Cisco PIX Security Appliance Software Version 7.2(2) Device Manager Version 5.2(2) Compiled on Wed 22-Nov-06 14:16 by builders System image file is "flash:/pix722.bin" Config file at boot was "startup-config" pixfirewall up 3 hours 16 mins Hardware: PIX-515, 128 MB RAM, CPU Pentium 200 MHz Flash i28F640J5 @ 0x300, 16MB BIOS Flash AT29C257 @ 0xfffd8000, 32KB 0: Ext: Ethernet0 : address is 0003.6bf6.b5d9, irq 11 1: Ext: Ethernet1 : address is 0003.6bf6.b5da, irq 10 2: Ext: Ethernet2 : address is 00e0.b604.4275, irq 9 3: Ext: Ethernet3 : address is 00e0.b604.4274, irq 9 4: Ext: Ethernet4 : address is 00e0.b604.4273, irq 9 5: Ext: Ethernet5 : address is 00e0.b604.4272, irq 9 Licensed features for this platform: Maximum Physical Interfaces : 6 Maximum VLANs : 25 Inside Hosts : Unlimited <--- More ---> Failover : Active/Active VPN-DES : Enabled VPN-3DES-AES : Disabled Cut-through Proxy : Enabled Guards : Enabled URL Filtering : Enabled Security Contexts : 2 GTP/GPRS : Disabled VPN Peers : Unlimited This platform has an Unrestricted (UR) license. Serial Number: 405352471 Running Activation Key: 0x740bcf95 0xfd63bb80 0x61d07014 0x28055231 Configuration last modified by enable_15 at 01:34:05.908 UTC Mon May 26 2008 ------------------ show clock ------------------ 01:43:04.908 UTC Mon May 26 2008 ------------------ show memory ------------------ Free memory: 91711752 bytes (68%) Used memory: 42505976 bytes (32%) <--- More ---> ------------- ---------------- Total memory: 134217728 bytes (100%) ------------------ show conn count ------------------ 1 in use, 3 most used ------------------ show xlate count ------------------ 0 in use, 0 most used ------------------ show blocks ------------------ SIZE MAX LOW CNT 0 100 99 100 4 300 300 300 80 100 98 99 256 1100 1097 1099 1550 2799 2023 2030 2048 100 100 100 ------------------ show blocks queue history detail ------------------ History buffer memory usage: 2136 bytes (default) <--- More ---> ------------------ show interface ------------------ Interface Ethernet0 "outside", is up, line protocol is up Hardware is i82559, BW 100 Mbps Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps) Description: test1 MAC address 0003.6bf6.b5d9, MTU 1500 IP address 192.1.12.10, subnet mask 255.255.255.0 63 packets input, 8584 bytes, 0 no buffer Received 36 broadcasts, 0 runts, 0 giants 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 L2 decode drops 63 packets output, 5272 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collisions, 0 deferred 0 lost carrier, 0 no carrier input queue (curr/max blocks): hardware (128/128) software (0/1) output queue (curr/max blocks): hardware (0/1) software (0/1) Traffic Statistics for "outside": 62 packets input, 7656 bytes 63 packets output, 3972 bytes 24 packets dropped 1 minute input rate 0 pkts/sec, 0 bytes/sec <--- More ---> 1 minute output rate 0 pkts/sec, 0 bytes/sec 1 minute drop rate, 0 pkts/sec 5 minute input rate 0 pkts/sec, 0 bytes/sec 5 minute output rate 0 pkts/sec, 0 bytes/sec 5 minute drop rate, 0 pkts/sec Control Point Interface States: Interface number is 1 Interface config status is active Interface state is active Interface Ethernet1 "inside", is up, line protocol is up Hardware is i82559, BW 100 Mbps Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps) Description: Test123 MAC address 0003.6bf6.b5da, MTU 1500 IP address 10.11.11.10, subnet mask 255.255.255.0 3337 packets input, 240030 bytes, 0 no buffer Received 937 broadcasts, 0 runts, 0 giants 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 L2 decode drops 2927 packets output, 222366 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collisions, 0 deferred 1 lost carrier, 0 no carrier input queue (curr/max blocks): hardware (128/128) software (0/6) <--- More ---> output queue (curr/max blocks): hardware (2/3) software (0/1) Traffic Statistics for "inside": 3337 packets input, 180921 bytes 2927 packets output, 156994 bytes 514 packets dropped 1 minute input rate 1 pkts/sec, 50 bytes/sec 1 minute output rate 1 pkts/sec, 54 bytes/sec 1 minute drop rate, 0 pkts/sec 5 minute input rate 0 pkts/sec, 7 bytes/sec 5 minute output rate 0 pkts/sec, 2 bytes/sec 5 minute drop rate, 0 pkts/sec Control Point Interface States: Interface number is 2 Interface config status is active Interface state is active Interface Ethernet2 "", is administratively down, line protocol is down Hardware is i82558, BW 100 Mbps Auto-Duplex, Auto-Speed Available but not configured via nameif MAC address 00e0.b604.4275, MTU not set IP address unassigned 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort <--- More ---> 0 L2 decode drops 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collisions, 0 deferred 0 lost carrier, 0 no carrier input queue (curr/max blocks): hardware (128/128) software (0/0) output queue (curr/max blocks): hardware (1/0) software (0/0) Control Point Interface States: Interface number is unassigned Interface Ethernet3 "", is administratively down, line protocol is down Hardware is i82558, BW 100 Mbps Auto-Duplex, Auto-Speed Available but not configured via nameif MAC address 00e0.b604.4274, MTU not set IP address unassigned 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 L2 decode drops 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collisions, 0 deferred 0 lost carrier, 0 no carrier input queue (curr/max blocks): hardware (128/128) software (0/0) <--- More ---> output queue (curr/max blocks): hardware (1/0) software (0/0) Control Point Interface States: Interface number is unassigned Interface Ethernet4 "", is administratively down, line protocol is down Hardware is i82558, BW 100 Mbps Auto-Duplex, Auto-Speed Available but not configured via nameif MAC address 00e0.b604.4273, MTU not set IP address unassigned 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 L2 decode drops 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collisions, 0 deferred 0 lost carrier, 0 no carrier input queue (curr/max blocks): hardware (128/128) software (0/0) output queue (curr/max blocks): hardware (1/0) software (0/0) Control Point Interface States: Interface number is unassigned Interface Ethernet5 "", is administratively down, line protocol is down Hardware is i82558, BW 100 Mbps Auto-Duplex, Auto-Speed <--- More ---> Available but not configured via nameif MAC address 00e0.b604.4272, MTU not set IP address unassigned 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 L2 decode drops 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collisions, 0 deferred 0 lost carrier, 0 no carrier input queue (curr/max blocks): hardware (128/128) software (0/0) output queue (curr/max blocks): hardware (1/0) software (0/0) Control Point Interface States: Interface number is unassigned ------------------ show cpu usage ------------------ CPU utilization for 5 seconds = 0%; 1 minute: 1%; 5 minutes: 1% ------------------ show cpu hogging process ------------------ Process: ci/console, NUMHOG: 10, MAXHOG: 1880, LASTHOG: 240 <--- More ---> LASTHOG At: 22:28:15 UTC May 25 2008 PC: 1044803 Traceback: a4418a a270a5 a272fa 9d6554 9e00e5 bf7a37 bf7d99 bf67ea 4b8bc0 842379 8432f3 15be20 15dbde 15e4e1 ------------------ show process ------------------ PC SP STATE Runtime SBASE Stack Process Mwe 00c72c7c 01bc0bd0 013a9360 9 016f63a0 15616/16384 emweb/cifs Lwe 001071fc 01729db4 013a93d0 0 01727de0 8132/8192 block_diag Mrd 00218f77 01ac479c 013a9470 448 01abc818 29260/32768 Dispatch Unit Mwe 001190d5 01b17344 013a9360 0 01b15390 7864/8192 Reload Control Thread