Result of the command: "sh run" : Saved : : Serial Number: JMX1115L0EM : Hardware: ASA5520-K8, 2048 MB RAM, CPU Pentium 4 Celeron 2000 MHz : ASA Version 8.4(7)23 ! hostname VPN-B domain-name chesterfield.gov enable password ~output deleted~ encrypted passwd ~output deleted~ encrypted names ! interface GigabitEthernet0/0 nameif outside security-level 0 ip address 198.101.7.85 255.255.255.0 ! interface GigabitEthernet0/1 nameif inside security-level 100 ip address 172.23.144.3 255.255.255.0 ! interface GigabitEthernet0/2 shutdown no nameif no security-level no ip address ! interface GigabitEthernet0/3 shutdown no nameif no security-level no ip address ! interface Management0/0 shutdown no nameif no security-level no ip address ! banner login banner login This is a proprietary system, NOT for public or personal use. All work products, banner login communications, files, data or information directly or indirectly created, input banner login or accessed on this system are and shall become the sole property of banner login Chesterfield County Gov. banner login banner login banner login This system is actively monitored and accessed by Chesterfield County Gov. banner login By logging onto this system, the user consents to such monitoring and access. banner login banner login banner login USE OF THIS SYSTEM WITHOUT OR IN EXCESS OF THE PROPER AUTHORIZATION MAY SUBJECT banner login THE USER TO DISCIPLINE AND/OR CIVIL AND CRIMINAL PENALTIES banner login banner login banner login This is a proprietary system, NOT for public or personal use. All work products, banner login communications, files, data or information directly or indirectly created, input banner login or accessed on this system are and shall become the sole property of banner login Chesterfield County Gov. banner login banner login banner login This system is actively monitored and accessed by Chesterfield County Gov. banner login By logging onto this system, the user consents to such monitoring and access. banner login banner login banner login USE OF THIS SYSTEM WITHOUT OR IN EXCESS OF THE PROPER AUTHORIZATION MAY SUBJECT banner login THE USER TO DISCIPLINE AND/OR CIVIL AND CRIMINAL PENALTIES banner login boot system disk0:/asa847-23-k8.bin ftp mode passive clock timezone EST -5 clock summer-time EDT recurring dns domain-lookup inside dns server-group DefaultDNS name-server 172.24.10.146 name-server 172.24.10.145 domain-name chesterfield.gov object network MH-GHHarrowgate subnet 172.16.18.0 255.255.255.0 object network PR-Ettrick subnet 172.16.26.0 255.255.255.0 object network PR-Huguenot subnet 172.16.27.0 255.255.255.0 object network MH-GHBaron subnet 172.16.16.0 255.255.255.0 object network MH-GHCogbill subnet 172.16.30.0 255.255.255.0 object network MH-GHNewbys subnet 172.16.12.0 255.255.255.0 object network PD-Stonebridge subnet 172.16.33.0 255.255.255.0 object network PR-Rockwood subnet 172.16.29.0 255.255.255.0 object network PR-RockwoodBridges subnet 192.168.9.208 255.255.255.248 object network PR-PointOfRocks subnet 172.16.28.0 255.255.255.0 object network MH-CESAnnex subnet 172.16.24.0 255.255.255.0 object network MH-GHPampas subnet 172.16.1.0 255.255.255.0 object network MH-ChesterHouse subnet 172.16.17.0 255.255.255.0 object network PD-MCC subnet 172.16.31.0 255.255.255.0 object network PR-Bensley subnet 172.16.25.0 255.255.255.0 object network IST-Comcast subnet 172.16.123.0 255.255.255.0 object network FD-RSB2 subnet 172.16.34.0 255.255.255.0 object network PD-TurnerRd subnet 172.16.5.0 255.255.255.0 object network FD-RSB3 subnet 172.16.2.0 255.255.255.0 description Bensley 3 RS object network Adult-Probation subnet 172.16.6.0 255.255.255.0 object network FD-FS10 subnet 172.16.20.0 255.255.255.0 object network FD-RSFV1 subnet 172.16.21.0 255.255.255.0 object network FD-RSFV2 subnet 172.16.22.0 255.255.255.0 object network Health-WIC subnet 172.16.23.0 255.255.255.0 object network MH-BestChoice subnet 172.16.19.0 255.255.255.0 object network MH-GHEastman subnet 172.16.8.0 255.255.255.0 object network MH-GHNorthArch1 subnet 172.16.14.0 255.255.255.0 object network MH-GHHuntersChase subnet 172.16.11.0 255.255.255.0 object network MH-GHMockingbird subnet 172.16.13.0 255.255.255.0 object network MH-GHObisque subnet 172.16.15.0 255.255.255.0 object network MH-GHPrestonwood subnet 172.16.7.0 255.255.255.0 object network PR-Trampling subnet 172.16.3.0 255.255.255.0 object network FD-RSM2 subnet 172.16.4.0 255.255.255.0 object network CCS-ColonialHeights subnet 172.16.35.0 255.255.255.0 object network FD-Medic15 subnet 172.16.36.0 255.255.255.0 description Medic 15 Router and Sierra 4G device object network MH-CorpHills subnet 172.16.37.0 255.255.255.0 object network FD-FS23 subnet 172.16.38.0 255.255.255.0 description Fire Station 23 at DLA/DSCR object network GS-NACC subnet 172.18.140.0 255.255.255.0 object network GS-NACC2 subnet 172.18.141.0 255.255.255.0 object network Fairgrounds-StaffWifi subnet 172.16.39.0 255.255.255.0 object network Fairgrounds-CitizenWifi1 subnet 172.16.40.0 255.255.255.0 object network Fairgrounds-CitizenWifi2 subnet 172.16.41.0 255.255.255.0 object network VITA host 166.67.71.186 description Web, TN3270, SBE, LIDS, DMV App, CARS object network VITA_NAT host 198.101.7.167 object network Henrico host 173.242.160.23 description CrimeNtel HTTPS object network CrimeNtel_NAT host 198.101.7.235 object network syracuse host 172.24.10.235 description CrimeNtel Server object network Hanover host 192.168.22.50 description CrimeNtel HTTPS object network Richmond host 65.202.206.82 description CrimeNtel HTTPS object network NETWORK_OBJ_172.23.145.0_27 subnet 172.23.145.0 255.255.255.224 object network obj-UTIL-SCADA range 172.23.145.14 172.23.145.17 object network MH-GHWoodpecker subnet 172.16.5.0 255.255.255.0 object network Fire15-DMV-Printer host 172.31.7.18 description Internal Address - DMV printer at Fire Admin, queue name fd-p7 object network FireAdmin-DMV-Printer host 172.29.39.21 description Internal Address - DMV printer at Fire Admin, queue name npi0cf784 object network Fire15-DMV-Printer_NAT host 198.101.7.18 description External Address - DMV printer at Fire Admin, queue name fd-p7 object network FireAdmin-DMV-Printer_NAT host 198.101.7.21 description External Address - DMV printer at Fire Admin, queue name npi0cf784 object network FD-Medic14 subnet 172.16.51.0 255.255.255.0 description Medic 14 Router and Sierra 4G device object network FD-Medic16 subnet 172.16.47.0 255.255.255.0 description Medic 16 Router and Sierra 4G device object network FD-Medic17 subnet 172.16.48.0 255.255.255.0 description Medic 17 Router and Sierra 4G device object network FD-Medic20 subnet 172.16.52.0 255.255.255.0 description Medic 20 Router and Sierra 4G device object network FD-Medic21 subnet 172.16.49.0 255.255.255.0 description Medic 21 Router and Sierra 4G device object network FD-Medic3 subnet 172.16.50.0 255.255.255.0 description Medic 3 Router and Sierra 4G device object network RSM-Medic321 subnet 172.16.42.0 255.255.255.0 description Medic 321 Router and Sierra 4G device object network RSM-Medic323 subnet 172.16.43.0 255.255.255.0 description Medic 323 Router and Sierra 4G device object network RSM-Medic325 subnet 172.16.44.0 255.255.255.0 description Medic 325 Router and Sierra 4G device object network RSM-Medic327 subnet 172.16.45.0 255.255.255.0 description Medic 327 Router and Sierra 4G device object network RSM-Medic329 subnet 172.16.46.0 255.255.255.0 description Medic 329 Router and Sierra 4G device object network Verizon-ClassC subnet 198.101.7.0 255.255.255.0 description Our Class C network from Verizon object-group network CountyNet object-group network CountyNetExt object-group service HTTPS description HTTPS object-group service WWW description HTTP object-group network ComcastLab description IST Lab Comcast Outside Address object-group service DM_INLINE_TCP_1 tcp port-object eq www port-object eq https object-group network DM_INLINE_NETWORK_1 network-object object PR-Rockwood network-object object PR-RockwoodBridges object-group network GS-NACC-Group network-object object GS-NACC network-object object GS-NACC2 network-object object PD-Stonebridge object-group network DM_INLINE_NETWORK_2 network-object object Fairgrounds-CitizenWifi1 network-object object Fairgrounds-CitizenWifi2 network-object object Fairgrounds-StaffWifi object-group network DM_INLINE_NETWORK_3 network-object object Fire15-DMV-Printer network-object object Fire15-DMV-Printer_NAT network-object object FireAdmin-DMV-Printer network-object object FireAdmin-DMV-Printer_NAT access-list outside_access_in remark Browsing to CountyNet access-list outside_access_in remark Browsing to CountyNet access-list outside_cryptomap extended permit ip any object MH-GHHarrowgate access-list outside_cryptomap_1 extended permit ip any object PR-Ettrick access-list outside_cryptomap_2 extended permit ip any object PR-Huguenot access-list outside_cryptomap_5 extended permit ip any object MH-GHNewbys access-list outside_cryptomap_4 extended permit ip any object MH-GHBaron access-list outside_cryptomap_3 extended permit ip any object PD-MCC access-list outside_cryptomap_7 extended permit ip any object-group DM_INLINE_NETWORK_1 access-list outside_cryptomap_6 extended permit ip any object MH-GHCogbill access-list outside_cryptomap_8 extended permit ip any object PR-PointOfRocks access-list outside_cryptomap_10 extended permit ip any object MH-ChesterHouse access-list outside_cryptomap_11 extended permit ip any object PR-Bensley access-list outside_cryptomap_12 extended permit ip any object MH-CESAnnex access-list outside_cryptomap_9 extended permit ip any object PD-MCC access-list outside_cryptomap_13 extended permit ip any object MH-GHPampas access-list outside_cryptomap_16 extended permit ip any object FD-RSB2 access-list outside_cryptomap_14 extended permit ip any object FD-Medic15 access-list outside_cryptomap_15 extended permit ip any object IST-Comcast access-list redistribute remark MH-GHPampas-Rtr access-list redistribute standard permit 172.16.1.0 255.255.255.0 access-list redistribute remark FD-RSB3-Rtr access-list redistribute standard permit 172.16.2.0 255.255.255.0 access-list redistribute remark PR-Trampling-Rtr access-list redistribute standard permit 172.16.3.0 255.255.255.0 access-list redistribute remark FD-RSM2-Rtr access-list redistribute standard permit 172.16.4.0 255.255.255.0 access-list redistribute remark PD-TurnerRd-Rtr access-list redistribute standard permit 172.16.5.0 255.255.255.0 access-list redistribute remark AP-203-Rtr access-list redistribute standard permit 172.16.6.0 255.255.255.0 access-list redistribute remark MH-GHPrestonwood-Rtr access-list redistribute standard permit 172.16.7.0 255.255.255.0 access-list redistribute remark MH-GHEastman-Rtr access-list redistribute standard permit 172.16.8.0 255.255.255.0 access-list redistribute remark MH-GHHuntersChase-Rtr access-list redistribute standard permit 172.16.11.0 255.255.255.0 access-list redistribute remark MH-GHNewbysBridge-Rtr access-list redistribute standard permit 172.16.12.0 255.255.255.0 access-list redistribute remark MH-GHMockingbird-Rtr access-list redistribute standard permit 172.16.13.0 255.255.255.0 access-list redistribute remark MH-GHNorthArch-Rtr access-list redistribute standard permit 172.16.14.0 255.255.255.0 access-list