PIX 7.0 dynamic VPN

PIX Version 7.0(1)
names
!
interface Ethernet0
nameif outside
security-level 0
ip address 172.29.6.1 255.255.255.0
!
interface Ethernet1
nameif inside
security-level 100
ip address 172.29.131.1 255.255.255.0
!
enable password 90RBsEWodTGO2XFL encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
hostname pix
ftp mode passive
access-list nonat extended permit ip 172.29.131.0 255.255.255.0 10.1.1.0 255.255.255.0
access-list split standard permit 10.1.1.0 255.255.255.0
pager lines 24
logging console debugging
mtu outside 1500
mtu inside 1500
ip local pool testpool 10.1.1.1-10.1.1.15
no failover
monitor-interface outside
monitor-interface inside
no asdm history enable
arp timeout 14400
nat (inside) 0 access-list nonat
route outside 172.29.0.0 255.255.0.0 172.29.6.254 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00
timeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
group-policy test internal
group-policy test attributes
wins-server value 10.1.1.102
dns-server value 10.1.1.100 10.1.1.101
split-tunnel-policy tunnelspecified
split-tunnel-network-list value split
username peter password eiLX8yKuiZqgo6C8 encrypted
username tcytech password HTEt2RXRBqicQQ2g encrypted
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp
crypto ipsec transform-set test esp-aes esp-sha-hmac
crypto dynamic-map mymap 10 set transform-set test
crypto map test 10 ipsec-isakmp dynamic mymap
crypto map test interface outside
isakmp enable outside
isakmp policy 20 authentication pre-share
isakmp policy 20 encryption aes
isakmp policy 20 hash sha
isakmp policy 20 group 2
isakmp policy 20 lifetime 3600
isakmp policy 65535 authentication pre-share
isakmp policy 65535 encryption 3des
isakmp policy 65535 hash sha
isakmp policy 65535 group 2
isakmp policy 65535 lifetime 86400
telnet timeout 5
ssh timeout 5
console timeout 0
tunnel-group test type ipsec-ra
tunnel-group test general-attributes
address-pool testpool
default-group-policy test
tunnel-group test ipsec-attributes
pre-shared-key *
!
class-map inspection_default
match default-inspection-traffic
!
!
policy-map global_policy
class inspection_default
inspect dns maximum-length 512
inspect ftp
inspect h323 h225
inspect h323 ras
inspect netbios
inspect rsh
inspect rtsp
inspect skinny
inspect esmtp
inspect sqlnet
inspect sunrpc
inspect tftp
inspect sip
inspect xdmcp
!
service-policy global_policy global

标签：

版权申明：本站文章部分自网络，如有侵权，请联系：west999com@outlook.com
特别注意：本站所有转载文章言论不代表本站观点，本站所提供的摄影照片，插画，设计作品，如需使用，请与原作者联系，版权归原作者所有