ciscoasa> en
Password: ******
ciscoasa# sh run
: Saved
:
ASA Version 9.1(2)
interface GigabitEthernet0/0
 nameif outside
 security-level 0
 ip address x.x.x.x 
!
interface GigabitEthernet0/1
 nameif inside
 security-level 100
 ip address 192.168.0.1 255.255.255.0
!
interface GigabitEthernet0/2
 nameif ipphone
 security-level 100
 ip address 192.168.70.1 255.255.255.0
!

!

ftp mode passive
clock timezone GST 4
dns domain-lookup outside
dns server-group DefaultDNS
 name-server 213.42.20.20
 name-server 195.229.241.222
 domain-name vpn.iftshj.com
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
object network IST
 subnet 192.168.0.0 255.255.255.0


access-list acl_inside extended permit ip 192.168.0.0 255.255.255.0 any
access-list acl_ipphone extended permit ip 192.168.70.0 255.255.255.0 any
access-list acl_ipphone extended permit icmp any any unreachable
access-list acl_ipphone extended permit icmp any any time-exceeded 
pager lines 24
mtu outside 1492
mtu inside 1492
mtu ipphone 1500
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
no arp permit-nonconnected
!
nat (inside,outside) after-auto source dynamic IST interface
access-group acl_inside in interface inside
access-group acl_ipphone in interface ipphone
route outside 0.0.0.0 0.0.0.0 x.x.x.x 1

dynamic-access-policy-record DfltAccessPolicy
user-identity default-domain LOCAL
aaa authentication http console LOCAL
http server enable
http 192.168.0.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
crypto ipsec ikev1 transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac


telnet 192.168.0.0 255.255.255.0 inside
dhcpd address 192.168.70.20-192.168.70.150 ipphone
dhcpd dns 213.42.20.20 195.229.241.222 interface ipphone
dhcpd enable ipphone

class-map inspection_default
 match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
 parameters
  message-length maximum client auto
  message-length maximum 512
policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect ip-options
  inspect netbios
  inspect rsh
  inspect rtsp
  inspect skinny
  inspect esmtp
  inspect sqlnet
  inspect sunrpc
  inspect tftp
  inspect sip
  inspect xdmcp
  inspect icmp
!
service-policy global_policy global

ciscoasa#