redistribute remark MH-GHObisque-Rtr access-list redistribute standard permit 172.16.15.0 255.255.255.0 access-list redistribute remark MH-GHBenbow-Rtr access-list redistribute standard permit 172.16.16.0 255.255.255.0 access-list redistribute remark MH-ChesterHouse-Rtr access-list redistribute standard permit 172.16.17.0 255.255.255.0 access-list redistribute remark MH-GHHarrowgate-Rtr access-list redistribute standard permit 172.16.18.0 255.255.255.0 access-list redistribute remark MH-BestChoice-Rtr access-list redistribute standard permit 172.16.19.0 255.255.255.0 access-list redistribute remark FD-FS10-Rtr access-list redistribute standard permit 172.16.20.0 255.255.255.0 access-list redistribute remark FD-RSFV1-Rtr access-list redistribute standard permit 172.16.21.0 255.255.255.0 access-list redistribute remark FD-RSFV2-Rtr access-list redistribute standard permit 172.16.22.0 255.255.255.0 access-list redistribute remark Health-WIC-Rtr access-list redistribute standard permit 172.16.23.0 255.255.255.0 access-list redistribute remark MH-CESAnnex-Rtr access-list redistribute standard permit 172.16.24.0 255.255.255.0 access-list redistribute remark PR-Bensley-Rtr access-list redistribute standard permit 172.16.25.0 255.255.255.0 access-list redistribute remark PR-Ettrick-Rtr access-list redistribute standard permit 172.16.26.0 255.255.255.0 access-list redistribute remark PR-Huguenot-Rtr access-list redistribute standard permit 172.16.27.0 255.255.255.0 access-list redistribute remark PR-PointOfRocks-Rtr access-list redistribute standard permit 172.16.28.0 255.255.255.0 access-list redistribute remark PR-Rockwood-Rtr access-list redistribute standard permit 172.16.29.0 255.255.255.0 access-list redistribute remark MH-GHCogbill-Rtr access-list redistribute standard permit 172.16.30.0 255.255.255.0 access-list redistribute remark PD-MCC access-list redistribute standard permit 172.16.31.0 255.255.255.0 access-list redistribute remark PD-Stonebridge-Rtr access-list redistribute standard permit 172.16.33.0 255.255.255.0 access-list redistribute remark FD-RSB2-Rtr (4G Router) access-list redistribute standard permit 172.16.34.0 255.255.255.0 access-list redistribute remark CCS-CH-Rtr access-list redistribute standard permit 172.16.35.0 255.255.255.0 access-list redistribute remark FD-Medic15 access-list redistribute standard permit 172.16.36.0 255.255.255.0 access-list redistribute remark IST-Comcast-Lab access-list redistribute standard permit 172.16.123.0 255.255.255.0 access-list redistribute standard permit 172.23.149.0 255.255.255.0 access-list redistribute standard permit 192.168.9.208 255.255.255.248 access-list outside_cryptomap_17 extended permit ip any object MH-GHWoodpecker access-list outside_cryptomap_18 extended permit ip any object FD-RSB3 access-list outside_cryptomap_20 extended permit ip any object FD-FS10 access-list outside_cryptomap_19 extended permit ip any object Adult-Probation access-list outside_cryptomap_21 extended permit ip any object FD-RSFV1 access-list outside_cryptomap_22 extended permit ip any object FD-RSFV2 access-list outside_cryptomap_23 extended permit ip any object Health-WIC access-list outside_cryptomap_25 extended permit ip any object MH-GHEastman access-list outside_cryptomap_24 extended permit ip any object MH-BestChoice access-list outside_cryptomap_28 extended permit ip any object MH-GHNorthArch1 access-list outside_cryptomap_27 extended permit ip any object MH-GHMockingbird access-list outside_cryptomap_26 extended permit ip any object MH-GHHuntersChase access-list outside_cryptomap_29 extended permit ip any object MH-GHObisque access-list outside_cryptomap_30 extended permit ip any object MH-GHPrestonwood access-list outside_cryptomap_31 extended permit ip any object PR-Trampling access-list outside_cryptomap_32 extended permit ip any object FD-RSM2 access-list outside_cryptomap_33 extended permit ip any object CCS-ColonialHeights access-list outside_cryptomap_34 extended permit ip any object FD-Medic16 access-list outside_cryptomap_35 extended permit ip any object FD-Medic17 access-list outside_cryptomap_36 extended permit ip any object FD-FS23 access-list outside_cryptomap_37 extended permit ip any object-group DM_INLINE_NETWORK_2 access-list outside_cryptomap_39 extended permit ip object CrimeNtel_NAT object Henrico access-list outside_cryptomap_38 extended permit ip object VITA_NAT object VITA access-list outside_access_in_1 extended permit tcp any object-group DM_INLINE_NETWORK_3 eq lpd access-list outside_cryptomap_43 extended permit ip any object FD-Medic21 access-list outside_cryptomap_44 extended permit ip any object RSM-Medic321 access-list outside_cryptomap_45 extended permit ip any object RSM-Medic323 access-list outside_cryptomap_40 extended permit ip object CrimeNtel_NAT object Hanover access-list outside_cryptomap_41 extended permit ip object CrimeNtel_NAT object Richmond access-list outside_cryptomap_42 extended permit ip any object MH-GHWoodpecker access-list outside_cryptomap_46 extended permit ip any object RSM-Medic325 access-list outside_cryptomap_47 extended permit ip any object RSM-Medic327 access-list outside_cryptomap_48 extended permit ip any object RSM-Medic329 pager lines 24 logging enable logging timestamp logging buffer-size 65000 logging trap informational logging asdm informational logging host inside 172.24.10.138 logging class auth buffered debugging logging class webvpn buffered debugging logging class svc buffered debugging logging class ssl buffered debugging no logging message 717045 no logging message 716021 no logging message 611318 no logging message 602102 no logging message 713204 no logging message 611317 no logging message 602101 no logging message 737010 no logging message 717047 no logging message 611316 no logging message 717048 no logging message 716016 no logging message 611323 no logging message 716017 no logging message 611322 no logging message 716018 no logging message 611321 no logging message 737006 no logging message 716019 no logging message 713211 no logging message 611320 no logging message 741004 no logging message 713213 no logging message 737005 no logging message 109001 no logging message 741002 no logging message 713215 no logging message 741003 no logging message 717024 no logging message 603107 no logging message 109003 no logging message 741000 no logging message 717025 no logging message 603106 no logging message 109002 no logging message 741001 no logging message 737001 no logging message 603105 no logging message 109005 no logging message 603104 no logging message 717028 no logging message 611303 no logging message 109007 no logging message 717029 no logging message 611302 no logging message 109006 no logging message 717030 no logging message 620001 no logging message 611301 no logging message 603109 no logging message 603108 no logging message 611307 no logging message 718049 no logging message 717033 no logging message 611306 no logging message 717034 no logging message 713160 no logging message 611305 no logging message 402130 no logging message 302304 no logging message 718051 no logging message 717035 no logging message 611304 no logging message 717036 no logging message 611311 no logging message 611310 no logging message 426001 no logging message 402129 no logging message 315011 no logging message 717038 no logging message 713164 no logging message 611309 no logging message 426002 no logging message 611308 no logging message 426003 no logging message 725008 no logging message 725009 no logging message 713169 no logging message 725010 no logging message 718058 no logging message 410004 no logging message 311004 no logging message 109021 no logging message 725011 no logging message 718059 no logging message 713171 no logging message 725012 no logging message 718036 no logging message 713170 no logging message 311002 no logging message 725013 no logging message 718037 no logging message 713173 no logging message 311003 no logging message 725014 no logging message 718038 no logging message 713172 no logging message 621001 no logging message 106015 no logging message 718039 no logging message 311001 no logging message 109008 no logging message 106012 no logging message 717016 no logging message 621003 no logging message 713177 no logging message 621002 no logging message 613002 no logging message 718034 no logging message 621005 no logging message 613003 no logging message 718035 no logging message 621004 no logging message 621007 no logging message 613001 no logging message 603103 no logging message 314002 no logging message 621006 no logging message 603102 no logging message 330005 no logging message 314003 no logging message 109014 no logging message 718046 no logging message 717022 no logging message 603101 no logging message 718047 no logging message 602304 no logging message 314001 no logging message 718040 no logging message 322004 no logging message 314006 no logging message 718041 no logging message 713121 no logging message 314004 no logging message 314005 no logging message 724004 no logging message 604103 no logging message 718021 no logging message 604102 no logging message 718022 no logging message 713124 no logging message 604101 no logging message 718023 no logging message 403500 no logging message 725001 no logging message 723001 no logging message 718017 no logging message 709001 no logging message 725002 no logging message 723002 no logging message 713128 no logging message 201010 no logging message 725003 no logging message 724003 no logging message 723003 no logging message 718019 no logging message 717003 no logging message 725004 no logging message 723004 no logging message 720060 no logging message 717004 no logging message 709002 no logging message 201012 no logging message 734003 no logging message 725005 no logging message 723005 no logging message 720061 no logging message 718029 no logging message 717005 no logging message 725006 no logging message 723006 no logging message 720062 no logging message 718030 no logging message 717006 no logging message 734001 no logging message 725007 no logging message 723007 no logging message 720063 no logging message 717007 no logging message 720056 no logging message 719024 no logging message 420004 no logging message 720057 no logging message 719025 no logging message 718025 no logging message 420005 no logging message 339007 no logging message 720058 no logging message 719026 no logging message 718026 no logging message 720059 no logging message 718027 no logging message 604104 no logging message 718004 no logging message 622001 no logging message 606004 no logging message 713143 no logging message 606003 no logging message 419003 no logging message 720048 no logging message 719016 no logging message 606002 no logging message 720049 no logging message 719017 no logging message 713905 no logging message 713145 no logging message 606001 no logging message 720050 no logging message 719018 no logging message 713906 no logging message 719019 no logging message 718003 no logging message 713147 no logging message 719020 no logging message 720045 no logging message 719021 no logging message 718013 no logging message 720046 no logging message 719022 no logging message 719023 no logging message 617100 no logging message 308001 no logging message 723008 no logging message 720040 