Mwe 0011e146 01b1c494 013ab308 8 01b1a810 5176/8192 aaa Lwe 00217cd1 01b24c54 013b4410 5032 01b22c90 7524/8192 dbgtrace Msi 004a7bdc 01b2afc4 013a9360 63 01b28ff0 8000/8192 557mcfix Msi 004a7a2e 01b2d0e4 013a9360 0 01b2b110 7968/8192 557statspoll Mwe 01036885 01b5002c 013a9360 0 01b4e088 7848/8192 Chunk Manager Msi 00895e2e 01b5854c 013a9360 98 01b56598 7856/8192 PIX Garbage Collector Lsi 00e9f814 01b5a68c 013a9360 7 01b586b8 7552/8192 route_process Mwe 00885bb4 01b6808c 01301ba0 0 01b660c8 8116/8192 IP Address Assign Mwe 00aa7921 01b6acc4 0130cfe0 0 01b68d00 8116/8192 QoS Support Module Mwe 008fd3f1 01b6ce1c 01302c90 0 01b6ae58 8116/8192 Client Update Task Lwe 01055096 01b6f6dc 013a9360 53656 01b6d738 7860/8192 Checkheaps <--- More ---> Mwe 00b061e8 01b759bc 013a9360 119 01b73a98 7364/8192 Session Manager Mwe 00c2e3a5 01b809fc 024bfbc8 8 01b7cee8 14768/16384 uauth Mwe 00bbdb15 01b82f84 013221e0 0 01b80fc0 7524/8192 Uauth_Proxy Mwe 00c2ac01 01b892a4 01327900 0 01b87320 7712/8192 SMTP Mwe 00c17f81 01b8b384 013278a0 0 01b89440 7412/8192 Logger Mwe 00c1846e 01b8d504 013a9360 0 01b8b560 7492/8192 Thread Logger Mwe 00f348ba 01b9de04 01372640 0 01b9be60 7188/8192 vpnlb_thread Msi 00b1c804 01c61d5c 013a9360 85 01c5fd88 7904/8192 emweb/cifs_timer Msi 005a3e30 01b4defc 013a9360 469 01b4bf68 7476/8192 arp_timer Mwe 005ae154 01d25074 013c1960 0 01d23100 7960/8192 arp_forward_thread Msi 00c32ce1 01d781f4 013a9360 296 01d76240 7968/8192 tcp_fast Msi 00c32a21 01d7a21c 013a9360 120 01d78268 7968/8192 tcp_slow Mwe 00c4d459 01d8b024 01328a30 0 01d89070 8100/8192 udp_timer Mwe 00199e37 01b4699c 013a9360 0 01b449e8 8016/8192 CTCP Timer process Mwe 001b3566 01b48f14 01b46f70 20 01b46fa0 7728/8192 IPsec message handler Msi 001c275c 0225f7fc 013a9360 385 0225d858 7856/8192 CTM message handler Mwe 00ed240b 0239a064 013a9360 0 023980d0 7984/8192 L2TP data daemon Mwe 00ed2a4b 0239c09c 013a9360 0 0239a0f8 8000/8192 L2TP mgmt daemon Mwe 00ebddee 023d4184 0136bdd0 18 023d0200 16260/16384 ppp_timer_thread Msi 00f3539f 023d61bc 013a9360 161 023d4228 7936/8192 vpnlb_timer_thread Mwe 00ad5420 0244a9dc 013a9360 0 02448a28 8016/8192 ICMP event handler Mwe 0081364b 0244eb4c 013a9360 171 0244ab98 16160/16384 IP Background Mwe 00210877 02497cac 012d9000 78 02477d28 121984/131072 tmatch compile thread Mwe 009cf985 0250ad44 013a9360 0 02506d80 16072/16384 Crypto PKI RECV <--- More ---> Mwe 009d043a 0250ce04 013a9360 0 0250aea0 7784/8192 Crypto CA Lsi 008aa968 0253c12c 013a9360 2 0253a158 8000/8192 uauth_urlb clean Lwe 0088fcff 02582efc 013a9360 239 02580f58 6992/8192 pm_timer_thread Mwe 005171a7 025861a4 013a9360 0 02584200 8000/8192 IKE Timekeeper Mwe 005092e3 0258b61c 012f4a30 0 02587978 15448/16384 IKE Daemon Mwe 00bceaa0 0258f2b4 01326850 0 0258d300 8100/8192 RADIUS Proxy Event Daemon Mwe 00b9ee76 025912a4 01b70890 0 0258f420 7184/8192 RADIUS Proxy Listener Mwe 00bcec37 025934e4 013a9360 0 02591540 8000/8192 RADIUS Proxy Time Keeper Mwe 00591ab4 02595564 013c1890 0 02593660 7492/8192 Integrity FW Task Mwe 0022d57c 025be9fc 010f4550 20933 025b7158 25508/32768 ci/console Msi 0045e511 025c1a4c 013a9360 85 025bfac8 7616/8192 fover_thread Mwe 00e98b2d 025c3b3c 0149a4b8 31 025c1be8 7664/8192 lu_ctl Msi 008c433c 025c5acc 013a9360 1763 025c3d08 6512/8192 update_cpu_usage Msi 008c5235 025cfe84 013a9360 1565 025cdf80 6256/8192 NIC status poll Mwe 0044e494 01b43924 013bb780 0 01b41ae0 7732/8192 fover_rx Mwe 0045b2fc 025e628c 013bb7e4 0 025e4308 8052/8192 fover_tx Mwe 0045076b 025e82d4 013c1a00 0 025e6330 8040/8192 fover_ip Mwe 00463f31 025ec0fc 013bb7f8 0 025e8358 15688/16384 fover_rep Mwe 00459a3d 025f0004 013bb800 36 025ec380 15448/16384 fover_parse Mwe 0044219b 025f22ec 013b97f0 20 025f03a8 7992/8192 fover_ifc_test Mwe 00445bf5 025f4374 