Building configuration...

Current configuration : 4386 bytes
!
version 12.4
no service pad
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
!
hostname SOLCON-GW
!
boot-start-marker
boot system flash c850-advsecurityk9-mz.124-9.T1.bin
boot-end-marker
!
logging buffered 4096 informational
no logging console
enable secret 5 $3434
!
aaa new-model
!
!
!
aaa session-id common
!
resource policy
!
clock timezone cet 1
no ip source-route
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.0.1 192.168.0.49
ip dhcp excluded-address 192.168.0.100 192.168.0.254
!
ip dhcp pool **WLAN**
   network 10.0.1.0 255.255.255.0
   default-router 10.0.1.1 
   dns-server 192.168.0.250 192.168.0.200 
   domain-name nidworkx.local
   lease 7
!
ip dhcp pool **LAN**
   network 192.168.0.0 255.255.255.0
   dns-server 192.168.0.250 192.168.0.200 
   domain-name nidworkx.local
   default-router 192.168.0.250 
   lease 7
!         
!
ip cef
ip inspect tcp max-incomplete host 100 block-time 30
ip inspect name OUTBOUND tcp
ip inspect name OUTBOUND udp
ip inspect name OUTBOUND icmp
ip domain name nidworkx.local
ip name-server 212.45.x.x
ip name-server 212.45.x.x
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh version 2
!
!
!
username burtonair secret 5 $1$q7Rt$
!
! 
!
bridge irb
!
!
!         
interface FastEthernet0
 description *** TO LAN f0/2 ***
 duplex full
 speed 100
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
 description *** Internet conn Solcon ***
 ip address 83.x.x.x 255.0.0.0
 ip access-group WAN-IN in
 no ip unreachables
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
 no cdp enable
!
interface Dot11Radio0
 no ip address
 ip virtual-reassembly
 !
 encryption mode ciphers tkip 
 !
 encryption vlan 1 mode ciphers tkip 
 !
 ssid CISCO-PLANT
    vlan 1
    max-associations 10
    authentication open 
    authentication key-management wpa
    wpa-psk ascii 7 1310E02444575541452111
 !
 speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
 power local cck 10
 power local ofdm 10
 channel 2422
 station-role root
!
interface Dot11Radio0.1
 encapsulation dot1Q 1 native
 no cdp enable
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 spanning-disabled
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
!
interface Vlan1
 description *** Mgmnt VLAN ***
 no ip address
 ip virtual-reassembly
 bridge-group 1
 bridge-group 1 spanning-disabled
!
interface BVI1
 ip address 192.168.0.250 255.255.255.0
 ip inspect OUTBOUND in
 ip nat inside
 ip virtual-reassembly
!
ip route 0.0.0.0 0.0.0.0 FastEthernet4 212.45.33.133
!
no ip http server
no ip http secure-server
ip dns server
ip nat pool SOLCON 83.x.x.x 83.x.x.x netmask 255.0.0.0
ip nat inside source list 1 pool SOLCON overload
ip nat inside source static tcp 192.168.0.200 25 83.x.x.x 25 extendable
!
ip access-list standard MAC-W-ACL
!
ip access-list extended TEST
ip access-list extended WAN-IN
 permit udp host 212.45.33.3 host 83.x.x.x eq domain
 permit 41 any any log
 permit tcp any host 83.x.x.x eq smtp log
 permit udp host 212.45.63.34 host 83x.x.x.x
 permit udp host 212.45.32.89 host 83.x.x.x.
 permit udp host 212.45.35.107 host 83.x.x.x
 permit udp host 212.45.32.3 host 83.x.x.x eq domain
 deny   tcp any any log
 deny   udp any any log
 permit icmp any any echo-reply
 deny   ip any any log
!
logging 192.168.0.200
access-list 1 remark ** NAT OVERLOAD **
access-list 1 permit 192.168.0.0 0.0.0.255
access-list 1 permit 10.0.1.0 0.0.0.255
snmp-server community xxxxx RO 1
snmp-server location Meterkast
!
control-plane
!
bridge 1 protocol ieee
bridge 1 route ip
!
line con 0
 no modem enable
line aux 0
line vty 0
 access-class 1 in
 password 7 xxxxx
 transport input ssh
 transport output all
line vty 1 4
 access-class 1 in
 password 7 xxxx
 transport input ssh
 transport output none
!
scheduler max-task-time 5000
end