no logging message 421004 no logging message 723009 no logging message 720041 no logging message 719009 no logging message 421005 no logging message 723010 no logging message 720042 no logging message 719010 no logging message 723011 no logging message 719011 no logging message 723012 no logging message 719012 no logging message 723013 no logging message 720037 no logging message 719013 no logging message 723014 no logging message 703002 no logging message 421002 no logging message 720039 no logging message 719015 no logging message 720032 no logging message 713094 no logging message 719001 no logging message 713097 no logging message 711001 no logging message 703001 no logging message 106026 no logging message 720034 no logging message 713096 no logging message 719003 no logging message 713099 no logging message 720028 no logging message 719004 no logging message 711002 no logging message 106025 no logging message 720029 no logging message 719005 no logging message 713101 no logging message 720030 no logging message 719006 no logging message 720031 no logging message 719007 no logging message 713103 no logging message 720024 no logging message 720025 no logging message 199003 no logging message 720026 no logging message 713104 no logging message 199002 no logging message 720027 no logging message 199005 no logging message 713108 no logging message 720023 no logging message 752008 no logging message 713113 no logging message 713114 no logging message 732003 no logging message 722013 no logging message 713117 no logging message 732002 no logging message 722014 no logging message 720014 no logging message 732001 no logging message 720015 no logging message 737031 no logging message 305007 no logging message 199019 no logging message 751003 no logging message 720010 no logging message 199018 no logging message 752002 no logging message 737029 no logging message 720004 no logging message 720005 no logging message 737026 no logging message 722022 no logging message 720006 no logging message 722023 no logging message 721001 no logging message 712001 no logging message 721002 no logging message 720002 no logging message 721003 no logging message 720003 no logging message 712003 no logging message 721004 no logging message 713066 no logging message 712002 no logging message 305012 no logging message 722029 no logging message 305011 no logging message 722030 no logging message 721006 no logging message 305010 no logging message 113017 no logging message 722031 no logging message 305009 no logging message 113016 no logging message 722024 no logging message 721008 no logging message 722025 no logging message 722026 no logging message 721010 no logging message 722027 no logging message 722036 no logging message 721012 no logging message 710005 no logging message 338301 no logging message 721014 no logging message 710004 no logging message 113009 no logging message 713079 no logging message 710007 no logging message 113008 no logging message 721016 no logging message 710006 no logging message 614002 no logging message 113011 no logging message 710001 no logging message 113010 no logging message 721018 no logging message 715080 no logging message 113013 no logging message 614001 no logging message 113012 no logging message 710002 no logging message 113015 no logging message 731003 no logging message 113014 no logging message 106102 no logging message 731002 no logging message 210022 no logging message 731001 no logging message 103012 no logging message 113003 no logging message 715073 no logging message 713025 no logging message 113002 no logging message 715072 no logging message 713024 no logging message 113005 no logging message 715075 no logging message 713027 no logging message 113004 no logging message 715074 no logging message 713026 no logging message 113007 no logging message 722053 no logging message 715077 no logging message 713029 no logging message 113006 no logging message 715076 no logging message 713028 no logging message 715079 no logging message 713031 no logging message 702307 no logging message 715078 no logging message 713030 no logging message 702306 no logging message 608001 no logging message 702304 no logging message 713035 no logging message 616001 no logging message 339009 no logging message 713034 no logging message 713037 no logging message 335004 no logging message 713036 no logging message 713039 no logging message 335006 no logging message 713038 no logging message 335007 no logging message 713040 no logging message 335001 no logging message 415001 no logging message 303002 no logging message 713044 no logging message 415003 no logging message 607003 no logging message 415002 no logging message 617002 no logging message 615002 no logging message 715049 no logging message 617003 no logging message 607001 no logging message 715048 no logging message 114005 no logging message 715051 no logging message 617001 no logging message 615001 no logging message 114004 no logging message 715050 no logging message 611102 no logging message 715053 no logging message 611101 no logging message 605005 no logging message 715052 no logging message 713052 no logging message 617004 no logging message 605004 no logging message 715055 no logging message 715054 no logging message 715041 no logging message 715040 no logging message 715043 no logging message 715042 no logging message 715045 no logging message 715044 no logging message 701002 no logging message 715047 no logging message 715046 no logging message 713256 no logging message 715065 no logging message 713001 no logging message 701001 no logging message 715064 no logging message 715067 no logging message 713263 no logging message 715066 no logging message 715069 no logging message 715068 no logging message 715071 no logging message 713267 no logging message 713007 no logging message 715070 no logging message 713264 no logging message 715057 no logging message 713265 no logging message 414004 no logging message 334008 no logging message 715056 no logging message 414007 no logging message 338104 no logging message 334009 no logging message 715059 no logging message 713271 no logging message 715058 no logging message 715061 no logging message 713269 no logging message 610101 no logging message 414008 no logging message 302010 no logging message 111009 no logging message 715060 no logging message 444103 no logging message 302009 no logging message 715063 no logging message 715062 no logging message 302015 no logging message 715017 no logging message 713273 no logging message 302014 no logging message 715016 no logging message 302013 no logging message 334001 no logging message 715019 no logging message 302012 no logging message 715018 no logging message 302003 no logging message 715021 no logging message 602303 no logging message 334004 no logging message 715020 no logging message 312001 no logging message 715023 no logging message 713219 no logging message 713023 no logging message 444108 no logging message 425004 no logging message 338101 no logging message 110003 no logging message 715022 no logging message 338102 no logging message 110002 no logging message 334007 no logging message 716041 no logging message 715009 no logging message 338103 no logging message 716040 no logging message 715008 no logging message 713222 no logging message 444107 no logging message 304005 no logging message 716043 no logging message 715011 no logging message 713223 no logging message 444104 no logging message 304004 no logging message 302004 no logging message 716042 no logging message 715010 no logging message 713220 no logging message 425001 no logging message 415017 no logging message 716037 no logging message 715013 no logging message 713221 no logging message 336011 no logging message 425002 no logging message 335012 no logging message 716036 no logging message 715012 no logging message 425003 no logging message 304009 no logging message 335013 no logging message 716039 no logging message 715015 no logging message 335014 no logging message 716038 no logging message 715014 no logging message 713224 no logging message 716033 no logging message 715033 no logging message 713225 no logging message 716032 no logging message 715032 no logging message 338304 no logging message 335009 no logging message 333009 no logging message 716035 no logging message 715035 no logging message 335010 no logging message 716034 no logging message 715034 no logging message 713228 no logging message 730003 no logging message 335011 no logging message 715037 no logging message 746002 no logging message 730002 no logging message 715036 no logging message 730001 no logging message 713235 no logging message 715038 no logging message 302303 no logging message 746001 no logging message 730007 no logging message 715025 no logging message 713233 no logging message 730006 no logging message 715024 no logging message 730005 no logging message 716059 no logging message 715027 no logging message 746004 no logging message 730004 no logging message 716058 no logging message 715026 no logging message 713236 no logging message 622102 no logging message 746005 no logging message 715029 no logging message 714005 no logging message 730010 no logging message 715028 no logging message 714004 no logging message 716055 no logging message 715031 no logging message 714007 no logging message 622101 no logging message 730008 no logging message 715030 no logging message 714006 no logging message 609002 no logging message 716049 no logging message 714001 no logging message 108005 no logging message 716051 no logging message 716012 no logging message 714003 no logging message 609001 no logging message 108007 no logging message 716050 no logging message 716013 no logging message 714002 no logging message 428001 no logging message 108006 no logging message 716014 no logging message 120007 no logging message 113033 no logging message 716015 no logging message 302033 no logging message 716008 no logging message 321004 no logging message 716009 no logging message 716010 no logging message 714009 no logging message 713184 no logging message 120003 no logging message 113037 no logging message 716011 no logging message 714008 no logging message 713187 no logging message 333001 no logging message 716004 no logging message 714011 no logging message 113039 no logging message 716005 no logging message 714010 no logging message 321003 no logging message 333003 no logging message 716006 no logging message 109025 no logging message 109024 no logging message 713190 no logging message 716001 no logging message 715001 no logging message 716002 no logging message 715002 no logging message 713192 no logging message 716003 no logging message 715003 no logging message 113028 no logging message 716028 no logging message 715004 no logging message 716029 no logging message 715005 no logging message 716030 no logging message 715006 no logging message 199909 no logging message 302018 no logging message 716031 no logging message 715007 no logging message 302017 no logging message 726001 no logging message 716024 no logging message 611315 no logging message 302016 no logging message 737016 no logging message 717041 no logging message 716025 no logging message 611314 no logging message 737017 no logging message 716026 no logging message 737014 no logging message 717043 no logging message 716027 no logging