013a9360 0 025f23d0 8000/8192 fover_health_monitoring_thread Mwe 0022d57c 025f5e0c 010f45a8 84 025f43f8 6676/8192 fover_serial_rx Mwe 004770cc 025f83d4 013ba500 0 025f6420 8100/8192 fover_serial_tx Mwe 00475f36 025fc604 013a9360 0 025fa670 7984/8192 ha_trans_ctl_tx <--- More ---> Mwe 00475f36 0260f654 013a9360 0 0260d6c0 7984/8192 ha_trans_data_tx Mwe 0046b907 0261169c 013a9360 0 0260f6e8 7776/8192 fover_FSM_thread Mwe 00e98433 026136d4 013c1b00 0 02611710 7992/8192 lu_rx Lwe 00e98354 0261570c 0149a3d8 0 02613738 8132/8192 lu_dynamic_sync Mwe 00f06385 025cd484 01371bf8 0 025cb4d0 8100/8192 vpnfol_thread_msg Msi 00f0be4a 02706ccc 013a9360 71 02704d28 7952/8192 vpnfol_thread_timer Mwe 00f0a6aa 02708ce4 01371d60 0 02706d50 8068/8192 vpnfol_thread_sync Msi 00f0b9e4 0270ad2c 013a9360 293 02708d78 7968/8192 vpnfol_thread_unsent Mwe 0059d08e 0273db4c 013c1c20 152 0273bba8 7676/8192 IP Thread Mwe 005a57f6 0273fc7c 013c1bc0 183 0273dcc8 4820/8192 ARP Thread Mwe 004abafe 02741cfc 013c19f0 6 0273fde8 5344/8192 icmp_thread Mwe 00c4f1b6 02743eac 013a9360 0 02741f08 7848/8192 udp_thread Mwe 00c355be 02745e8c 013c1c10 433 02744028 6008/8192 tcp_thread Mwe 00b9ee76 0275d864 02756860 0 0275b9f0 7512/8192 EAPoUDP-sock Mwe 0025a5d5 0275f68c 013a9360 0 0275da18 7032/8192 EAPoUDP Mwe 0058d650 0276601c 013a9360 0 02764078 8000/8192 Integrity Fw Timer Thread Mwe 00c38215 02796024 0278e110 2 027941b0 7340/8192 listen/telnet Mwe 00c2e3a5 027da364 024bfbf0 2 027d8570 7528/8192 tacplus_get Mwe 00acad91 027dc54c 0130dfe8 972 027da598 3604/8192 tacplus_snd Mwe 00c38215 0284445c 0278e600 0 028425e8 7340/8192 listen/ssh M* 00837232 0009ff0c 013a9470 90 027dd408 8064/16384 telnet/ci - - - - 13245790 - - scheduler - - - - 13365239 - - total elapsed <--- More ---> ------------------ show failover ------------------ Failover Off Cable status: My side not connected Failover unit Secondary Failover LAN Interface: not Configured Unit Poll frequency 15 seconds, holdtime 45 seconds Interface Poll frequency 5 seconds, holdtime 25 seconds Interface Policy 1 Monitored Interfaces 2 of 250 maximum ------------------ show traffic ------------------ outside: received (in 11819.400 secs): 62 packets 7656 bytes 0 pkts/sec 0 bytes/sec transmitted (in 11819.400 secs): 63 packets 3972 bytes 0 pkts/sec 0 bytes/sec 1 minute input rate 0 pkts/sec, 0 bytes/sec 1 minute output rate 0 pkts/sec, 0 bytes/sec 1 minute drop rate, 0 pkts/sec 5 minute input rate 0 pkts/sec, 0 bytes/sec <--- More ---> 5 minute output rate 0 pkts/sec, 0 bytes/sec 5 minute drop rate, 0 pkts/sec inside: received (in 11819.560 secs): 3359 packets 181811 bytes 0 pkts/sec 15 bytes/sec transmitted (in 11819.560 secs): 2965 packets 171517 bytes 0 pkts/sec 14 bytes/sec 1 minute input rate 1 pkts/sec, 50 bytes/sec 1 minute output rate 1 pkts/sec, 54 bytes/sec 1 minute drop rate, 0 pkts/sec 5 minute input rate 0 pkts/sec, 7 bytes/sec 5 minute output rate 0 pkts/sec, 2 bytes/sec 5 minute drop rate, 0 pkts/sec ---------------------------------------- Aggregated Traffic on Physical Interface ---------------------------------------- Ethernet0: received (in 11819.560 secs): 63 packets 8584 bytes 0 pkts/sec 0 bytes/sec transmitted (in 11819.560 secs): <--- More ---> 63 packets 5272 bytes 0 pkts/sec 0 bytes/sec 1 minute input rate 0 pkts/sec, 0 bytes/sec 1 minute output rate 0 pkts/sec, 0 bytes/sec 1 minute drop rate, 0 pkts/sec 5 minute input rate 0 pkts/sec, 0 bytes/sec 5 minute output rate 0 pkts/sec, 0 bytes/sec 5 minute drop rate, 0 pkts/sec Ethernet1: received (in 11819.710 secs): 3337 packets 241530 bytes 0 pkts/sec 20 bytes/sec transmitted (in 11819.710 secs): 2927 packets 238622 bytes 0 pkts/sec 20 bytes/sec 1 minute input rate 1 pkts/sec, 70 bytes/sec 1 minute output rate 1 pkts/sec, 