PIX Version 7.0(4) ! hostname NWOPS names name 10.1.56.1 OSS1 name 10.1.56.2 OSS2 name 10.1.56.3 OSS3 name 10.1.56.41 ACS-Server1-NMS name 10.1.56.42 ACS-Server2-NMS name 10.1.56.43 SNMP-Server1-NMS name 10.1.56.44 SNMP-Server2-NMS name 10.1.57.41 ACS-Server1-NOC name 10.1.57.42 ACS-Server2-NOC name 10.1.57.43 SNMP-Server1-NOC name 10.1.57.44 SNMP-Server2-NOC name 10.1.58.20 BAC-Server1 name 10.1.58.41 ACS-Server1 name 10.1.58.42 ACS-Server2 name 10.1.58.43 SNMP-Server1 name 10.1.71.20 BAC-Server1-BOSSOOB name 10.1.71.241 ACS-Server1-BOSSOOB name 10.1.71.242 ACS-Server2-BOSSOOB name 10.1.71.243 SNMP-Server1-BOSSOOB name 10.1.71.244 SNMP-Server2-BOSSOOB name 10.1.71.245 SNMP-Poller1-BOSSOOB name 10.1.120.241 ACS-Server1-RAN name 10.1.120.242 ACS-Server2-RAN name 10.1.120.243 SNMP-Server1-RAN name 10.1.120.244 SNMP-Server2-RAN name 10.1.120.245 SNMP-Poller1-RAN name 10.195.11.14 BAC-Server1-NWCORP name 67.109.29.141 ACS-Server1-Outside name 67.109.29.142 ACS-Server2-Outside name 67.109.29.143 SNMP-Server1-Outside name 67.109.29.144 SNMP-Server2-Outside name 67.109.29.145 SNMP-Poller1-Outside name 10.1.55.0 NMS_Lab-Net name 10.1.56.0 NMS-Net name 10.1.57.0 NOC-Net name 10.1.58.0 NMC-Net name 10.1.70.0 BOSSOOB-Net name 10.1.76.0 NWOPS_Shared-Net name 10.1.120.0 RAN-Net name 10.1.121.0 GON-Net name 10.1.140.0 IPW-Net name 10.1.176.0 Nortel_OOB-Net name 10.195.11.0 BOSS_Dev-Net name 67.109.29.0 Outside-Net name 67.109.29.192 GoNetwork-Net ! interface GigabitEthernet0.800 description NMS Network nameif NMS security-level 80 ip address 10.1.56.254 255.255.255.0 ! interface GigabitEthernet0.801 description NOC Network nameif NOC security-level 90 ip address 10.1.57.254 255.255.255.0 ! interface GigabitEthernet0.802 description NMC Network nameif inside security-level 100 ip address 10.1.58.254 255.255.254.0 ! interface GigabitEthernet0.805 description NMS Lab Network nameif NMS-Lab security-level 60 ip address 10.1.55.254 255.255.255.0 ! interface GigabitEthernet1.814 description NWOPS-to-Core_Services Bridge Network nameif NWOPS-Shared security-level 30 ip address 10.1.76.1 255.255.255.192 ! interface GigabitEthernet2.840 description Nortel OOB Network nameif Nortel-OOB security-level 20 ip address 10.1.176.253 255.255.255.0 ! interface GigabitEthernet3.910 description Frontside Public Network nameif outside security-level 0 ip address 67.109.29.130 255.255.255.192 ! interface GigabitEthernet3.920 description BOSS Development Network nameif BOSS-Dev security-level 10 ip address 10.195.11.13 255.255.255.128 ! interface GigabitEthernet3.940 description IPW Management Network nameif IPW security-level 20 ip address 10.1.140.253 255.255.255.0 ! interface GigabitEthernet4 description RAN Network nameif RAN security-level 50 ip address 10.1.120.253 255.255.255.0 ! interface Ethernet0 description BOSS Out-Of-Band Management Network nameif BOSSOOB security-level 40 ip address 10.1.71.254 255.255.254.0 ! passwd ihaQR2o533jPad8a encrypted object-group network IPW-Subnets network-object IPW-Net 255.255.255.0 network-object Outside-Net 255.255.255.0 object-group service PDC-Server-TCP tcp port-object eq 135 port-object eq 445 port-object eq 88 port-object eq ldap port-object range 22100 22250 object-group service PDC-Server-UDP udp port-object eq domain port-object eq 88 port-object eq 389 port-object eq 445 object-group service NMS-Server-TCP tcp port-object eq 162 port-object