CiscoForums.it

Codice: Seleziona tutto

version 15.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname cisco
!
boot-start-marker
boot-end-marker
!
!
!
aaa new-model
!
!
aaa authentication login local_authen local
aaa authorization exec local_author local 
!
!
!
!
!
aaa session-id common
memory-size iomem 10
clock timezone CET 1 0
clock summer-time CEST recurring last Sun Mar 2:00 last Sun Oct 3:00
!
!
!
!
!
!
!
ip dhcp excluded-address 10.100.1.1 10.100.1.199
ip dhcp excluded-address 10.100.1.230 10.100.1.254
!
ip dhcp pool lan
 import all
 network 10.100.1.0 255.255.255.0
 domain-name lan
 dns-server 10.100.1.15 
 default-router 10.100.1.15 
 lease 0 0 5
!
!
!
ip domain name lan
ip inspect name IP_INSPECT tcp
ip inspect name IP_INSPECT udp
ip inspect name IP_INSPECT ftp
ip ddns update method no-ip
 HTTP
  add http://XXXX:[email protected]/nic/update?hostname=<h>&myip=<a>
  remove http://XXXX:[email protected]/nic/update?hostname=<h>&myip=<a>
 interval maximum 28 0 0 0
!
ip cef
ipv6 unicast-routing
ipv6 cef
ipv6 inspect name IPV6_INSPECT tcp
ipv6 inspect name IPV6_INSPECT udp
ipv6 inspect name IPV6_INSPECT icmp
ipv6 inspect name IPV6_INSPECT ftp
!
!
multilink bundle-name authenticated
license udi pid CISCO887VA-SEC-K9 sn XXXXXXXXXXXXXX
!
!
username ADMIN privilege 15 secret 4 XXXXXXXXXXXXXXXXX
!
!
!
!
!
controller VDSL 0
 firmware filename flash:VA_A_38k1_B_38h_24g1.bin
!
! 
!
!
!
!
!
!
!
!
interface Ethernet0
 no ip address
 shutdown
!
interface ATM0
 no ip address
 no atm ilmi-keepalive
!
interface ATM0.1 point-to-point
 pvc 8/35 
  pppoe-client dial-pool-number 1
 !
!
interface FastEthernet0
 no ip address
!
interface FastEthernet1
 no ip address
!
interface FastEthernet2
 no ip address
!
interface FastEthernet3
 no ip address
!
interface Vlan1
 ip address 10.100.1.15 255.255.255.0
 ip access-group 100 in
 ip nat inside
 ip virtual-reassembly in
 ipv6 address NODE-PD ::1/64
 ipv6 enable
 ipv6 traffic-filter IPv6-LAN out
!
interface Dialer0
 ip ddns update hostname XXXXXX.ddns.net
 ip ddns update no-ip
 ip address negotiated
 ip access-group 101 in
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip mtu 1462
 ip nat outside
 ip inspect IP_INSPECT out
 ip virtual-reassembly in
 encapsulation ppp
 ip tcp adjust-mss 1422
 dialer pool 1
 dialer-group 1
 ipv6 address FE80::1 link-local
 ipv6 address autoconfig
 ipv6 enable
 ipv6 mtu 1280
 ipv6 verify unicast reverse-path
 ipv6 dhcp client pd NODE-PD rapid-commit
 ipv6 inspect IPV6_INSPECT out
 ipv6 traffic-filter IPv6-FW in
 ipv6 virtual-reassembly in
 ppp authentication chap callin
 ppp chap hostname [email protected]
 ppp chap password 0 IPV6@alice6
 ppp ipcp dns request
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip dns server
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source static tcp 10.100.1.22 8080 interface Dialer0 8080
ip route 0.0.0.0 0.0.0.0 Dialer0
!
dialer-list 1 protocol ip permit
ipv6 route 2000::/3 Dialer0
ipv6 route ::/0 Dialer0
!
snmp-server community public RO
access-list 1 permit 10.100.1.0 0.0.0.255
access-list 100 permit ip any any
access-list 100 deny   ip host 255.255.255.255 any
access-list 100 deny   ip 127.0.0.0 0.255.255.255 any
access-list 101 permit tcp host 8.23.224.120 eq www any
access-list 101 permit udp any eq domain any
access-list 101 permit udp host 193.204.114.105 eq ntp any eq ntp
access-list 101 permit icmp any any echo-reply
access-list 101 permit icmp any any time-exceeded
access-list 101 permit icmp any any unreachable
access-list 101 permit tcp any any eq 8080
access-list 101 permit gre any any
access-list 101 deny   ip 10.0.0.0 0.255.255.255 any
access-list 101 deny   ip 172.16.0.0 0.15.255.255 any
access-list 101 deny   ip 192.168.0.0 0.0.255.255 any
access-list 101 deny   ip 127.0.0.0 0.255.255.255 any
access-list 101 deny   ip host 255.255.255.255 any
access-list 101 deny   ip host 0.0.0.0 any
access-list 101 deny   ip any any log
!
!
!
ipv6 access-list IPv6-FW
 permit icmp any any
 permit udp any any eq 546
 deny ipv6 any any
!
ipv6 access-list IPv6-LAN
 permit icmp any any echo-request
 deny ipv6 any any
!
control-plane
!
!
banner login ^C--CISCO-887--^C
!
line con 0
 login authentication local_authen
 no modem enable
 transport output telnet
line aux 0
 login authentication local_authen
 transport output telnet
line vty 0 4
 authorization exec local_author
 login authentication local_authen
 transport input ssh
!
ntp master
ntp server 193.204.114.105 prefer
!
end