message 611312 no logging message 602104 no logging message 302021 no logging message 737015 no logging message 716020 no logging message 199907 no logging message 611319 no logging message 602103 no logging message 302020 mtu outside 1500 mtu inside 1500 ip local pool UTIL-SCADA 172.23.145.58-172.23.145.61 mask 255.255.255.240 ip local pool Employee 172.23.149.2-172.23.149.254 mask 255.255.255.0 ip local pool IST-NetworkAdmin 172.23.145.82-172.23.145.94 mask 255.255.255.240 ip local pool PD-Unfiltered 172.23.145.66-172.23.145.78 mask 255.255.255.240 ip local pool Duo 172.23.162.2-172.23.163.254 mask 255.255.254.0 no failover icmp unreachable rate-limit 1 burst-size 1 asdm image disk0:/asdm-731-101.bin no asdm history enable arp timeout 14400 no arp permit-nonconnected nat (inside,outside) source static Fire15-DMV-Printer Fire15-DMV-Printer_NAT nat (inside,outside) source static FireAdmin-DMV-Printer FireAdmin-DMV-Printer_NAT nat (inside,outside) source static Verizon-ClassC VITA_NAT destination static VITA VITA nat (inside,outside) source static any any destination static VITA VITA no-proxy-arp route-lookup nat (inside,outside) source static Verizon-ClassC Verizon-ClassC destination static VITA VITA no-proxy-arp route-lookup ! nat (inside,outside) after-auto source static syracuse CrimeNtel_NAT access-group outside_access_in_1 in interface outside ! route-map redistribute permit 1 match ip address redistribute ! ! router eigrp 1 network 172.23.144.0 255.255.255.0 passive-interface outside redistribute static route-map redistribute ! router ospf 20 network 198.101.7.0 255.255.255.0 area 0.0.0.0 network 208.0.238.0 255.255.255.0 area 0.0.0.0 area 0.0.0.0 log-adj-changes ! route outside 172.16.1.0 255.255.255.0 198.101.7.1 1 route outside 172.16.2.0 255.255.255.0 198.101.7.1 1 route outside 172.16.3.0 255.255.255.0 198.101.7.1 1 route outside 172.16.4.0 255.255.255.0 198.101.7.1 1 route outside 172.16.5.0 255.255.255.0 198.101.7.1 1 route outside 172.16.6.0 255.255.255.0 198.101.7.1 1 route outside 172.16.7.0 255.255.255.0 198.101.7.1 1 route outside 172.16.8.0 255.255.255.0 198.101.7.1 1 route outside 172.16.11.0 255.255.255.0 198.101.7.1 1 route outside 172.16.12.0 255.255.255.0 198.101.7.1 1 route outside 172.16.13.0 255.255.255.0 198.101.7.1 1 route outside 172.16.14.0 255.255.255.0 198.101.7.1 1 route outside 172.16.15.0 255.255.255.0 198.101.7.1 1 route outside 172.16.16.0 255.255.255.0 198.101.7.1 1 route outside 172.16.17.0 255.255.255.0 198.101.7.1 1 route outside 172.16.18.0 255.255.255.0 198.101.7.1 1 route outside 172.16.19.0 255.255.255.0 198.101.7.1 1 route outside 172.16.20.0 255.255.255.0 198.101.7.1 1 route outside 172.16.21.0 255.255.255.0 198.101.7.1 1 route outside 172.16.22.0 255.255.255.0 198.101.7.1 1 route outside 172.16.23.0 255.255.255.0 198.101.7.1 1 route outside 172.16.24.0 255.255.255.0 198.101.7.1 1 route outside 172.16.25.0 255.255.255.0 198.101.7.1 1 route outside 172.16.26.0 255.255.255.0 198.101.7.1 1 route outside 172.16.27.0 255.255.255.0 198.101.7.1 1 route outside 172.16.28.0 255.255.255.0 198.101.7.1 1 route outside 172.16.29.0 255.255.255.0 198.101.7.1 1 route outside 172.16.30.0 255.255.255.0 198.101.7.1 1 route outside 172.16.31.0 255.255.255.0 198.101.7.1 1 route outside 172.16.34.0 255.255.255.0 198.101.7.1 1 route outside 172.16.35.0 255.255.255.0 198.101.7.1 1 route outside 172.16.36.0 255.255.255.0 198.101.7.1 1 route outside 172.16.38.0 255.255.255.0 198.101.7.1 1 route outside 172.16.39.0 255.255.255.0 198.101.7.1 1 route outside 172.16.40.0 255.255.254.0 198.101.7.1 1 route outside 172.16.42.0 255.255.255.0 198.101.7.1 1 route outside 172.16.43.0 255.255.255.0 198.101.7.1 1 route outside 172.16.44.0 255.255.255.0 198.101.7.1 1 route outside 172.16.45.0 255.255.255.0 198.101.7.1 1 route outside 172.16.46.0 255.255.255.0 198.101.7.1 1 route outside 172.16.47.0 255.255.255.0 198.101.7.1 1 route outside 172.16.48.0 255.255.255.0 198.101.7.1 1 route outside 172.16.49.0 255.255.255.0 198.101.7.1 1 route outside 172.16.50.0 255.255.255.0 198.101.7.1 1 route outside 172.16.51.0 255.255.255.0 198.101.7.1 1 route outside 172.16.52.0 255.255.255.0 198.101.7.1 1 route outside 192.168.9.208 255.255.255.248 198.101.7.1 1 route inside 0.0.0.0 0.0.0.0 172.23.144.1 tunneled timeout xlate 3:00:00 timeout pat-xlate 0:00:30 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute timeout tcp-proxy-reassembly 0:01:00 timeout floating-conn 0:00:00 ldap attribute-map LDAP_memberOf map-name memberOf Group-Policy map-value memberOf CN=VPN,DC=chesterfield,DC=gov RemoteAccess_Grp dynamic-access-policy-record DfltAccessPolicy aaa-server certificate protocol nt aaa-server certificate (inside) host 172.21.200.83 nt-auth-domain-controller natredame aaa-server certificate (inside) host 172.24.10.146 nt-auth-domain-controller Princeton aaa-server certificate (inside) host 172.30.10.3 nt-auth-domain-controller Rage aaa-server dartmouth protocol radius aaa-server dartmouth (inside) host 172.24.10.145 key ***** aaa-server Domain protocol nt aaa-server Domain (inside) host 172.24.10.146 nt-auth-domain-controller princeton aaa-server Domain (inside) host 172.30.10.3 nt-auth-domain-controller rage aaa-server LDAP_Domain protocol ldap aaa-server LDAP_Domain (inside) host 172.24.10.146 ldap-base-dn DC=chesterfield,DC=gov ldap-naming-attribute sAMAccountName ldap-login-password ***** ldap-login-dn vpn.firewall server-type microsoft ldap-attribute-map LDAP_memberOf aaa-server Marion protocol radius aaa-server Marion (inside) host 172.24.10.104 key ***** user-identity default-domain LOCAL aaa authentication ssh console LOCAL aaa authentication http console LOCAL http server enable http 172.24.0.0 255.255.0.0 inside http 172.21.8.0 255.255.255.0 inside http 172.21.10.0 255.255.255.0 inside http 172.23.145.32 255.255.255.240 inside http 172.23.145.80 255.255.255.240 inside http 172.23.145.128 255.255.255.240 inside http 172.23.72.0 255.255.254.0 inside snmp-server host inside 172.21.210.131 poll community ***** version 2c snmp-server location IST no snmp-server contact snmp-server community ***** snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart crypto ipsec ikev1 transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac crypto ipsec ikev1 transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac crypto ipsec ikev1 transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac crypto ipsec ikev1 transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac crypto ipsec ikev1 transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac crypto ipsec ikev1 transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac crypto ipsec ikev1 transform-set ESP-3DES-SHA esp-3des esp-sha-hmac crypto ipsec ikev1 transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac crypto ipsec ikev1 transform-set ESP-DES-SHA esp-des esp-sha-hmac crypto ipsec ikev1 transform-set ESP-DES-MD5 esp-des esp-md5-hmac crypto ipsec ikev1 transform-set ESP-AES-128-SHA-TRANS esp-aes esp-sha-hmac crypto ipsec ikev1 transform-set ESP-AES-128-SHA-TRANS mode transport crypto ipsec ikev1 transform-set ESP-AES-128-MD5-TRANS esp-aes esp-md5-hmac crypto ipsec ikev1 transform-set ESP-AES-128-MD5-TRANS mode transport crypto ipsec ikev1 transform-set ESP-AES-192-SHA-TRANS esp-aes-192 esp-sha-hmac crypto ipsec ikev1 transform-set ESP-AES-192-SHA-TRANS mode transport crypto ipsec ikev1 transform-set ESP-AES-192-MD5-TRANS esp-aes-192 esp-md5-hmac crypto ipsec ikev1 transform-set ESP-AES-192-MD5-TRANS mode transport crypto ipsec ikev1 transform-set ESP-AES-256-SHA-TRANS esp-aes-256 esp-sha-hmac crypto ipsec ikev1 transform-set ESP-AES-256-SHA-TRANS mode transport crypto ipsec ikev1 transform-set ESP-AES-256-MD5-TRANS esp-aes-256 esp-md5-hmac crypto ipsec ikev1 transform-set ESP-AES-256-MD5-TRANS mode transport crypto ipsec ikev1 transform-set ESP-3DES-SHA-TRANS esp-3des esp-sha-hmac crypto ipsec ikev1 transform-set ESP-3DES-SHA-TRANS mode transport crypto ipsec ikev1 transform-set ESP-3DES-MD5-TRANS esp-3des esp-md5-hmac crypto ipsec ikev1 transform-set ESP-3DES-MD5-TRANS mode transport crypto ipsec ikev1 transform-set ESP-DES-SHA-TRANS esp-des esp-sha-hmac crypto ipsec ikev1 transform-set ESP-DES-SHA-TRANS mode transport crypto ipsec ikev1 transform-set ESP-DES-MD5-TRANS esp-des esp-md5-hmac crypto ipsec ikev1 transform-set ESP-DES-MD5-TRANS mode transport crypto ipsec ikev2 ipsec-proposal AES256 protocol esp encryption aes-256 protocol esp integrity sha-1 md5 crypto ipsec ikev2 ipsec-proposal AES192 protocol esp encryption aes-192 protocol esp integrity sha-1 md5 crypto ipsec ikev2 ipsec-proposal AES protocol esp encryption aes protocol esp integrity sha-1 md5 crypto ipsec ikev2 ipsec-proposal 3DES protocol esp encryption 3des protocol esp integrity sha-1 md5 crypto ipsec ikev2 ipsec-proposal DES protocol esp encryption des protocol esp integrity sha-1 md5 crypto ipsec security-association replay window-size 1024 crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set ikev1 transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5 crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set ikev2 ipsec-proposal AES256 AES192 AES 3DES DES crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set nat-t-disable crypto map outside_map0 1 match address outside_cryptomap crypto map outside_map0 1 set peer 50.73.9.181 crypto map outside_map0 1 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 1 set reverse-route crypto map outside_map0 2 match address outside_cryptomap_1 crypto map outside_map0 2 set peer 173.167.55.125 crypto map outside_map0 2 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 2 set reverse-route crypto map outside_map0 3 match address outside_cryptomap_2 crypto map outside_map0 3 set peer 23.25.120.169 crypto map outside_map0 3 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 3 set reverse-route crypto map outside_map0 4 match address outside_cryptomap_3 crypto map outside_map0 4 set connection-type answer-only crypto map outside_map0 4 set peer 166.161.78.58 crypto map outside_map0 4 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 4 set reverse-route crypto map outside_map0 5 match address outside_cryptomap_4 crypto map outside_map0 5 set peer 50.78.232.41 crypto map outside_map0 5 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 5 set reverse-route crypto map outside_map0 6 match address outside_cryptomap_5 crypto map outside_map0 6 set peer 23.31.103.145 crypto map outside_map0 6 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 6 set reverse-route crypto map outside_map0 7 match address outside_cryptomap_6 crypto map outside_map0 7 set peer 23.25.98.93 crypto map outside_map0 7 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 7 set reverse-route crypto map outside_map0 8 match address outside_cryptomap_7 crypto map outside_map0 8 set peer 173.167.55.129 crypto map outside_map0 8 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 8 set reverse-route crypto map outside_map0 9 match address outside_cryptomap_8 crypto map outside_map0 9 set peer 23.25.113.237 crypto map outside_map0 9 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 9 set reverse-route crypto map outside_map0 10 match address outside_cryptomap_9 crypto map outside_map0 10 set connection-type answer-only crypto map outside_map0 10 set peer 216.117.249.186 crypto