81 bytes/sec 1 minute drop rate, 0 pkts/sec 5 minute input rate 0 pkts/sec, 9 bytes/sec 5 minute output rate 0 pkts/sec, 3 bytes/sec 5 minute drop rate, 0 pkts/sec Ethernet2: received (in 11819.710 secs): 0 packets 0 bytes <--- More ---> 0 pkts/sec 0 bytes/sec transmitted (in 11819.710 secs): 0 packets 0 bytes 0 pkts/sec 0 bytes/sec 1 minute input rate 0 pkts/sec, 0 bytes/sec 1 minute output rate 0 pkts/sec, 0 bytes/sec 1 minute drop rate, 0 pkts/sec 5 minute input rate 0 pkts/sec, 0 bytes/sec 5 minute output rate 0 pkts/sec, 0 bytes/sec 5 minute drop rate, 0 pkts/sec Ethernet3: received (in 11819.850 secs): 0 packets 0 bytes 0 pkts/sec 0 bytes/sec transmitted (in 11819.850 secs): 0 packets 0 bytes 0 pkts/sec 0 bytes/sec 1 minute input rate 0 pkts/sec, 0 bytes/sec 1 minute output rate 0 pkts/sec, 0 bytes/sec 1 minute drop rate, 0 pkts/sec 5 minute input rate 0 pkts/sec, 0 bytes/sec 5 minute output rate 0 pkts/sec, 0 bytes/sec 5 minute drop rate, 0 pkts/sec Ethernet4: <--- More ---> received (in 11819.850 secs): 0 packets 0 bytes 0 pkts/sec 0 bytes/sec transmitted (in 11819.850 secs): 0 packets 0 bytes 0 pkts/sec 0 bytes/sec 1 minute input rate 0 pkts/sec, 0 bytes/sec 1 minute output rate 0 pkts/sec, 0 bytes/sec 1 minute drop rate, 0 pkts/sec 5 minute input rate 0 pkts/sec, 0 bytes/sec 5 minute output rate 0 pkts/sec, 0 bytes/sec 5 minute drop rate, 0 pkts/sec Ethernet5: received (in 11820.000 secs): 0 packets 0 bytes 0 pkts/sec 0 bytes/sec transmitted (in 11820.000 secs): 0 packets 0 bytes 0 pkts/sec 0 bytes/sec 1 minute input rate 0 pkts/sec, 0 bytes/sec 1 minute output rate 0 pkts/sec, 0 bytes/sec 1 minute drop rate, 0 pkts/sec 5 minute input rate 0 pkts/sec, 0 bytes/sec 5 minute output rate 0 pkts/sec, 0 bytes/sec <--- More ---> 5 minute drop rate, 0 pkts/sec ------------------ show perfmon ------------------ PERFMON STATS: Current Average Xlates 0/s 0/s Connections 0/s 0/s TCP Conns 0/s 0/s UDP Conns 0/s 0/s URL Access 0/s 0/s URL Server Req 0/s 0/s TCP Fixup 0/s 0/s TCP Intercept 0/s 0/s HTTP Fixup 0/s 0/s FTP Fixup 0/s 0/s AAA Authen 0/s 0/s AAA Author 0/s 0/s AAA Account 0/s 0/s ------------------ show counters ------------------ Protocol Counter Value Context IP IN_PKTS 2853 Summary <--- More ---> IP OUT_PKTS 2991 Summary IP TO_ARP 441 Summary IP TO_ICMP 37 Summary IP TO_TCP 2375 Summary TCP IN_PKTS 2375 Summary TCP OUT_PKTS 4255 Summary TCP RCV_GOOD 1262 Summary TCP SESS_CTOD 3 Summary TCP DROP_IGNORE4 2524 Summary TCP OUT_CLSD 28 Summary TCP HASH_ADD 29 Summary TCP HASH_MISS 7 Summary TCP SND_SYN 22 Summary TCP SND_ACK 1313 Summary TCP RCV_ACK 1036 Summary TCP RCV_ACK_NEST 27 Summary ICMP IN_PKTS 37 Summary ICMP OUT_PKTS 18 Summary ------------------ show mode ------------------ Security context mode: single ------------------ show history ------------------ <--- More ---> ena sho tech-support ------------------ show firewall ------------------ Firewall mode: Router ------------------ show running-config ------------------ : Saved : PIX Version 7.2(2) ! hostname pixfirewall enable password names ! interface Ethernet0 description test1 nameif outside security-level 0 ip address 192.1.12.10 255.255.255.0 ! <--- More ---> interface Ethernet1 description Test123 nameif inside security-level 100 ip address 10.11.11.10 255.255.255.0 ! interface Ethernet2 shutdown no nameif no security-level no ip address ! interface Ethernet3 shutdown no nameif no security-level no ip address ! interface Ethernet4 shutdown no nameif no security-level no ip address ! <--- More ---> interface Ethernet5 shutdown no nameif no security-level no ip address ! passwd ftp mode passive pager lines 24 mtu outside 1500 mtu inside 1500 no failover icmp unreachable rate-limit 1 burst-size 1 asdm image flash:/asdm-522.bin