range 165 168 port-object eq 8080 object-group service NMS-Server-UDP udp port-object range snmp snmptrap object-group network PDC-Servers network-object host ACS-Server1 network-object host ACS-Server2 object-group network ACS-Servers-RAN network-object host ACS-Server1-RAN network-object host ACS-Server2-RAN object-group network PDC-Servers-NMS network-object host ACS-Server1-NMS network-object host ACS-Server2-NMS object-group network PDC-Servers-NOC network-object host ACS-Server1-NOC network-object host ACS-Server2-NOC object-group network RVPN-Hosts network-object host 10.1.59.127 network-object host 10.1.59.128 network-object 10.1.59.192 255.255.255.240 access-list acl_NOC extended permit icmp any any access-list acl_NOC extended permit tcp NOC-Net 255.255.255.0 object-group PDC-Servers-NOC object-group PDC-Server-TCP access-list acl_NOC extended permit udp NOC-Net 255.255.255.0 object-group PDC-Servers-NOC object-group PDC-Server-UDP access-list acl_NOC extended permit tcp NOC-Net 255.255.255.0 host SNMP-Server1-NOC object-group NMS-Server-TCP access-list acl_NOC extended permit udp NOC-Net 255.255.255.0 host SNMP-Server1-NOC object-group NMS-Server-UDP access-list acl_NOC extended deny ip any object-group PDC-Servers-NOC access-list acl_NOC extended deny ip any host SNMP-Server1-NOC access-list acl_NOC extended permit ip any any access-list acl_NMS extended permit icmp any any access-list acl_NMS extended permit tcp NMS-Net 255.255.255.0 object-group PDC-Servers-NMS object-group PDC-Server-TCP access-list acl_NMS extended permit udp NMS-Net 255.255.255.0 object-group PDC-Servers-NMS object-group PDC-Server-UDP access-list acl_NMS extended permit tcp NMS-Net 255.255.255.0 host SNMP-Server1-NMS object-group NMS-Server-TCP access-list acl_NMS extended permit udp NMS-Net 255.255.255.0 host SNMP-Server1-NMS object-group NMS-Server-UDP access-list acl_NMS extended deny ip any object-group PDC-Servers-NMS access-list acl_NMS extended deny ip any host SNMP-Server1-NMS access-list acl_NMS extended permit ip any any access-list acl_RAN extended permit tcp RAN-Net 255.255.255.0 object-group ACS-Servers-RAN eq tacacs access-list acl_RAN extended permit udp RAN-Net 255.255.254.0 object-group ACS-Servers-RAN eq domain access-list acl_RAN extended permit udp RAN-Net 255.255.254.0 object-group ACS-Servers-RAN range 1812 1813 access-list acl_RAN extended permit udp RAN-Net 255.255.254.0 host SNMP-Poller1-RAN eq snmptrap access-list acl_RAN extended permit tcp RAN-Net 255.255.254.0 host SNMP-Poller1-RAN eq ftp access-list acl_RAN extended permit udp RAN-Net 255.255.254.0 host SNMP-Poller1-RAN eq tftp access-list acl_RAN extended permit icmp any any access-list acl_BOSSOOB extended permit tcp BOSSOOB-Net 255.255.254.0 host ACS-Server1-BOSSOOB eq tacacs access-list acl_BOSSOOB extended permit tcp BOSSOOB-Net 255.255.254.0 host ACS-Server2-BOSSOOB eq tacacs access-list acl_BOSSOOB extended permit udp BOSSOOB-Net 255.255.254.0 host SNMP-Poller1-BOSSOOB eq snmptrap access-list acl_BOSSOOB extended permit tcp BOSSOOB-Net 255.255.254.0 10.1.70.192 255.255.255.224 range 6000 6010 access-list acl_BOSSOOB extended permit tcp BOSSOOB-Net 255.255.254.0 host BAC-Server1-BOSSOOB range 7937 9936 access-list acl_BOSSOOB extended permit icmp any any access-list acl_IPW extended permit ip any any access-list acl_NMS-Lab extended permit ip any any access-list acl_NMS-Lab