map outside_map0 10 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 10 set reverse-route crypto map outside_map0 11 match address outside_cryptomap_10 crypto map outside_map0 11 set peer 75.146.20.189 crypto map outside_map0 11 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 11 set trustpoint ASDM_TrustPoint6 crypto map outside_map0 11 set reverse-route crypto map outside_map0 12 match address outside_cryptomap_11 crypto map outside_map0 12 set peer 173.167.55.181 crypto map outside_map0 12 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 12 set reverse-route crypto map outside_map0 13 match address outside_cryptomap_12 crypto map outside_map0 13 set peer 23.25.98.49 crypto map outside_map0 13 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 13 set trustpoint ASDM_TrustPoint6 crypto map outside_map0 13 set reverse-route crypto map outside_map0 14 match address outside_cryptomap_13 crypto map outside_map0 14 set peer 75.146.29.69 crypto map outside_map0 14 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 14 set trustpoint ASDM_TrustPoint6 crypto map outside_map0 14 set reverse-route crypto map outside_map0 15 match address outside_cryptomap_14 crypto map outside_map0 15 set peer 166.150.189.232 crypto map outside_map0 15 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 15 set reverse-route crypto map outside_map0 16 match address outside_cryptomap_15 crypto map outside_map0 16 set connection-type answer-only crypto map outside_map0 16 set peer 68.57.166.218 crypto map outside_map0 16 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 16 set trustpoint ASDM_TrustPoint6 crypto map outside_map0 16 set reverse-route crypto map outside_map0 17 match address outside_cryptomap_16 crypto map outside_map0 17 set connection-type answer-only crypto map outside_map0 17 set peer 166.159.77.244 crypto map outside_map0 17 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 17 set trustpoint ASDM_TrustPoint6 crypto map outside_map0 17 set reverse-route crypto map outside_map0 18 match address outside_cryptomap_17 crypto map outside_map0 18 set peer 96.94.221.69 crypto map outside_map0 18 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 19 match address outside_cryptomap_18 crypto map outside_map0 19 set peer 70.88.189.25 crypto map outside_map0 19 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 19 set trustpoint ASDM_TrustPoint6 crypto map outside_map0 19 set reverse-route crypto map outside_map0 20 match address outside_cryptomap_19 crypto map outside_map0 20 set connection-type answer-only crypto map outside_map0 20 set peer 74.92.187.69 crypto map outside_map0 20 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 20 set reverse-route crypto map outside_map0 21 match address outside_cryptomap_20 crypto map outside_map0 21 set connection-type answer-only crypto map outside_map0 21 set peer 50.77.74.149 crypto map outside_map0 21 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 21 set reverse-route crypto map outside_map0 22 match address outside_cryptomap_21 crypto map outside_map0 22 set peer 50.77.74.173 crypto map outside_map0 22 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 22 set reverse-route crypto map outside_map0 23 match address outside_cryptomap_22 crypto map outside_map0 23 set connection-type answer-only crypto map outside_map0 23 set peer 50.77.74.161 crypto map outside_map0 23 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 23 set reverse-route crypto map outside_map0 24 match address outside_cryptomap_23 crypto map outside_map0 24 set connection-type answer-only crypto map outside_map0 24 set peer 70.88.168.173 crypto map outside_map0 24 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 24 set reverse-route crypto map outside_map0 25 match address outside_cryptomap_24 crypto map outside_map0 25 set connection-type answer-only crypto map outside_map0 25 set peer 50.73.237.117 crypto map outside_map0 25 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 25 set reverse-route crypto map outside_map0 26 match address outside_cryptomap_25 crypto map outside_map0 26 set connection-type answer-only crypto map outside_map0 26 set peer 74.94.208.169 crypto map outside_map0 26 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 26 set reverse-route crypto map outside_map0 27 match address outside_cryptomap_26 crypto map outside_map0 27 set connection-type answer-only crypto map outside_map0 27 set peer 70.88.190.97 crypto map outside_map0 27 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 27 set reverse-route crypto map outside_map0 28 match address outside_cryptomap_27 crypto map outside_map0 28 set connection-type answer-only crypto map outside_map0 28 set peer 74.94.214.125 crypto map outside_map0 28 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 28 set reverse-route crypto map outside_map0 29 match address outside_cryptomap_28 crypto map outside_map0 29 set peer 50.73.10.101 crypto map outside_map0 29 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 29 set reverse-route crypto map outside_map0 30 match address outside_cryptomap_29 crypto map outside_map0 30 set connection-type answer-only crypto map outside_map0 30 set peer 74.94.208.61 crypto map outside_map0 30 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 30 set reverse-route crypto map outside_map0 31 match address outside_cryptomap_30 crypto map outside_map0 31 set connection-type answer-only crypto map outside_map0 31 set peer 50.73.11.217 crypto map outside_map0 31 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 31 set reverse-route crypto map outside_map0 32 match address outside_cryptomap_31 crypto map outside_map0 32 set peer 70.89.239.209 crypto map outside_map0 32 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 32 set reverse-route crypto map outside_map0 33 match address outside_cryptomap_32 crypto map outside_map0 33 set connection-type answer-only crypto map outside_map0 33 set peer 75.145.243.113 crypto map outside_map0 33 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 33 set reverse-route crypto map outside_map0 34 match address outside_cryptomap_33 crypto map outside_map0 34 set peer 50.242.60.89 crypto map outside_map0 34 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 34 set reverse-route crypto map outside_map0 35 match address outside_cryptomap_34 crypto map outside_map0 35 set peer 166.157.75.93 crypto map outside_map0 35 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 35 set reverse-route crypto map outside_map0 36 match address outside_cryptomap_35 crypto map outside_map0 36 set peer 166.157.75.94 crypto map outside_map0 36 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 36 set reverse-route crypto map outside_map0 37 match address outside_cryptomap_36 crypto map outside_map0 37 set peer 50.242.35.173 crypto map outside_map0 37 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 37 set reverse-route crypto map outside_map0 38 match address outside_cryptomap_37 crypto map outside_map0 38 set peer 50.251.114.157 crypto map outside_map0 38 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 38 set reverse-route crypto map outside_map0 39 match address outside_cryptomap_38 crypto map outside_map0 39 set peer 166.67.64.86 crypto map outside_map0 39 set ikev1 transform-set ESP-AES-256-SHA crypto map outside_map0 39 set security-association lifetime seconds 21600 crypto map outside_map0 39 set security-association lifetime kilobytes 4194303 crypto map outside_map0 40 match address outside_cryptomap_39 crypto map outside_map0 40 set peer 173.242.161.254 crypto map outside_map0 40 set ikev1 transform-set ESP-AES-256-SHA crypto map outside_map0 40 set security-association lifetime seconds 21600 crypto map outside_map0 40 set security-association lifetime kilobytes 4194303 crypto map outside_map0 41 match address outside_cryptomap_40 crypto map outside_map0 41 set pfs group5 crypto map outside_map0 41 set peer 64.158.197.54 crypto map outside_map0 41 set ikev1 transform-set ESP-AES-256-SHA crypto map outside_map0 41 set ikev2 ipsec-proposal AES256 AES192 AES 3DES DES crypto map outside_map0 41 set security-association lifetime seconds 21600 crypto map outside_map0 41 set security-association lifetime kilobytes 4194303 crypto map outside_map0 42 match address outside_cryptomap_41 crypto map outside_map0 42 set peer 65.202.206.3 crypto map outside_map0 42 set ikev1 transform-set ESP-AES-256-SHA crypto map outside_map0 42 set security-association lifetime seconds 21600 crypto map outside_map0 42 set security-association lifetime kilobytes 4194303 crypto map outside_map0 43 match address outside_cryptomap_43 crypto map outside_map0 43 set peer 166.157.75.95 crypto map outside_map0 43 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 43 set reverse-route crypto map outside_map0 44 match address outside_cryptomap_44 crypto map outside_map0 44 set peer 166.143.241.228 crypto map outside_map0 44 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 44 set reverse-route crypto map outside_map0 45 match address outside_cryptomap_45 crypto map outside_map0 45 set peer 166.143.241.229 crypto map outside_map0 45 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 45 set reverse-route crypto map outside_map0 46 match address outside_cryptomap_46 crypto map outside_map0 46 set peer 166.143.241.230 crypto map outside_map0 46 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 46 set reverse-route crypto map outside_map0 47 match address outside_cryptomap_47 crypto map outside_map0 47 set peer 166.143.241.231 crypto map outside_map0 47 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 47 set reverse-route crypto map outside_map0 48 match address outside_cryptomap_48 crypto map outside_map0 48 set peer 166.143.241.232 crypto map outside_map0 48 set ikev1 transform-set ESP-3DES-SHA crypto map outside_map0 48 set reverse-route crypto map outside_map0 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP crypto map outside_map0 interface outside crypto ca trustpoint ASDM_TrustPoint1 enrollment terminal crl configure crypto ca trustpoint VPN-B.chesterfield.gov crl configure crypto ca trustpoint ASDM_TrustPoint0 enrollment terminal subject-name CN=vpn-b.chesterfield.gov,OU=IST,O=Chesterfield County,C=US,St=Virginia,L=Chesterfield ip-address 208.0.9.85 crl configure crypto ca trustpoint vpn-b crl configure crypto ca trustpoint ASDM_TrustPoint3 revocation-check crl none enrollment terminal crl configure policy both url 1 http://chicago.chesterfield.gov/CertEnroll/Chicago.crl cache-time 15 ldap-defaults 172.24.10.220 crypto ca trustpoint ASDM_TrustPoint5 enrollment terminal crl configure crypto ca trustpoint ASDM_TrustPoint7 enrollment terminal subject-name CN=vpn-b.chesterfield.gov keypair Certkey crl configure crypto ca trustpoint ASDM_TrustPoint4 enrollment terminal crl configure crypto ca trustpoint ASDM_TrustPoint9 enrollment terminal subject-name CN=VPN-B.chesterfield.gov keypair vpn-b-12-5-2015 crl configure crypto ca certificate map DefaultCertificateMap 50 issuer-name eq abbot issuer-name eq chicago crypto ca certificate map UTIL-SCADA 30 subject-name attr ea eq ~output deleted~@chesterfield.gov crypto ca certificate map UTIL-SCADA 31 subject-name attr ea eq ~output deleted~@chesterfield.gov crypto ca certificate map UTIL-SCADA 32 subject-name attr ea eq ~output deleted~@chesterfield.gov crypto ca certificate map UTIL-SCADA 33 subject-name attr ea eq ~output deleted~@chesterfield.gov crypto ca certificate map UTIL-SCADA 34 subject-name attr ea eq ~output deleted~@chesterfield.gov crypto ca certificate map UTIL-SCADA 35 subject-name attr ea eq ~output deleted~@chesterfield.gov crypto ca certificate map UTIL-SCADA 36 subject-name attr ea eq ~output deleted~@chesterfield.gov crypto ca certificate map UTIL-SCADA 37 subject-name attr ea eq ~output deleted~c@chesterfield.gov crypto ca certificate map IST-NetworkAdmin 10 subject-name attr ea eq ~output deleted~@chesterfield.gov crypto ca certificate map IST-NetworkAdmin 11 subject-name attr ea eq ~output deleted~t@chesterfield.gov crypto ca certificate map IST-NetworkAdmin 12 subject-name attr ea eq ~output deleted~@chesterfield.gov crypto ca certificate map IST-NetworkAdmin 13 subject-name attr ea eq ~output deleted~@chesterfield.gov crypto ca certificate chain ASDM_TrustPoint3 certificate ca 45c2a79e0ca097854fd762bc09e7f6b4 308204b2 3082039a a0030201 02021045 c2a79e0c a097854f d762bc09 e7f6b430 0d06092a 864886f7 0d010105 05003045 31133011 060a0992 268993f2 2c640119 1603676f 76311c30 1a060a09 92268993 f22c6401 19160c63 68657374 65726669 656c6431 10300e06 03550403 13074368 69636167 6f301e17 0d313231 31333031 36303130 345a170d 31373131 33303136 30383337 5a304531 13301106 0a099226 8993f22c 64011916 03676f76 311c301a 060a0992 268993f2 2c640119 160c6368 65737465 72666965 6c643110 300e0603 55040313 07436869 6361676f 30820122 300d0609 2a864886 f70d0101 01050003 82010f00 3082010a 02820101 00e1e02a 72a6e9e2 ebe79c9d b1d3445d 29b8c604 d895103f 4ad557ca dfac4731 cc72e5bf 553ff43b 5cadb5db 9e0510b2 034c0479 52470917 8162db9f 263e76a0 b8e90df3 23237550 a80a3be2 b873a209 ffdb2cbf 3f283468 67e7875f 7b28a082 1b2bac9e 4929f3cf a48ad2dc df249dfe 65811d76 977f17cc b2d278cb 3b9f6a68 fe011d33 622d793a 178c9808 86a0c8b9 2d1d1414 16fe5e01 555607fa b5d9484e 26edd3d2 0031deca a3f2b40f b6e60254 c8b3b9d5 e95f1ac1 9f6388d3 613cf6f9 d93561f6 0920d2bf d81fd52b 1a4d0ea4 7a9a8cb8 4d13fc16 e1d99d77 80df772c 87cb7c80 f18c501f 41101060 9d607cfd be88c160 d54ae588 dd163ae1 88a639d8 b7020301 0001a382 019c3082 01983013 06092b06 01040182 37140204 061e0400 43004130 0b060355 1d0f0404 03020146 300f0603 551d1301 01ff0405 30030101 ff301d06 03551d0e 04160414 7c4958f3 e5db73a4 ea685a37 9b87b2cb 72512a79 30820109 0603551d 1f048201 003081fd 3081faa0 81f7a081 f48681b6 6c646170 3a2f2f2f 434e3d43 68696361 676f2832 292c434e 3d636869 6361676f 2c434e3d 4344502c 434e3d50 75626c69 63253230 4b657925 32305365 72766963 65732c43 4e3d5365 72766963 65732c43 4e3d436f 6e666967 75726174 696f6e2c 44433d63 68657374 65726669 656c642c 44433d67 6f763f63 65727469 66696361 74655265 766f6361 74696f6e 4c697374 3f626173 653f6f62 6a656374 436c6173 733d6352 4c446973 74726962 7574696f 6e506f69 6e748639 68747470 3a2f2f63 68696361 676f2e63 68657374 65726669 656c642e 676f762f 43657274 456e726f 6c6c2f43 68696361 676f2832 292e6372 6c301206 092b0601 04018237 15010405 02030200 02302306 092b0601 04018237 15020416 04144ce2 780e8378 96f4323e 5ad1abdf c25cb0ab 1440300d 06092a86 4886f70d 01010505 00038201 01006b4c daf85ee0 994641f7 65c9d898 10f0dd65 5e4e774b ed339200 6b9f5dd9 54c6af2b d3447365 dfec5b0f cbc55bad 47d608dc 7ff77ee6 dbe6f250 30ef712f e55bcf71 477a06c7 00e84f9d 97b34113 d00df63c fc2d1d85 f96323d4 11220377 dd099344 d8923f47 6660a124 fbcc4729 b14bac1d 0427cf3c f54730c1 3ff9ce34 751237a4 9f516655 98c422d9 917fdbdf a5688975 d18bcc5b 3efb1815 c059e9db 489b5998 fa75a224 a4d2cfce 9af07997 539c5218 a8e9a360 7c5bc985 e58a01e3 6978bb0a 0c096ff5 375c3ce5 a64cd4ab 6d861878 f8044e14 a0be850a 8c1c42dc 95e047fe 9b6c531b f9c2ac82 964eae59 47457077 12f5e335 55b62001 28e2f320 ff0a quit crypto ca certificate chain ASDM_TrustPoint5 certificate ca 4bdbe8d464ffce8c46000a45c04295fb 30820376 3082025e a0030201 0202104b dbe8d464 ffce8c46 000a45c0 4295fb30 0d06092a 864886f7 0d010105 05003043 31133011 060a0992 268993f2 2c640119 1603676f 76311c30 1a060a09 92268993 f22c6401 19160c63 68657374 65726669 656c6431 0e300c06 03550403 13054162 626f7430 1e170d31 33303330 36323030 3633375a 170d3233 30333036 32303136 33365a30 43311330 11060a09 92268993 f22c6401 19160367 6f76311c 301a060a 09922689 93f22c64 0119160c 63686573 74657266 69656c64 310e300c 06035504 03130541 62626f74 30820122 300d0609 2a864886 f70d0101 01050003 82010f00 3082010a 02820101 00f69bda ef5bccc6 7fcd9327 3f937e65 b6632e3e 253526e9 f73bb028 e2ec457b ea5042c6 ed90bdf2 7aca2c2a ccde4e00 29b73844 639cfcf0 406d772c d9f79636 e8842b2f 758d7e36 6d4d39d4 ae8b943e df6dd9e9 91d13a4c af0de001 240db417 a518e51e 19b796e6 09184e97 59198df9 4d387b63 dabd8645 1d0597ed ce2cfaa9 686d88bd 56c7a155 88c52f03 8f51d34c 3d880535 db960d7b a6f84a60 b1247815 b1f821fe 16597258 7e50302c 1d8c700d e7f021c4 dd52efc2 a120ae36 751cd5cf 6a2ed906 dc9f2401 7e1b0553 a5ebeb84 1c37355f 5ad6fd45 473ca3d0 5b497049 8e31b6ec 55ed943e 20fb4eef 48d8cfe9 1b2ecba5 a9c69989 7c8d6dc3 bf006ef7 4b020301 0001a366 30643013 06092b06 01040182 37140204 061e0400 43004130 0b060355 1d0f0404 03020186 300f0603 551d1301 01ff0405 30030101 ff301d06 03551d0e 04160414 028ff305 9d4ab1db e908a4f5 5ed606ca 460ec5f1 30100609 2b060104 01823715 01040302 0100300d 06092a86 4886f70d 01010505 00038201 0100435a e4aef743 786871d7 404f2ee1 1dc2da5a db323db1 355b70f1 602d7cf8 5b9cc982 1fd60b49 7d132ae2 07697da0 2fb74356 27eeddbf 6f8fe937 cffe80e1 8676092c 16407521 b7788d42 4b6baa45 3c6d5302 c60745a1 a00b6aa0 8cf23b8e a2f917a5 6fd6a6e4 51722bfb a3e6b166 ca4d8956 544b06b3 8fc13bfd 6a6a2bf1 6732665c 386baa6e 91530869 f4dadea4 262a0fd1 dc10ff26 d4ae2567 835a7ec0 a4ab966b 428d2bbb e69fdc68 1525d46b 2ff61765 becf234b 8f4dd5b7 8f7ca139 6c2e900a 72f241d8 52568944 ae6d8e20 8ec46b83 bdd78421 b839ff16 34f2ba61 80e1f927 8ae6119c 74f41930 281991d3 2d231431 e429bd5f 4c9a39f4 7d771ff9 dd82 quit crypto ca certificate chain ASDM_TrustPoint7 certificate 2ed6087c0002000069af 308205d7 308204bf a0030201 02020a2e d6087c00 02000069 af300d06 092a8648 86f70d01 01050500 30453113 3011060a 09922689 93f22c64 01191603 676f7631 1c301a06 0a099226 8993f22c 64011916 0c636865 73746572 6669656c 64311030 0e060355 04031307 43686963 61676f30 1e170d31 35303132 39313831 3935355a 170d3137 30313238 31383139 35355a30 21311f30 1d060355 04031316 76706e2d 622e6368 65737465 72666965 6c642e67 6f763082 0122300d 06092a86 4886f70d 01010105 00038201 0f003082 010a0282 010100a3 9ae64cdc 67a5dc9b 1a52631d 43dbc7ea 4799604e 43e16723 4bafabc1 de106cf8 13679918 57dbe36f 5ef42e38 41d0851b 2851b52d 73b917bd 1cbd9c7c e482a139 42f0fc0a 3e1b7aa0 6a6e468b 48070a6c 9926c636 5d76679a f8fefe68 d48a9d07 5f8e6e35 3e387cd3 4c1ee315 904c50f7 316051ba f59c5d8c a2a72e76 ead430cc 78494502 cb4f3b80 df886d89 2738150a 7d15e031 7aded182 a7a41012 1a21846f 92a72cf0 fb757ec5 200f1fee 9894b8a6 acb0ca0f c4fec26a 55691d2d 68575917 fec958da e4e79708 64c5ac7a 5cc2f84a bafce7cb 7acfb360 bab2cb60 b4a7eaec 8572983b d17ccfe2 423f18cc 06f517c1 f3ff564f 9d38e7bb 6ddc441e 2e64df02 03010001 a38202eb 308202e7 300b0603 551d0f04 04030205 a0302106 03551d11 041a3018 82165650 4e2d422e 63686573 74657266 69656c64 2e676f76 301d0603 551d0e04 160414e3 ede6fb60 73403654 968fc01e c390f60f f9c95930 1f060355 1d230418 30168014 7c4958f3 e5db73a4 ea685a37 9b87b2cb 72512a79 30820109 0603551d 1f048201 003081fd 3081faa0 81f7a081 f48681b6 6c646170 3a2f2f2f 434e3d43 68696361 676f2832 292c434e 3d636869 6361676f 2c434e3d 4344502c 434e3d50 75626c69 63253230 4b657925 32305365 72766963 65732c43 4e3d5365 72766963 65732c43 4e3d436f 6e666967 75726174 696f6e2c 44433d63 68657374 65726669 656c642c 44433d67 6f763f63 65727469 66696361 74655265 766f6361 74696f6e 4c697374 3f626173 653f6f62 6a656374 436c6173 733d6352 4c446973 74726962 7574696f 6e506f69 6e748639 68747470 3a2f2f63 68696361 676f2e63 68657374 65726669 656c642e 676f762f 43657274 456e726f 6c6c2f43 68696361 676f2832 292e6372 6c308201 2006082b 06010505 07010104 82011230 82010e30 81ab0608 2b060105 05073002 86819e6c 6461703a 2f2f2f43 4e3d4368 69636167 6f2c434e 3d414941 2c434e3d 5075626c 69632532 304b6579 25323053 65727669 6365732c 434e3d53 65727669 6365732c 434e3d43 6f6e6669 67757261 74696f6e 2c44433d 63686573 74657266 69656c64 2c44433d 676f763f 63414365 72746966 69636174 653f6261 73653f6f 626a6563 74436c61 73733d63 65727469 66696361 74696f6e 41757468 6f726974 79305e06 082b0601 05050730 02865268 7474703a 2f2f6368 69636167 6f2e6368 65737465 72666965 6c642e67 6f762f43 65727445 6e726f6c 6c2f6368 69636167 6f2e6368 65737465 72666965 6c642e67 6f765f43 68696361 676f2832 292e6372 74302106 092b0601 04018237 14020414 1e120057 00650062 00530065 00720076 00650072 300c0603 551d1301 01ff0402 30003013 0603551d 25040c30 0a06082b 06010505 07030130 0d06092a 864886f7 0d010105 05000382 01010025 61a2331b 173546c1 e9d28cfe fbce7d2c f68d16a6 afacd153 818e9642 4ab56c96 05d9444c 48fe18af 88937928 d74be080 ccbb949b 35520e79 0229ff62 21dc7f39 04f08376 0d636229 1f09f6e8 17c9ef2c b0a92c22 ac99bf40 f11febae 48104416 7f81a0fb 57a8bd33 6cf0ff82 fd381b25 47102bb4 96970b0e 401be5b8 f2b997e0 17680222 f70794c3 d2aa7f13 1364d7a2 51e9623f d9aadfff 58ce6091 76137be8 77476c5e 389cea9a 218b5c74 5e57deb1 f7226caa bd2ca21a 69c8cb8b 9259133e 09e4585d 50704901 2d328987 a504a4bb 8e85a742 ccbae55f 690f1808 31a64710 f4684a1b 50d74fb2 571a5953 7f30ab07 1a60a599 61feeda3 f571771b 04c8e9 quit crypto ca certificate chain ASDM_TrustPoint4 certificate ca 5c75bdc6719a64b547c1f873aa4b7f5f 3082039f 30820287 a0030201 0202105c 75bdc671 9a64b547 c1f873aa 4b7f5f30 0d06092a 864886f7 0d01010b 05003043 31133011 060a0992 268993f2 2c640119 1603676f 76311c30 1a060a09 92268993 f22c6401 19160c63 68657374 65726669 656c6431 0e300c06 03550403 13054162 626f7430 1e170d31 35303531 33323130 3331365a 170d3235 30353132 32313133 31355a30 43311330 11060a09 92268993 f22c6401 19160367 6f76311c 301a060a 09922689 93f22c64 0119160c 63686573 74657266 69656c64 310e300c 06035504 03130541 62626f74 30820122 300d0609 2a864886 f70d0101 01050003 82010f00 3082010a 02820101 00cbb027 838f1452 13f7a5d7 b4331b14 fe9328f5 38c15e4d cc866d69 0d44688a 9e423959 6a21d9a5 e2fced2f 7dd99ed4 df7e9757 e6c8ac93 c47205fe 6dac76a5 47d1327a c083d8fb 30d36560 1378c9ba 10026fd4 b7a3f4ed b4e6c3c5 9ba50b88 c9ad8e30 23080639 4395523d 1f654f18 61ce989f 7a951dee 9f31a767 166cd37b e3beac6a 2b36447f ca901cf3 354ac2f0 86054d20 eb5e4d0f 6be0c449 dcfca4e3 c06b9a89 521086dc b96808bf 374676ab bc1cea3b d0087a08 3c89e6c2 45af7fb2 995d8064 d37b31b5 14f34213 b38e6b36 79b5f92e 20a603a2 1d48b8b8 3fe30242 7fe8fb80 2d04deab e081df6e 6847eebf 531d9a42 ca2ac70f b26faca9 bcc275eb 0f020301 0001a381 8e30818b 30130609 2b060104 01823714 0204061e 04004300 41300b06 03551d0f 04040302 0186300f 0603551d 130101ff 04053003 0101ff30 1d060355 1d0e0416 041478da 4d969a2d f2cfd30b c790c107 38da2594 b51a3012 06092b06 01040182 37150104 05020301 00013023 06092b06 01040182 37150204 160414fe 040a742c 51a01e98 11536576 488dc7fd 1a678630 0d06092a 864886f7 0d01010b 05000382 01010088 e463a49c 21b1ab91 fb0e0c26 9455a5ab 6f0b982d b3684a4a 9b92ccde 86db0b0e 6a1d437b 6a8d2858 acae13d1 72503ebc 670775ce 2c318e46 0e0dbfa8 8efc3eec d7ca765c 4f3edd56 ece2c91f 5cdcc760 8c7167b6 bedb98da e8c3f8bd b2b84b90 fc591723 2cb5aff7 36b87858 8a2afaeb 7708cb4c 682bc329 5a8de7b6 3e306b74 09b1d6e7 2a9717b8 9f15fc9b aabe72dc 7033f1d9 da8dc143 35707cdd aa655b8f 6f02f07d 4c9bd1c7 93fb0f94 69ef12ea fd6a1c23 98a35dba bc823987 da5b9178 80e605de 165a6205 