no asdm history enable arp timeout 14400 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout uauth 0:05:00 absolute aaa-server ACS protocol tacacs+ aaa-server ACS host 10.11.11.100 key ccie-fw <--- More ---> username firewall password aaa authentication telnet console ACS LOCAL aaa authentication ssh console ACS LOCAL aaa accounting telnet console ACS aaa accounting command ACS no snmp-server location no snmp-server contact snmp-server enable traps snmp authentication linkup linkdown coldstart telnet 0.0.0.0 0.0.0.0 inside telnet 10.11.11.0 255.255.255.0 inside telnet timeout 5 ssh 10.11.11.0 255.255.255.0 inside ssh timeout 5 console timeout 0 ! class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters message-length maximum 512 policy-map global_policy class inspection_default <--- More ---> inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect netbios inspect rsh inspect rtsp inspect skinny inspect esmtp inspect sqlnet inspect sunrpc inspect tftp inspect sip inspect xdmcp inspect icmp ! service-policy global_policy global prompt hostname context Cryptochecksum:d41d8cd98f00b204e9800998ecf8427e : end ------------------ show startup-config errors ------------------ Configuration has non-ASCII characters and will be ignored. <--- More ---> ------------------ console logs ------------------ Message #1 : Message #2 : Message #3 : Message #4 : Message #5 : Message #6 : Message #7 : Message #8 : Message #9 : Message #10 : Message #11 : Message #12 : Message #13 : Message #14 : Total NICs found: 6 Message #15 : mcwa Message #16 : i82559 Ethernet at irq 11Message #17 : MAC: 0003.6bf6.b5d9 Message #18 : mcwa Message #19 : i82559 Ethernet at irq 10Message #20 : MAC: 0003.6bf6.b5da Message #21 : mcwa Message #22 : i82558 Ethernet at irq 9Message #23 : MAC: 00e0.b604.4275 Message #24 : mcwa Message #25 : i82558 Ethernet at irq 9Message #26 : MAC: 00e0.b604.4274 Message #27 : mcwa Message #28 : i82558 Ethernet at irq 9Message #29 : MAC: 00e0.b604.4273 Message #30 : mcwa Message #31 : i82558 Ethernet at irq 9Message #32 : MAC: 00e0.b604.4272 Message #33 : BIOS Flash=AT29C257 @ 0xfffd8000 Message #34 : Initializing flashfs...Message #35 : flashfs[7]: 21 files, 9 directoriesMessage #36 : flashfs[7]: 0 orphaned files, 0 orphaned directoriesMessage #37 : flashfs[7]: Total bytes: 15998976Message #38 : flashfs[7]: Bytes used: 15933952Message #39 : flashfs[7]: Bytes available: 65024Message #40 : flashfs[7]: flashfs fsck took 24 seconds.Message #41 : flashfs[7]: Initialization complete.Message #42 : Message #43 : Message #44 : Licensed features for this platform: <--- More ---> Message #45 : Maximum Physical Interfaces : 6 Message #46 : Maximum VLANs : 25 Message #47 : Inside Hosts : Unlimited Message #48 : Failover : Active/Active Message #49 : VPN-DES : Enabled Message #50 : VPN-3DES-AES : Disabled Message #51 : Cut-through Proxy : Enabled Message #52 : Guards : Enabled Message #53 : URL Filtering : Enabled Message #54 : Security Contexts : 2 Message #55 : GTP/GPRS : Disabled Message #56 : VPN Peers : Unlimited Message #57 : This platform has Message #58 : an Unrestricted (UR) Message #59 : license. Message #60 : Message #61 : -------------------------------------------------------------------------- Message #62 : . . Message #63 : | | Message #64 : ||| ||| Message #65 : .|| ||. .