Current configuration : 11251 bytes ! ! Last configuration change at 14:42:09 PCTime Sun Jul 15 2007 by iain ! NVRAM config last updated at 21:30:13 PCTime Sun Jul 15 2007 by iain ! version 12.4 no service pad service tcp-keepalives-in service tcp-keepalives-out service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone service password-encryption service sequence-numbers ! hostname wan ! boot-start-marker boot-end-marker ! security authentication failure rate 3 log security passwords min-length 6 logging buffered 51200 logging console critical enable secret 5 zzz ! aaa new-model ! ! aaa group server radius rad_eap ! aaa group server radius rad_mac ! aaa group server radius rad_acct ! aaa group server radius rad_admin ! aaa group server tacacs+ tac_admin ! aaa group server radius rad_pmip ! aaa group server radius dummy ! aaa authentication login eap_methods group rad_eap aaa authentication login mac_methods local aaa authorization ipmobile default group rad_pmip aaa accounting network acct_methods start-stop group rad_acct ! ! aaa session-id common clock timezone PCTime 0 dot11 activity-timeout unknown default 3600 ! dot11 ssid LMP-AIR-2 authentication open authentication key-management wpa wpa-psk ascii 7 xxx ! no ip source-route ip cef ! ! no ip dhcp use vrf connected ip dhcp excluded-address 81.187.153.246 ! ip dhcp pool Wireless import all network 81.187.153.240 255.255.255.248 default-router 81.187.153.241 dns-server 81.187.153.230 lease 7 ! ! ip tcp synwait-time 10 no ip bootp server ip domain name duckend.org.uk ip name-server 217.169.20.20 ip name-server 217.169.20.21 ip ssh time-out 60 ip ssh authentication-retries 2 ip inspect name DEFAULT100 cuseeme ip inspect name DEFAULT100 ftp ip inspect name DEFAULT100 h323 ip inspect name DEFAULT100 icmp ip inspect name DEFAULT100 netshow ip inspect name DEFAULT100 rcmd ip inspect name DEFAULT100 realaudio ip inspect name DEFAULT100 rtsp ip inspect name DEFAULT100 esmtp ip inspect name DEFAULT100 sqlnet ip inspect name DEFAULT100 streamworks ip inspect name DEFAULT100 tftp ip inspect name DEFAULT100 tcp ip inspect name DEFAULT100 udp ip inspect name DEFAULT100 vdolive ip inspect name CHILD100 https ip inspect name CHILD100 http java-list 2 urlfilter ip urlfilter exclusive-domain permit .shockwave.com ip urlfilter exclusive-domain permit .apple.com ip urlfilter exclusive-domain permit .gallifreyone.com ip urlfilter exclusive-domain permit .runescape.com ip urlfilter exclusive-domain permit .pokemoncrater.com ip urlfilter exclusive-domain permit .battleon.com ip urlfilter exclusive-domain permit .stream.aol.com ip urlfilter exclusive-domain permit .thawte.com ip urlfilter exclusive-domain permit .puzzlepirates.com ip urlfilter exclusive-domain permit .windowsupdate.com ip urlfilter exclusive-domain permit .cricinfo.com ip urlfilter exclusive-domain permit .giantsleepover.com ip urlfilter exclusive-domain permit .miniclip.com ip urlfilter exclusive-domain permit .public-trust.com ip urlfilter exclusive-domain permit .bmsnet.hostinguk.com ip urlfilter exclusive-domain permit .microsoft.com ip urlfilter exclusive-domain permit 62.49.219.106 ip urlfilter exclusive-domain permit .yetisports.org ip urlfilter exclusive-domain permit .noradsanta.org ip urlfilter exclusive-domain permit .globalsign.net ip urlfilter exclusive-domain permit .apple.com.edgesuite.net ip urlfilter exclusive-domain permit .stanwickweather.org.uk ip urlfilter exclusive-domain permit .bedmod.co.uk ip urlfilter exclusive-domain permit .stickcricket.co.uk ip urlfilter exclusive-domain permit .bbc.co.uk ! multilink bundle-name authenticated ! crypto pki trustpoint TP-self-signed-2728462622 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-2728462622 revocation-check none rsakeypair TP-self-signed-2728462622 ! ! crypto pki certificate chain TP-self-signed-2728462622 certificate self-signed 01 3082024A 308201B3 A0030201 02020101 300D0609 2A864886 F70D0101 04050030 31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 69666963 6174652D 32373238 34363236 3232301E 170D3036 31323038 32323431 33315A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 37323834 36323632 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 8100BB7B 8B7C4F8F 590744EE C86E4B88 098E6149 366ABB8F B01DE66D 29A3D26A 2C298311 FD17076E 3637468B 49A968B0 4285D42B 370C52E8 