d3fb3056 5c921216 c1f0cc15 853ebd76 430f781c d489e5a1 453b9996 1ebb6397 b5ad49df ea380c80 a6fb05a7 8a5539e6 86c6c799 87a024 quit crypto ca certificate chain ASDM_TrustPoint9 certificate 612236b0000100000771 30820591 30820479 a0030201 02020a61 2236b000 01000007 71300d06 092a8648 86f70d01 010b0500 30433113 3011060a 09922689 93f22c64 01191603 676f7631 1c301a06 0a099226 8993f22c 64011916 0c636865 73746572 6669656c 64310e30 0c060355 04031305 4162626f 74301e17 0d313531 32303531 37353632 355a170d 31373132 30353138 30363235 5a302131 1f301d06 03550403 13165650 4e2d422e 63686573 74657266 69656c64 2e676f76 30820122 300d0609 2a864886 f70d0101 01050003 82010f00 3082010a 02820101 00b3e0a1 47942895 34a19103 95c17056 8d227683 bf053478 bfcd9b1e 7a517e35 504bda3d ec1bd4cb c6f80b3c 0ba5a5ff a9d2a7d2 b15c62a9 fe26505e 6e195f5d 6c957533 91759d6f ad0f7829 bd0cce55 6084712a ca6cf941 fc4bed17 d6e700f1 9d339c1f f21a6cd8 6e6380bd 700c9229 e8b7ff47 5f0ad254 af103328 cd7daa68 b6f006df 2f769419 485f03f3 c545b9e2 fcc65f5d 5d60531c d412dcc5 fcd7cc87 15cb3613 57d66911 9f999eff 741112cc 9221e997 d5022bf2 981b9fb0 36e323d0 5cb25c91 549a4e7a ddcbb313 b3c7109f fc1ef066 39b9fbe1 770c428d cc8d541b 8620e278 5dc21e37 c79a49d0 15aa93e6 f571bf6e 0b260736 d230b755 597954df a1020301 0001a382 02a73082 02a3300b 0603551d 0f040403 0205a030 21060355 1d11041a 30188216 56504e2d 422e6368 65737465 72666965 6c642e67 6f76301d 0603551d 0e041604 14d2ef92 bf1fae25 b5b45055 dd95f77c 9fbbedb8 26301f06 03551d23 04183016 801478da 4d969a2d f2cfd30b c790c107 38da2594 b51a3082 01000603 551d1f04 81f83081 f53081f2 a081efa0 81ec8681 b26c6461 703a2f2f 2f434e3d 4162626f 74283129 2c434e3d 4142424f 542c434e 3d434450 2c434e3d 5075626c 69632532 304b6579 25323053 65727669 6365732c 434e3d53 65727669 6365732c 434e3d43 6f6e6669 67757261 74696f6e 2c44433d 63686573 74657266 69656c64 2c44433d 676f763f 63657274 69666963 61746552 65766f63 6174696f 6e4c6973 743f6261 73653f6f 626a6563 74436c61 73733d63 524c4469 73747269 62757469 6f6e506f 696e7486 35687474 703a2f2f 6162626f 742e6368 65737465 72666965 6c642e67 6f762f43 65727445 6e726f6c 6c2f4162 626f7428 31292e63 726c3081 bc06082b 06010505 07010104 81af3081 ac3081a9 06082b06 01050507 30028681 9c6c6461 703a2f2f 2f434e3d 4162626f 742c434e 3d414941 2c434e3d 5075626c 69632532 304b6579 25323053 65727669 6365732c 434e3d53 65727669 6365732c 434e3d43 6f6e6669 67757261 74696f6e 2c44433d 63686573 74657266 69656c64 2c44433d 676f763f 63414365 72746966 69636174 653f6261 73653f6f 626a6563 74436c61 73733d63 65727469 66696361 74696f6e 41757468 6f726974 79303c06 092b0601 04018237 1507042f 302d0625 2b060104 01823715 0887c3e8 7a8590a4 4287818b 16efd32c 81d2f479 4c86a886 7187f6f8 21020165 02010230 13060355 1d25040c 300a0608 2b060105 05070301 301b0609 2b060104 01823715 0a040e30 0c300a06 082b0601 05050703 01300d06 092a8648 86f70d01 010b0500 03820101 00b001b0 8e541dda 8f8eec7a a2afeec9 ab2a83cc 21768072 8208f9d2 3ca67ea4 7d243afb ed048362 089a0070 e2049ca4 34041189 9a668018 b6c21462 ef2cc25a 8418fda7 05c5a5c8 1ba3e7c8 a6dbf58d 8c663c85 322fa432 a3581c49 bd909a06 45dc20da 79ea167b 418efec2 854ba1c0 82350aee e2259366 f072b4e0 12e21f91 8ca33845 c65c257b 7081b00b 102630eb 7ab7f401 29a80a5c 6061a662 81f3583f f5c91ae0 ad5b6fc5 903be126 0c24b134 aec8db71 03b4b19b d17590e1 48d56098 696c8a85 8e9bb0da 75d1a140 4a8e3f0a 2cacf2b3 ef3522d4 2f48a315 ef16a987 336a021d 9b242a7e 26609b02 74de1ea1 60980036 6ddcd6e0 343168bf 186c0805 4d quit crypto ikev2 policy 1 encryption aes-256 integrity sha group 5 prf sha lifetime seconds 86400 crypto ikev2 policy 10 encryption aes-192 integrity sha group 5 prf sha lifetime seconds 86400 crypto ikev2 policy 20 encryption aes integrity sha group 5 prf sha lifetime seconds 86400 crypto ikev2 policy 30 encryption 3des integrity sha group 5 prf sha lifetime seconds 86400 crypto ikev2 policy 40 encryption des integrity sha group 5 prf sha lifetime seconds 86400 crypto ikev2 enable outside client-services port 443 crypto ikev2 remote-access trustpoint ASDM_TrustPoint9 crypto ikev1 enable outside crypto ikev1 policy 10 authentication pre-share encryption aes-256 hash sha group 2 lifetime 86400 crypto ikev1 policy 20 authentication pre-share encryption 3des hash md5 group 2 lifetime 86400 crypto ikev1 policy 30 authentication pre-share encryption aes-256 hash sha group 5 lifetime 86400 telnet timeout 5 ssh 172.24.0.0 255.255.0.0 inside ssh 172.21.8.0 255.255.255.0 inside ssh 172.21.10.0 255.255.255.0 inside ssh 172.23.145.32 255.255.255.240 inside ssh 172.23.145.80 255.255.255.240 inside ssh 172.23.145.128 255.255.255.240 inside ssh 172.23.72.0 255.255.254.0 inside ssh timeout 30 ssh version 2 ssh key-exchange group dh-group1-sha1 console timeout 30 management-access inside vpn-addr-assign local reuse-delay 10 threat-detection basic-threat threat-detection statistics access-list no threat-detection statistics tcp-intercept ntp server 172.24.21.31 source inside ntp server 172.24.21.30 source inside ntp server 172.25.17.71 source inside prefer ssl trust-point ASDM_TrustPoint9 outside webvpn enable outside anyconnect-essentials anyconnect image disk0:/anyconnect-win-3.1.02026-k9.pkg 1 anyconnect profiles VPN-B disk0:/vpn-b.xml anyconnect enable tunnel-group-list enable certificate-group-map UTIL-SCADA 30 UTIL-SCADA certificate-group-map UTIL-SCADA 31 UTIL-SCADA certificate-group-map UTIL-SCADA 32 UTIL-SCADA certificate-group-map UTIL-SCADA 33 UTIL-SCADA certificate-group-map UTIL-SCADA 34 UTIL-SCADA certificate-group-map UTIL-SCADA 35 UTIL-SCADA certificate-group-map UTIL-SCADA 36 UTIL-SCADA certificate-group-map UTIL-SCADA 37 UTIL-SCADA certificate-group-map IST-NetworkAdmin 10 IST-NetworkAdmin certificate-group-map IST-NetworkAdmin 11 IST-NetworkAdmin certificate-group-map IST-NetworkAdmin 12 IST-NetworkAdmin certificate-group-map IST-NetworkAdmin 13 IST-NetworkAdmin group-policy NoAccess internal group-policy NoAccess attributes wins-server none dns-server value 172.24.10.146 172.24.10.145 vpn-tunnel-protocol ikev2 default-domain value chesterfield.gov group-policy UTIL-SCADA internal group-policy UTIL-SCADA attributes banner value USE OF THIS SYSTEM WITHOUT OR IN EXCESS OF THE PROPER AUTHORIZATION MAY SUBJECT banner value THE USER TO DISCIPLINE AND/OR CIVIL AND CRIMINAL PENALTIES. wins-server none dns-server value 172.21.200.83 172.21.200.84 vpn-idle-timeout 30 vpn-tunnel-protocol ikev1 ikev2 l2tp-ipsec ssl-client ssl-clientless split-tunnel-policy tunnelall default-domain value chesterfield.gov split-tunnel-all-dns disable address-pools value UTIL-SCADA webvpn anyconnect profiles value VPN-B type user group-policy DfltGrpPolicy attributes vpn-idle-timeout none vpn-tunnel-protocol ikev1 l2tp-ipsec ssl-clientless default-domain value chesterfield.gov group-policy Access-Software internal group-policy Access-Software attributes banner value USE OF THIS SYSTEM WITHOUT OR IN EXCESS OF THE PROPER AUTHORIZATION MAY SUBJECT banner value THE USER TO DISCIPLINE AND/OR CIVIL AND CRIMINAL PENALTIES. wins-server value 172.21.200.83 dns-server value 172.21.200.83 172.21.200.84 vpn-idle-timeout 30 vpn-tunnel-protocol ikev1 ikev2 l2tp-ipsec ssl-client ssl-clientless default-domain value chesterfield.gov address-pools value Employee scep-forwarding-url none webvpn anyconnect profiles value VPN-B type user anyconnect ask enable default webvpn always-on-vpn profile-setting group-policy GroupPolicy9 internal group-policy GroupPolicy9 attributes vpn-tunnel-protocol ikev1 group-policy GroupPolicy8 internal group-policy GroupPolicy8 attributes vpn-tunnel-protocol ikev1 group-policy GroupPolicy7 internal group-policy GroupPolicy7 attributes vpn-tunnel-protocol ikev1 group-policy GroupPolicy6 internal group-policy GroupPolicy6 attributes vpn-tunnel-protocol ikev1 group-policy GroupPolicy5 internal group-policy GroupPolicy5 attributes vpn-tunnel-protocol ikev1 group-policy GroupPolicy4 internal group-policy GroupPolicy4 attributes vpn-tunnel-protocol ikev1 group-policy GroupPolicy3 internal group-policy GroupPolicy3 attributes vpn-tunnel-protocol ikev1 group-policy GroupPolicy13 internal group-policy GroupPolicy13 attributes vpn-tunnel-protocol ikev1 group-policy GroupPolicy2 internal group-policy GroupPolicy2 attributes vpn-tunnel-protocol ikev1 group-policy GroupPolicy12 internal group-policy GroupPolicy12 attributes vpn-tunnel-protocol ikev1 group-policy GroupPolicy1 internal group-policy GroupPolicy1 attributes vpn-tunnel-protocol ikev1 ikev2 group-policy GroupPolicy11 internal group-policy GroupPolicy11 attributes vpn-tunnel-protocol ikev1 group-policy GroupPolicy10 internal group-policy GroupPolicy10 attributes vpn-tunnel-protocol ikev1 ikev2 l2tp-ipsec ssl-client ssl-clientless group-policy RemoteAccess_Grp internal group-policy RemoteAccess_Grp attributes wins-server value 172.24.10.146 172.24.10.145 dns-server value 172.24.10.146 172.24.10.145 vpn-simultaneous-logins 512 default-domain value chesterfield.gov address-pools value Employee group-policy IST-NetworkAdmin internal group-policy IST-NetworkAdmin attributes banner value USE OF THIS SYSTEM WITHOUT OR IN EXCESS OF THE PROPER AUTHORIZATION MAY SUBJECT banner value THE USER TO DISCIPLINE AND/OR CIVIL AND CRIMINAL PENALTIES. wins-server value 172.21.200.83 dns-server value 172.21.200.83 172.21.200.84 vpn-idle-timeout 30 vpn-tunnel-protocol ikev1 ikev2 l2tp-ipsec ssl-client ssl-clientless default-domain value chesterfield.gov split-tunnel-all-dns disable address-pools value IST-NetworkAdmin scep-forwarding-url none webvpn anyconnect profiles value VPN-B type user anyconnect ask enable default webvpn always-on-vpn profile-setting group-policy CoutyNetPolicyGrp internal group-policy CoutyNetPolicyGrp attributes wins-server none dns-server none vpn-tunnel-protocol ssl-clientless default-domain value chesterfield.gov webvpn url-list value CountyNet url-entry enable username CatTools password ~output deleted~ encrypted privilege 15 username wasyk password ~output deleted~ encrypted privilege 15 username thompson password ~output deleted~ encrypted privilege 15 username snover password ~output deleted~ encrypted privilege 15 tunnel-group CountyNet type remote-access tunnel-group CountyNet general-attributes authentication-server-group Domain default-group-policy CoutyNetPolicyGrp tunnel-group CountyNet webvpn-attributes group-alias CountyNet enable group-url https://208.0.9.85/CountyNet disable tunnel-group 50.73.9.181 type ipsec-l2l tunnel-group 50.73.9.181 general-attributes default-group-policy GroupPolicy2 tunnel-group 50.73.9.181 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group Access-Software type remote-access tunnel-group Access-Software general-attributes address-pool Employee authentication-server-group certificate accounting-server-group dartmouth default-group-policy Access-Software tunnel-group Access-Software webvpn-attributes authentication aaa certificate group-alias Access-Software enable tunnel-group Access-Software ipsec-attributes ikev1 trust-point ASDM_TrustPoint9 tunnel-group 173.167.55.125 type ipsec-l2l tunnel-group 173.167.55.125 general-attributes default-group-policy GroupPolicy3 tunnel-group 173.167.55.125 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 23.25.120.169 type ipsec-l2l tunnel-group 23.25.120.169 general-attributes default-group-policy GroupPolicy4 tunnel-group 23.25.120.169 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 