extended permit icmp any any access-list acl_outside extended permit tcp Outside-Net 255.255.255.0 host ACS-Server1-Outside eq tacacs access-list acl_outside extended permit tcp Outside-Net 255.255.255.0 host ACS-Server2-Outside eq tacacs access-list acl_outside extended permit udp Outside-Net 255.255.255.0 host SNMP-Poller1-Outside eq snmptrap access-list acl_outside extended permit tcp GoNetwork-Net 255.255.255.192 host SNMP-Poller1-Outside eq ftp access-list acl_outside extended permit tcp 1.1.1.0 255.255.255.0 host SNMP-Poller1-Outside eq ftp access-list acl_outside extended permit udp 67.109.29.128 255.255.255.192 host SNMP-Server2-Outside eq 3560 access-list acl_outside extended permit icmp any any access-list acl_NWOPS-Shared extended permit ip any any access-list acl_BOSS-Dev extended permit tcp BOSS_Dev-Net 255.255.255.128 host BAC-Server1-NWCORP range 7937 9936 access-list acl_BOSS-Dev extended permit icmp any any access-list acl_inside extended permit icmp any any access-list acl_inside extended permit udp object-group RVPN-Hosts host 10.1.105.1 eq domain access-list acl_inside extended permit udp object-group RVPN-Hosts host 10.1.105.11 eq ntp access-list acl_inside extended deny ip object-group RVPN-Hosts 10.1.105.0 255.255.255.0 access-list acl_inside extended permit ip any any access-list acl_Nortel-OOB extended permit ip any any pager lines 24 logging enable logging buffered debugging mtu NMS 1500 mtu NOC 1500 mtu inside 1500 mtu BOSSOOB 1500 mtu outside 1500 mtu IPW 1500 mtu RAN 1500 mtu BOSS-Dev 1500 mtu NWOPS-Shared 1500 mtu NMS-Lab 1500 mtu Nortel-OOB 1500 no asdm history enable arp timeout 14400 global (NMS) 1 10.1.56.250 global (NMS) 2 10.1.56.249 global (NOC) 1 10.1.57.250 global (BOSSOOB) 1 10.1.71.250 global (BOSSOOB) 2 10.1.71.249 global (BOSSOOB) 3 10.1.71.248 global (outside) 2 67.109.29.188 global (outside) 3 67.109.29.187 global (outside) 1 interface global (outside) 4 67.109.29.189 global (outside) 5 67.109.29.186 global (IPW) 1 10.1.140.250 global (IPW) 2 10.1.140.249 global (IPW) 3 10.1.140.248 global (RAN) 1 10.1.120.250 global (RAN) 2 10.1.120.249 global (RAN) 3 10.1.120.248 global (RAN) 5 10.1.120.247 global (BOSS-Dev) 1 interface global (NWOPS-Shared) 1 10.1.76.62 global (NWOPS-Shared) 2 10.1.76.61 global (NWOPS-Shared) 3 10.1.76.60 global (NWOPS-Shared) 5 10.1.76.59 global (NMS-Lab) 1 10.1.55.250 global (Nortel-OOB) 1 10.1.176.250 nat (NMS) 3 NMS-Net 255.255.255.0 nat (NOC) 2 NOC-Net 255.255.255.0 nat (inside) 1 NMC-Net 255.255.254.0 nat (IPW) 4 IPW-Net 255.255.255.0 nat (NMS-Lab) 5 NMS_Lab-Net 255.255.255.0 static (inside,NOC) ACS-Server1-NOC ACS-Server1 netmask 255.255.255.255 dns tcp 1000 200 static (inside,NOC) ACS-Server2-NOC ACS-Server2 netmask 255.255.255.255 dns tcp 1000 200 static (inside,NOC) SNMP-Server1-NOC SNMP-Server1 netmask 255.255.255.255 dns tcp 1000 200 static (inside,NMS) ACS-Server1-NMS ACS-Server1 netmask 255.255.255.255 dns tcp 1000 200 static (inside,NMS) ACS-Server2-NMS ACS-Server2 netmask 255.255.255.255 dns tcp 1000 200 static (inside,NMS) SNMP-Server1-NMS SNMP-Server1 netmask 255.255.255.255 dns tcp 1000 200 static (inside,RAN) ACS-Server1-RAN ACS-Server1 netmask 255.255.255.255 tcp 200 200 static (inside,RAN) ACS-Server2-RAN ACS-Server2 netmask 255.255.255.255 tcp 200 200 static (inside,BOSSOOB) ACS-Server1-BOSSOOB ACS-Server1 netmask 255.255.255.255 tcp 200 200 static (inside,BOSSOOB) ACS-Server2-BOSSOOB