C5375 03CE79F7
5F39918B BAB20541 141182FA F9195558 0AC8CA4A DB644856 3B356280 DF6CAB25
DB4E9F31 F3038BDD 43B96EB9 505C17CE E61E1D70 7BFEB0EA B97FCE75 8A1BCCAD
3D670203 010001A3 62306030 0F060355 1D130101 FF040530 030101FF 300D0603
551D1104 06300482 02523130 1F060355 1D230418 30168014 19AD8243 669168A3
06208031 AB9A2E8C A8864A29 301D0603 551D0E04 16041419 AD824366 9168A306
208031AB 9A2E8CA8 864A2930 0D06092A 864886F7 0D010104 05000381 8100C79A
4A348522 8063F35D C9C33F7D 23D2E9AE 77CEFA82 E3964DD8 FCF318D5 A0600C1F
9913DA53 53784841 1F1710B6 357620AA 0B923C7F 373E7CE8 13EFC438 1F43AB00
84F9A360 C2F94623 9336EC88 3CF83D06 53A716AC 0D9AFDCD AEF0847A 82F76E37
8C7F434A DF4C7AC1 C6F6081E 294762A3 26902876 D39A4AD6 5F65A5D1 C00C
quit
username admin privilege 15 secret 5 $1$X4Tn$BnvORFW.bYcrFLmVkSddQ/
!
!
ip tcp synwait-time 10
ip ssh time-out 60
ip ssh authentication-retries 2
!
!
!
!
!--More--
interface Null0
no ip unreachables
!
interface FastEthernet0/0
description $FW_INSIDE$
ip address 192.168.1.1 255.255.255.0
ip access-group 100 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
duplex auto
speed auto
no mop enabled
!
interface FastEthernet0/1
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
shutdown
duplex auto
--More--
speed auto
no mop enabled
!
interface Serial0/0/0
description $FW_OUTSIDE$
ip address 10.1.1.1 255.255.255.252
ip access-group 101 in
ip verify unicast reverse-path
no ip redirects
no ip unreachables
no ip proxy-arp
ip inspect SDM_LOW out
ip route-cache flow
no fair-queue
clock rate 64000
!
interface Serial0/0/1
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
shutdown
--More--
clock rate 2000000
!
interface Serial0/1/0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
shutdown
clock rate 2000000
!
interface Serial0/1/1
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
shutdown
clock rate 2000000
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Serial0/0/0
!--More--
!
ip http server
ip http access-class 1
ip http authentication local
ip http secure-server
!
logging trap debugging
logging 192.168.1.3
access-list 1 remark HTTP Access-class list
access-list 1 remark SDM_ACL Category=1
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 1 deny any
access-list 100 remark auto generated by SDM firewall configuration
access-list 100 remark SDM_ACL Category=1
access-list 100 deny ip 10.1.1.0 0.0.0.3 any
access-list 100 deny ip host 255.255.255.255 any
access-list 100 deny ip 127.0.0.0 0.255.255.255 any
access-list 100 permit ip any any
access-list 101 remark auto generated by SDM firewall configuration
access-list 101 remark SDM_ACL Category=1
access-list 101 deny ip 192.168.1.0 0.0.0.255 any
access-list 101 permit icmp any host 10.1.1.1 echo-reply
access-list
--More-- 101 permit icmp any host 10.1.1.1 time-exceeded
access-list 101 permit icmp any host 10.1.1.1 unreachable
access-list 101 deny ip 10.0.0.0 0.255.255.255 any
access-list 101 deny ip 172.16.0.0 0.15.255.255 any
access-list 101 deny ip 192.168.0.0 0.0.255.255 any
access-list 101 deny ip 127.0.0.0 0.255.255.255 any
access-list 101 deny ip host 255.255.255.255 any
access-list 101 deny ip host 0.0.0.0 any
access-list 101 deny ip any any log
access-list 102 remark VTY Access-class list
access-list 102 remark SDM_ACL Category=1
access-list 102 permit ip 192.168.1.0 0.0.0.255 any
access-list 102 deny ip any any
no cdp run
!
!
!
!
control-plane
!
!
!
!
!--More--
!
!
!
!
banner login ^CBatmaaaaan^C
!
line con 0
logging synchronous
login authentication local_authen
transport output telnet
line aux 0
login authentication local_authen
transport output telnet
line vty 0 4
access-class 102 in
authorization exec local_author
login authentication local_authen
transport input telnet ssh
!
scheduler allocate 20000 1000
!
end
--More--
R1#show acc
ru
R1#show acc
R1#show acc
R1#show acc
R1#show acc
R1#show acce
R1#show access-li
R1#show access-lists
Standard IP access list 1
10 permit 192.168.1.0, wildcard bits 0.0.0.255 (17 matches)
20 deny any
Extended IP access list 100
10 deny ip 10.1.1.0 0.0.0.3 any
20 deny ip host 255.255.255.255 any
30 deny ip 127.0.0.0 0.255.255.255 any
40 permit ip any any (2070 matches)
Extended IP access list 101
10 deny ip 192.168.1.0 0.0.0.255 any
20 permit icmp any host 10.1.1.1 echo-reply (15 matches)
30 permit icmp any host 10.1.1.1 time-exceeded
40 permit icmp any host 10.1.1.1 unreachable
50 deny ip 10.0.0.0 0.255.255.255 any (409 matches)
60 deny ip 172.16.0.0 0.15.255.255 any
70 deny ip 192.168.0.0 0.0.255.255 any (4 matches)
80 deny ip 127.0.0.0 0.255.255.255 any
90 deny ip host 255.255.255.255 any
100 deny ip host 0.0.0.0 any
110 deny ip any any log
Extended IP access list 102
10 permit ip 192.168.1.0 0.0.0.255 any
20 deny ip any any
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#
R1#

Vous aimerez peut-être aussi