B989A8FD 2DC46E68 C2B1BCED 47579D96 86EDF1D2 0FD1629D 05DBA41F 200ADDED B041EA45 42255C86 33C32A4D F5DA2CE5 A59066ED AB5E496C 4F0E01A4 50AB2316 3D715131 8029C21B C2F90203 010001A3 72307030 0F060355 1D130101 FF040530 030101FF 301D0603 551D1104 16301482 1277616E 2E647563 6B656E64 2E6F7267 2E756B30 1F060355 1D230418 30168014 793C942E 8619AC49 90B9A667 1BE2828C 2F6656F6 301D0603 551D0E04 16041479 3C942E86 19AC4990 B9A6671B E2828C2F 6656F630 0D06092A 864886F7 0D010104 05000381 81000F2E B3A27BAE 5F3EC51D 7A1EB81E 702D69B3 9D1056B2 0BA81DF4 9CE3FED2 9B3735B1 9393810C 56B04E0E F0CFC844 D7E37279 6BEDFCB7 8032E5D5 C4816330 996DB5BD D0B996B4 7556AED7 732A7F32 7207456A B10728A0 35B48C2D F0E3281E 4EBE83DB 37E48807 61BBD643 DB7A07D1 9D41252D FD1F3840 413D3DB9 5CBAE2D0 D4FE quit ! ! username iain privilege 15 secret 5 ddd ! ! ! bridge irb ! ! ! interface ATM0 no ip address no ip redirects no ip unreachables no ip proxy-arp ip route-cache flow shutdown no atm ilmi-keepalive dsl operating-mode auto ! interface ATM0.1 point-to-point description $FW_OUTSIDE$$ES_WAN$ shutdown no snmp trap link-status pvc 0/38 encapsulation aal5mux ppp dialer dialer pool-member 1 ! ! interface FastEthernet0 ! interface FastEthernet1 ! interface FastEthernet2 switchport access vlan 10 switchport trunk native vlan 10 switchport mode trunk ! interface FastEthernet3 switchport access vlan 30 ! interface Dot11Radio0 no ip address ! encryption mode ciphers tkip ! ssid LMP-AIR-2 ! speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0 channel 2462 station-role root world-mode dot11d country GB both bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 spanning-disabled bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding ! interface Vlan1 ip address 81.187.153.225 255.255.255.240 ! interface Vlan30 ip address 192.168.10.1 255.255.255.0 ip access-group sdm_vlan30_in in ip nat inside ip inspect CHILD100 in ip virtual-reassembly ! interface Vlan20 no ip address bridge-group 1 ! interface Vlan10 ip address 172.16.2.2 255.255.255.0 ip nat outside ip virtual-reassembly ! interface Dialer0 description $FW_OUTSIDE$ ip address negotiated ip access-group 101 in no ip redirects no ip unreachables no ip proxy-arp ip nbar protocol-discovery ip flow ingress ip flow egress ip nat outside ip inspect DEFAULT100 out ip virtual-reassembly encapsulation ppp ip route-cache flow dialer pool 1 dialer-group 1 no cdp enable ppp authentication chap callin ppp chap hostname xxx ppp chap password 7 yyy ! interface BVI1 description $ES_LAN$$FW_INSIDE$ ip address 81.187.153.241 255.255.255.248 ip access-group 100 in ip tcp adjust-mss 1412 ! ip route 0.0.0.0 0.0.0.0 172.16.2.1 permanent ip route 81.187.153.224 255.255.255.240 Vlan1 permanent ip route 81.187.153.240 255.255.255.248 Vlan20 permanent ip route 172.16.2.0 255.255.255.0 Vlan10 permanent ip route 192.168.10.0 255.255.255.0 Vlan30 permanent ! ip flow-cache timeout active 1 ip flow-export version 5 ip flow-export destination 81.187.153.230 9996 ! ip http server ip http authentication local ip http secure-server ip http timeout-policy idle 60 life 86400 requests 10000 ip dns server ip nat inside source static network 192.168.10.2 81.187.153.250 /31 ! ip access-list extended sdm_vlan30_in remark SDM_ACL Category=1 remark Auto generated by SDM for NTP (123) 0.uk.pool.ntp.org permit ip any any ! logging trap debugging access-list 2 remark JavaPermit access-list 2 remark SDM_ACL Category=1 access-list 2 permit any access-list 100 remark auto generated by Cisco SDM Express firewall configuration access-list 100 remark SDM_ACL Category=1 access-list 100 permit ip any any access-list 101 remark auto generated by Cisco SDM Express firewall configuration access-list 101 remark SDM_ACL Category=1 dialer-list 1 protocol ip permit snmp-server community xxx RO snmp-server ifindex persist no cdp run ! ! ! radius-server attribute 32 include-in-access-req format %h radius-server vsa send accounting ! control-plane ! bridge 1 protocol ieee bridge 1 route ip banner login ^CAuthorized access only! Disconnect IMMEDIATELY if you are not an authorized user!^C ! line con 0 no modem enable transport output telnet line aux 0 transport output telnet line vty 0 4 privilege level 15 transport input telnet ssh ! scheduler max-task-time 5000 scheduler allocate 4000 1000 scheduler interval 500 end