! version 12.4 service timestamps debug uptime service timestamps log uptime service password-encryption ! hostname B10S ! boot-start-marker boot-end-marker ! ! aaa new-model ! ! ! aaa session-id common ! resource policy ! clock timezone GMT -5 clock summer-time DST date Apr 3 2005 7:00 Oct 30 2005 6:00 no network-clock-participate slot 1 no network-clock-participate wic 0 ip cef ! ! ip inspect max-incomplete high 1100 ip inspect max-incomplete low 900 ip inspect one-minute high 1100 ip inspect one-minute low 900 ip inspect name Ethernet_NAT ftp timeout 3600 ip inspect name Ethernet_NAT tcp timeout 3600 ip inspect name Ethernet_NAT http java-list 51 timeout 3600 ip inspect name Ethernet_NAT smtp timeout 3600 ip inspect name Ethernet_NAT udp timeout 15 ip inspect name Ethernet_NAT cuseeme timeout 3600 ip inspect name Ethernet_NAT h323 timeout 3600 ip inspect name Ethernet_NAT rcmd timeout 3600 ip inspect name Ethernet_NAT realaudio timeout 3600 ip inspect name Ethernet_NAT streamworks timeout 3600 ip inspect name Ethernet_NAT vdolive timeout 3600 ip inspect name Ethernet_NAT sqlnet timeout 3600 ip inspect name Ethernet_NAT tftp timeout 30 ip inspect name Ethernet_BVI smtp timeout 3600 ip inspect name Ethernet_BVI tcp timeout 3600 ip inspect name Ethernet_BVI udp timeout 15 ! ! no ip domain lookup ip domain name maj3stic.com ! ! ! ! no spanning-tree vlan 1 ! ! ! bridge irb ! ! interface FastEthernet0/0 description Internet no ip address no ip proxy-arp duplex auto speed auto bridge-group 32 ! interface FastEthernet0/1 description DMZ no ip address duplex auto speed auto bridge-group 32 ! interface FastEthernet1/0 ! interface FastEthernet1/1 ! interface FastEthernet1/2 ! interface FastEthernet1/3 ! interface FastEthernet1/4 ! interface FastEthernet1/5 ! interface FastEthernet1/6 ! interface FastEthernet1/7 ! interface FastEthernet1/8 ! interface FastEthernet1/9 ! interface FastEthernet1/10 ! interface FastEthernet1/11 ! interface FastEthernet1/12 ! interface FastEthernet1/13 ! interface FastEthernet1/14 ! interface FastEthernet1/15 ! interface Vlan1 description NAT ip address 192.168.1.254 255.255.255.0 ip access-group 102 in ip access-group 103 out ip inspect Ethernet_NAT in ip nat inside ip virtual-reassembly ! interface BVI32 ip address 70.166.2.177 255.255.255.192 ip access-group 150 in no ip redirects ip inspect Ethernet_BVI in ip nat outside ip virtual-reassembly ! ip route 0.0.0.0 0.0.0.0 70.166.2.129 name Gateway ! no ip http server no ip http secure-server ip nat pool n1 70.166.2.177 70.166.2.177 netmask 255.255.255.192 ip nat pool n2 70.166.2.178 70.166.2.178 netmask 255.255.255.192 ip nat pool n3 70.166.2.179 70.166.2.179 netmask 255.255.255.192 ip nat pool n4 70.166.2.181 70.166.2.181 netmask 255.255.255.192 ip nat inside source list 101 pool n1 overload ip nat inside source list 102 pool n2 overload ip nat inside source list 103 pool n3 overload ip nat inside source list 104 pool n4 overload ! logging trap debugging logging facility user logging 192.168.1.1 access-list 101 permit ip 0.0.0.1 255.255.255.0 any access-list 102 permit ip 192.168.1.0 0.0.0.255 any access-list 102 permit ip 0.0.0.250 255.255.255.0 any access-list 103 permit tcp 70.166.2.0 0.0.0.255 host 192.168.1.0 eq domain access-list 103 permit ip 0.0.0.200 255.255.255.0 any access-list 103 permit icmp any any log access-list 104 permit ip 192.168.1.0 0.0.0.254 any access-list 104 permit tcp any any established access-list 150 permit udp any any eq domain access-list 150 permit udp any eq domain any range 1000 65000 access-list 150 permit tcp any any eq domain access-list 150 permit tcp any eq domain any range 1000 65000 access-list 150 permit tcp 70.166.2.52 0.0.0.192 eq www any access-list 150 permit tcp 70.166.2.52 0.0.0.192 eq smtp any access-list 150 permit tcp 70.166.2.52 0.0.0.192 range 1000 65000 any eq smtp access-list 150 permit tcp any 70.166.2.52 0.0.0.192 eq smtp access-list 150 permit udp 70.166.2.52 0.0.0.192 range 1000 65000 any eq ntp access-list 150 permit udp any 70.166.2.52 0.0.0.192 eq ntp access-list 150 permit icmp any any log access-list 150 permit udp any host 70.166.2.180 eq ntp access-list 150 permit tcp host 70.166.2.180 eq www any access-list 150 permit tcp host 70.166.2.180 eq smtp any access-list 150 permit tcp host 70.166.2.180 range 1000 65000 any eq smtp access-list 150 permit tcp any host 70.166.2.180 eq smtp access-list 150 permit udp host 70.166.2.180 range 1000 65000 any eq ntp snmp-server community public RO snmp-server packetsize 4096 snmp-server queue-length 100 snmp-server enable traps envmon snmp-server enable traps ospf state-change snmp-server enable traps ospf errors snmp-server enable traps ospf retransmit snmp-server enable traps ospf lsa snmp-server enable traps ospf cisco-specific state-change nssa-trans-change snmp-server enable traps ospf cisco-specific state-change shamlink interface snmp-server enable traps ospf cisco-specific state-change shamlink neighbor snmp-server enable traps ospf cisco-specific errors snmp-server enable traps ospf cisco-specific retransmit snmp-server enable traps ospf cisco-specific lsa snmp-server enable traps cpu threshold snmp-server host 192.168.1.250 public ! ! control-plane ! bridge 32 protocol ieee bridge 32 route ip ! ! !! ntp logging ntp clock-period 17208319 ntp server 67.159.5.116 ! end