ACS-Server2 netmask 255.255.255.255 tcp 200 200 static (inside,BOSSOOB) BAC-Server1-BOSSOOB BAC-Server1 netmask 255.255.255.255 tcp 500 200 static (inside,BOSSOOB) 10.1.70.192 10.1.59.192 netmask 255.255.255.255 tcp 200 200 static (inside,BOSS-Dev) BAC-Server1-NWCORP BAC-Server1 netmask 255.255.255.255 tcp 200 200 static (inside,outside) ACS-Server1-Outside ACS-Server1 netmask 255.255.255.255 tcp 200 200 static (inside,outside) ACS-Server2-Outside ACS-Server2 netmask 255.255.255.255 tcp 200 200 static (inside,outside) SNMP-Server1-Outside SNMP-Server1 netmask 255.255.255.255 tcp 200 200 static (NOC,outside) SNMP-Server2-Outside SNMP-Server2-NOC netmask 255.255.255.255 tcp 1000 200 static (NMS,RAN) SNMP-Poller1-RAN OSS3 netmask 255.255.255.255 tcp 1000 200 static (NMS,BOSSOOB) SNMP-Poller1-BOSSOOB OSS3 netmask 255.255.255.255 tcp 1000 200 static (NMS,outside) SNMP-Poller1-Outside OSS3 netmask 255.255.255.255 tcp 1000 200 access-group acl_NMS in interface NMS access-group acl_NOC in interface NOC access-group acl_inside in interface inside access-group acl_BOSSOOB in interface BOSSOOB access-group acl_outside in interface outside access-group acl_IPW in interface IPW access-group acl_RAN in interface RAN access-group acl_BOSS-Dev in interface BOSS-Dev access-group acl_NWOPS-Shared in interface NWOPS-Shared access-group acl_NMS-Lab in interface NMS-Lab access-group acl_Nortel-OOB in interface Nortel-OOB route BOSSOOB 10.1.76.128 255.255.255.192 10.1.71.253 1 route BOSSOOB 10.1.88.0 255.255.254.0 10.1.71.253 1 route BOSSOOB 10.1.72.0 255.255.252.0 10.1.71.253 1 route outside 0.0.0.0 0.0.0.0 67.109.29.129 1 route IPW 10.1.136.0 255.255.255.0 10.1.140.254 1 route RAN GON-Net 255.255.255.0 10.1.120.254 1 route BOSS-Dev 10.195.0.0 255.255.240.0 10.195.11.1 1 route NWOPS-Shared 10.1.105.0 255.255.255.0 10.1.76.2 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 timeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00 timeout uauth 0:05:00 absolute aaa-server TACACS+ protocol tacacs+ aaa-server TACACS+ host ACS-Server1 key aaa-server TACACS+ host ACS-Server2 key aaa authentication telnet console TACACS+ LOCAL aaa authentication ssh console TACACS+ LOCAL aaa authentication enable console TACACS+ LOCAL snmp-server host NMS SNMP-Server2-NMS poll community nwbroadband snmp-server host inside SNMP-Server1 community nwbroadband snmp-server enable traps snmp authentication linkup linkdown coldstart snmp-server enable traps syslog snmp-server enable traps entity config-change fru-insert fru-remove snmp-server enable traps remote-access session-threshold-exceeded telnet 0.0.0.0 0.0.0.0 inside telnet timeout 5 ssh NOC-Net 255.255.255.0 NOC ssh 0.0.0.0 0.0.0.0 inside ssh 0.0.0.0 0.0.0.0 outside ssh timeout 5 dhcpd address 10.1.58.129-10.1.58.142 inside dhcpd dns ACS-Server2 ACS-Server1 dhcpd lease 86400 dhcpd ping_timeout 750 dhcpd domain nwops.net dhcpd enable inside ! class-map class_http match port tcp eq 8080 class-map inspection_default match default-inspection-traffic ! ! policy-map global_policy class inspection_default inspect dns maximum-length 512 inspect ftp inspect h323 h225 inspect h323 ras inspect netbios inspect rsh inspect rtsp inspect skinny inspect esmtp inspect sqlnet inspect sunrpc inspect tftp inspect sip inspect xdmcp class class_http inspect http ! service-policy global_policy global Cryptochecksum:2d16e30a3cbc249cf6df3cfa242a870c