166.161.78.58 type ipsec-l2l tunnel-group 166.161.78.58 general-attributes default-group-policy GroupPolicy5 tunnel-group 166.161.78.58 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 173.242.161.254 type ipsec-l2l tunnel-group 173.242.161.254 general-attributes default-group-policy GroupPolicy5 tunnel-group 173.242.161.254 ipsec-attributes ikev1 pre-shared-key ***** ikev2 remote-authentication pre-shared-key ***** ikev2 local-authentication pre-shared-key ***** tunnel-group 23.31.103.145 type ipsec-l2l tunnel-group 23.31.103.145 general-attributes default-group-policy GroupPolicy7 tunnel-group 23.31.103.145 ipsec-attributes ikev1 pre-shared-key ***** ikev2 local-authentication pre-shared-key ***** tunnel-group 23.25.98.93 type ipsec-l2l tunnel-group 23.25.98.93 general-attributes default-group-policy GroupPolicy8 tunnel-group 23.25.98.93 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 173.167.55.129 type ipsec-l2l tunnel-group 173.167.55.129 general-attributes default-group-policy GroupPolicy9 tunnel-group 173.167.55.129 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 23.25.113.237 type ipsec-l2l tunnel-group 23.25.113.237 general-attributes default-group-policy GroupPolicy10 tunnel-group 23.25.113.237 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 216.117.249.186 type ipsec-l2l tunnel-group 216.117.249.186 general-attributes default-group-policy GroupPolicy2 tunnel-group 216.117.249.186 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 75.146.20.189 type ipsec-l2l tunnel-group 75.146.20.189 general-attributes default-group-policy GroupPolicy2 tunnel-group 75.146.20.189 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 173.167.55.181 type ipsec-l2l tunnel-group 173.167.55.181 general-attributes default-group-policy GroupPolicy2 tunnel-group 173.167.55.181 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 23.25.98.49 type ipsec-l2l tunnel-group 23.25.98.49 general-attributes default-group-policy GroupPolicy2 tunnel-group 23.25.98.49 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 75.146.29.69 type ipsec-l2l tunnel-group 75.146.29.69 general-attributes default-group-policy GroupPolicy2 tunnel-group 75.146.29.69 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group IST-NetworkAdmin type remote-access tunnel-group IST-NetworkAdmin general-attributes address-pool IST-NetworkAdmin authentication-server-group certificate default-group-policy IST-NetworkAdmin tunnel-group IST-NetworkAdmin webvpn-attributes authentication aaa certificate group-alias IST-NetworkAdmin enable tunnel-group 68.57.166.218 type ipsec-l2l tunnel-group 68.57.166.218 general-attributes default-group-policy GroupPolicy2 tunnel-group 68.57.166.218 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 166.159.77.244 type ipsec-l2l tunnel-group 166.159.77.244 general-attributes default-group-policy GroupPolicy2 tunnel-group 166.159.77.244 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 96.94.221.69 type ipsec-l2l tunnel-group 96.94.221.69 general-attributes default-group-policy GroupPolicy2 tunnel-group 96.94.221.69 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 70.88.189.25 type ipsec-l2l tunnel-group 70.88.189.25 general-attributes default-group-policy GroupPolicy2 tunnel-group 70.88.189.25 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 74.92.187.69 type ipsec-l2l tunnel-group 74.92.187.69 general-attributes default-group-policy GroupPolicy2 tunnel-group 74.92.187.69 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 50.77.74.149 type ipsec-l2l tunnel-group 50.77.74.149 general-attributes default-group-policy GroupPolicy2 tunnel-group 50.77.74.149 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 50.77.74.173 type ipsec-l2l tunnel-group 50.77.74.173 general-attributes default-group-policy GroupPolicy2 tunnel-group 50.77.74.173 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 50.77.74.161 type ipsec-l2l tunnel-group 50.77.74.161 general-attributes default-group-policy GroupPolicy2 tunnel-group 50.77.74.161 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 70.88.168.173 type ipsec-l2l tunnel-group 70.88.168.173 general-attributes default-group-policy GroupPolicy2 tunnel-group 70.88.168.173 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 50.73.237.117 type ipsec-l2l tunnel-group 50.73.237.117 general-attributes default-group-policy GroupPolicy2 tunnel-group 50.73.237.117 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 74.94.208.169 type ipsec-l2l tunnel-group 74.94.208.169 general-attributes default-group-policy GroupPolicy2 tunnel-group 74.94.208.169 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 70.88.190.97 type ipsec-l2l tunnel-group 70.88.190.97 general-attributes default-group-policy GroupPolicy2 tunnel-group 70.88.190.97 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 74.94.214.125 type ipsec-l2l tunnel-group 74.94.214.125 general-attributes default-group-policy GroupPolicy2 tunnel-group 74.94.214.125 ipsec-attributes ikev1 pre-shared-key ***** ikev1 trust-point ASDM_TrustPoint6 tunnel-group 50.73.10.101 type ipsec-l2l tunnel-group 50.73.10.101 general-attributes default-group-policy GroupPolicy2 tunnel-group 50.73.10.101 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 74.94.208.61 type ipsec-l2l tunnel-group 74.94.208.61 general-attributes default-group-policy GroupPolicy2 tunnel-group 74.94.208.61 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 50.73.11.217 type ipsec-l2l tunnel-group 50.73.11.217 general-attributes default-group-policy GroupPolicy2 tunnel-group 50.73.11.217 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 70.89.239.209 type ipsec-l2l tunnel-group 70.89.239.209 general-attributes default-group-policy GroupPolicy2 tunnel-group 70.89.239.209 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 75.145.243.113 type ipsec-l2l tunnel-group 75.145.243.113 general-attributes default-group-policy GroupPolicy2 tunnel-group 75.145.243.113 ipsec-attributes ikev1 pre-shared-key ***** ikev1 trust-point ASDM_TrustPoint6 tunnel-group 50.242.60.89 type ipsec-l2l tunnel-group 50.242.60.89 general-attributes default-group-policy GroupPolicy2 tunnel-group 50.242.60.89 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 166.150.189.232 type ipsec-l2l tunnel-group 166.150.189.232 general-attributes default-group-policy GroupPolicy2 tunnel-group 166.150.189.232 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 166.157.75.93 type ipsec-l2l tunnel-group 166.157.75.93 general-attributes default-group-policy GroupPolicy2 tunnel-group 166.157.75.93 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 50.242.35.173 type ipsec-l2l tunnel-group 50.242.35.173 general-attributes default-group-policy GroupPolicy2 tunnel-group 50.242.35.173 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 50.251.114.157 type ipsec-l2l tunnel-group 50.251.114.157 general-attributes default-group-policy GroupPolicy2 tunnel-group 50.251.114.157 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group RemoteAccess_TunnelGroup type remote-access tunnel-group RemoteAccess_TunnelGroup general-attributes address-pool Employee authentication-server-group LDAP_Domain default-group-policy NoAccess tunnel-group RemoteAccess_TunnelGroup webvpn-attributes group-alias LDAP_Access enable tunnel-group 166.67.64.86 type ipsec-l2l tunnel-group 166.67.64.86 general-attributes default-group-policy GroupPolicy5 tunnel-group 166.67.64.86 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 50.78.232.41 type ipsec-l2l tunnel-group 50.78.232.41 general-attributes default-group-policy GroupPolicy6 tunnel-group 50.78.232.41 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 64.158.197.54 type ipsec-l2l tunnel-group 64.158.197.54 general-attributes default-group-policy GroupPolicy10 tunnel-group 64.158.197.54 ipsec-attributes ikev1 pre-shared-key ***** ikev2 remote-authentication pre-shared-key ***** ikev2 local-authentication pre-shared-key ***** tunnel-group 65.202.206.3 type ipsec-l2l tunnel-group 65.202.206.3 general-attributes default-group-policy GroupPolicy5 tunnel-group 65.202.206.3 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group UTIL-SCADA type remote-access tunnel-group UTIL-SCADA general-attributes address-pool UTIL-SCADA authentication-server-group certificate default-group-policy UTIL-SCADA tunnel-group UTIL-SCADA webvpn-attributes authentication aaa certificate group-alias UTIL-SCADA enable tunnel-group 166.157.75.94 type ipsec-l2l tunnel-group 166.157.75.94 general-attributes default-group-policy GroupPolicy2 tunnel-group 166.157.75.94 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 166.157.75.95 type ipsec-l2l tunnel-group 166.157.75.95 general-attributes default-group-policy GroupPolicy2 tunnel-group 166.157.75.95 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 166.143.241.228 type ipsec-l2l tunnel-group 166.143.241.228 general-attributes default-group-policy GroupPolicy2 tunnel-group 166.143.241.228 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 166.143.241.229 type ipsec-l2l tunnel-group 166.143.241.229 general-attributes default-group-policy GroupPolicy2 tunnel-group 166.143.241.229 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 166.143.241.230 type ipsec-l2l tunnel-group 166.143.241.230 general-attributes default-group-policy GroupPolicy2 tunnel-group 166.143.241.230 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 166.143.241.231 type ipsec-l2l tunnel-group 166.143.241.231 general-attributes default-group-policy GroupPolicy2 tunnel-group 166.143.241.231 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group 166.143.241.232 type ipsec-l2l tunnel-group 166.143.241.232 general-attributes default-group-policy GroupPolicy2 tunnel-group 166.143.241.232 ipsec-attributes ikev1 pre-shared-key ***** tunnel-group-map enable rules tunnel-group-map default-group Access-Software tunnel-group-map DefaultCertificateMap 50 Access-Software tunnel-group-map UTIL-SCADA 30 UTIL-SCADA tunnel-group-map UTIL-SCADA 31 UTIL-SCADA tunnel-group-map UTIL-SCADA 32 UTIL-SCADA tunnel-group-map UTIL-SCADA 33 UTIL-SCADA tunnel-group-map UTIL-SCADA 34 UTIL-SCADA tunnel-group-map UTIL-SCADA 35 UTIL-SCADA tunnel-group-map UTIL-SCADA 36 UTIL-SCADA tunnel-group-map UTIL-SCADA 37 UTIL-SCADA tunnel-group-map IST-NetworkAdmin 10 IST-NetworkAdmin tunnel-group-map IST-NetworkAdmin 11 IST-NetworkAdmin tunnel-group-map IST-NetworkAdmin 12 IST-NetworkAdmin tunnel-group-map IST-NetworkAdmin 13 IST-NetworkAdmin ! class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters message-length maximum client auto message-length maximum 512 policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect ip-options inspect netbios inspect rsh inspect rtsp inspect esmtp inspect sqlnet inspect sunrpc inspect tftp inspect xdmcp ! service-policy global_policy global prompt hostname context no call-home reporting anonymous call-home profile CiscoTAC-1 no active destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService destination address email callhome@cisco.com destination transport-method http subscribe-to-alert-group diagnostic subscribe-to-alert-group environment subscribe-to-alert-group inventory periodic monthly subscribe-to-alert-group configuration periodic monthly subscribe-to-alert-group telemetry periodic daily Cryptochecksum:b8d670201e6b0c5799626db95ffa444f : end