|| ||. Message #66 : .:||| | |||:..:||| | |||:. Message #67 : C i s c o S y s t e m s Message #68 : -------------------------------------------------------------------------- Message #69 : <--- More ---> Cisco PIX Security Appliance Software Version 7.2(2) Message #70 : Message #71 : ****************************** Warning ******************************* Message #72 : This product contains cryptographic features and is Message #73 : subject to United States and local country laws Message #74 : governing, import, export, transfer, and use. Message #75 : Delivery of Cisco cryptographic products does not Message #76 : imply third-party authority to import, export, Message #77 : distribute, or use encryption. Importers, exporters, Message #78 : distributors and users are responsible for compliance Message #79 : with U.S. and local country laws. By using this Message #80 : product you agree to comply with applicable laws and Message #81 : regulations. If you are unable to comply with U.S. Message #82 : and local laws, return the enclosed items immediately. Message #83 : Message #84 : A summary of U.S. laws governing Cisco cryptographic Message #85 : products may be found at: Message #86 : http://www.cisco.com/wwl/export/crypto/tool/stqrg.html Message #87 : Message #88 : If you require further assistance please contact us by Message #89 : sending email to export@cisco.com. Message #90 : ******************************* Warning ******************************* Message #91 : Message #92 : Copyright (c) 1996-2006 by Cisco Systems, Inc. <--- More ---> Message #93 : Restricted Rights Legend Message #94 : Use, duplication, or disclosure by the Government is Message #95 : subject to restrictions as set forth in subparagraph Message #96 : (c) of the Commercial Computer Software - Restricted Message #97 : Rights clause at FAR sec. 52.227-19 and subparagraph Message #98 : (c) (1) (ii) of the Rights in Technical Data and Computer Message #99 : Software clause at DFARS sec. 252.227-7013. Message #100 : Cisco Systems, Inc. Message #101 : 170 West Tasman Drive Message #102 : San Jose, California 95134-1706 Message #103 : ICMP echo request from 10.11.11.100 to 10.11.11.10 ID=512 seq=5120 len=32 Message #104 : ICMP echo reply from 10.11.11.10 to 10.11.11.100 ID=512 seq=5120 len=32 Message #105 : ICMP echo request from 10.11.11.100 to 10.11.11.10 ID=512 seq=5376 len=32 Message #106 : ICMP echo reply from 10.11.11.10 to 10.11.11.100 ID=512 seq=5376 len=32 Message #107 : ICMP echo request from 10.11.11.100 to 10.11.11.10 ID=512 seq=5632 len=32 Message #108 : ICMP echo reply from 10.11.11.10 to 10.11.11.100 ID=512 seq=5632 len=32 Message #109 : ICMP echo request from 10.11.11.100 to 10.11.11.10 ID=512 seq=5888 len=32 Message #110 : ICMP echo reply from 10.11.11.10 to 10.11.11.100 ID=512 seq=5888 len=32 Message #111 : ICMP echo request from inside:10.11.11.100 to outside:192.1.12.2 ID=512 seq=6144 len=32 Message #112 : ICMP echo request from inside:10.11.11.100 to outside:192.1.12.2 ID=512 seq=6400 len=32 <--- More ---> Message #113 : ICMP echo request from inside:10.11.11.100 to outside:192.1.12.2 ID=512 seq=6656 len=32 Message #114 : ICMP echo request from inside:10.11.11.100 to outside:192.1.12.2 ID=512 seq=6912 len=32 Message #115 : ICMP echo request from inside:10.11.11.100 to outside:192.1.12.2 ID=512 seq=7168 len=32 Message #116 : ICMP echo reply from outside:192.1.12.2 to inside:10.11.11.100 ID=512 seq=7168 len=32 Message #117 : ICMP echo request from inside:10.11.11.100 to outside:192.1.12.2 ID=512 seq=7424 len=32 Message #118 : ICMP echo reply from outside:192.1.12.2 to inside:10.11.11.100 ID=512 seq=7424 len=32 Message #119 : ICMP echo request from inside:10.11.11.100 to outside:192.1.12.2 ID=512 seq=7680 len=32 Message #120 : ICMP echo reply from outside:192.1.12.2 to inside:10.11.11.100 ID=512 seq=7680 len=32 Message #121 : ICMP echo request from inside:10.11.11.100 to outside:192.1.12.2 ID=512 seq=7936 len=32 Message #122 : ICMP echo reply from outside:192.1.12.2 to inside:10.11.11.100 ID=512 seq=7936 len=32 Message #123 : ICMP echo request from inside:10.11.11.100 to outside:192.1.12.2 ID=512 seq=8192 len=32 Message #124 : ICMP echo request from inside:10.11.11.100 to outside:192.1.12.2 ID=512 seq=8448 len=32 Message #125 : ICMP echo request from inside:10.11.11.100 to outside:192.1.12.2 ID=512 seq=8704 len=32 Message #126 : ICMP echo request from inside:10.11.11.100 to outside:192.1.12.2 ID=512 seq=8960 len=32 Message #127 : ICMP echo request from inside:10.11.11.100 to outside:192.1.12.2 ID=512 seq=9216 len=32 Message #128 : ICMP echo request from inside:10.11.11.100 to outside:192.1.12.2 ID=512 seq=9472 len=32 Message #129 : ICMP echo request from inside:10.11.11.100 to outside:192.1.12.2 ID=512 seq=9728 len=32 Message #130 : ICMP echo request from inside:10.11.11.100 to outside:192.1.12.2 ID=512 seq=9984 len=32 Message #131 : ICMP echo request from 192.1.12.2 to 192.1.12.10 ID=0 seq=0 len=72 Message #132 : ICMP echo reply from 192.1.12.10 to 192.1.12.2 ID=0 seq=0 len=72 Message #133 : ICMP echo request from 192.1.12.2 to 192.1.12.10 ID=0 seq=1 len=72 Message #134 : ICMP echo reply from 192.1.12.10 to 192.1.12.2 ID=0 seq=1 len=72 Message #135 : ICMP echo request from 192.1.12.2 to 192.1.12.10 ID=0 seq=2 len=72 Message #136 : ICMP echo reply from 192.1.12.10 to 192.1.12.2 ID=0 seq=2 len=72 <--- More ---> Message #137 : ICMP echo request from 192.1.12.2 to 192.1.12.10 ID=0 seq=3 len=72 Message #138 : ICMP echo reply from 192.1.12.10 to 192.1.12.2 ID=0 seq=3 len=72 Message #139 : ICMP echo request from 192.1.12.2 to 192.1.12.10 ID=0 seq=4 len=72 Message #140 : ICMP echo reply from 192.1.12.10 to 192.1.12.2 ID=0 seq=4 len=72 Message #141 : ICMP echo request from inside:10.11.11.100 to outside:192.1.12.2 ID=512 seq=10240 len=32 Message #142 : ICMP echo request from inside:10.11.11.100 to outside:192.1.12.2 ID=512 seq=10496 len=32 Message #143 : ICMP echo request from inside:10.11.11.100 to outside:192.1.12.2 ID=512 seq=10752 len=32 Message #144 : ICMP echo request from inside:10.11.11.100 to outside:192.1.12.2 ID=512 seq=11008 len=32 Message #145 : ICMP echo request from 10.11.11.10 to 10.11.11.100 ID=4388 seq=1828 len=72 Message #146 : ICMP echo reply from 10.11.11.100 to 10.11.11.10 ID=4388 seq=1828 len=72 Message #147 : ICMP echo request from 10.11.11.10 to 10.11.11.100 ID=4388 seq=1828 len=72 Message #148 : ICMP echo reply from 10.11.11.100 to 10.11.11.10 ID=4388 seq=1828 len=72 Message #149 : ICMP echo request from 10.11.11.10 to 10.11.11.100 ID=4388 seq=1828 len=72 Message #150 : ICMP echo reply from 10.11.11.100 to 10.11.11.10 ID=4388 seq=1828 len=72 Message #151 : ICMP echo request from 10.11.11.10 to 10.11.11.100 ID=4388 seq=1828 len=72 Message #152 : ICMP echo reply from 10.11.11.100 to 10.11.11.10 ID=4388 seq=1828 len=72 Message #153 : ICMP echo request from 10.11.11.10 to 10.11.11.100 ID=4388 seq=1828 len=72 Message #154 : ICMP echo reply from 10.11.11.100 to 10.11.11.10 ID=4388 seq=1828 len=72 Message #155 : ICMP echo request from 10.11.11.10 to 10.11.11.100 ID=4388 seq=39090 len=72 Message #156 : ICMP echo reply from 10.11.11.100 to 10.11.11.10 ID=4388 seq=39090 len=72 Message #157 : ICMP echo request from 10.11.11.10 to 10.11.11.100 ID=4388 seq=39090 len=72 Message #158 : ICMP echo reply from 10.11.11.100 to 10.11.11.10 ID=4388 seq=39090 len=72 Message #159 : ICMP echo request from 10.11.11.10 to 10.11.11.100 ID=4388 seq=39090 len=72 Message #160 : ICMP echo reply from 10.11.11.100 to 10.11.11.10 ID=4388 seq=39090 len=72 <--- More ---> Message #161 : ICMP echo request from 10.11.11.10 to 10.11.11.100 ID=4388 seq=39090 len=72 Message #162 : ICMP echo reply from 10.11.11.100 to 10.11.11.10 ID=4388 seq=39090 len=72 Message #163 : ICMP echo request from 10.11.11.10 to 10.11.11.100 ID=4388 seq=39090 len=72 Message #164 : ICMP echo reply from 10.11.11.100 to 10.11.11.10 ID=4388 seq=39090 len=72 pixfirewall#