: Saved
:
PIX Version 6.3(5)
interface ethernet0 auto
interface ethernet1 100full
interface ethernet2 100full
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 DMZ security10
hostname RCAPIXINT
domain-name ruffalocody.com
clock timezone CST -6
clock summer-time CDT recurring
fixup protocol dns maximum-length 512
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol ils 389
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
names
<NAMES-REMOVED>
name 142.x.x.86 Hamilton_Health_Sciences
name 64.x.x.5 HHS_NAT
<NAMES-REMOVED>
access-list outside_cryptomap_1210 permit ip 10.x.x.0 255.255.0.0 GS10PIX 255.255.255.0
access-list outside_cryptomap_1210 permit ip 10.x.x.0 255.255.0.0 GS10PIX 255.255.255.0
access-list outside_cryptomap_20 permit ip 10.x.x.0 255.255.0.0 AMESPIXVPN 255.255.0.0
access-list outside_cryptomap_20 permit ip 10.x.x.0 255.255.0.0 AMESPIXVPN 255.255.0.0
access-list outside_cryptomap_140 permit ip 10.x.x.0 255.255.0.0 ACU-LAN 255.255.0.0
access-list outside_cryptomap_160 permit ip 10.x.x.0 255.255.0.0 ACU-LAN 255.255.0.0
access-list inside-outbound_nat0_acl permit ip 10.x.x.0 255.255.0.0 AMESPIXVPN 255.255.0.0
access-list outside_cryptomap_40 permit ip 10.x.x.0 255.255.0.0 UGA-LAN 255.255.0.0
access-list outside_cryptomap_40 permit ip 10.x.x.0 255.255.0.0 UGA-LAN 255.255.0.0
access-list outside_cryptomap_40 permit ip DATAWH 255.255.255.0 UGA-LAN 255.255.0.0
access-list outside_cryptomap_60 permit ip 10.x.x.0 255.255.0.0 AHM-LAN 255.255.0.0
access-list outside_cryptomap_80 permit ip 10.x.x.0 255.255.0.0 AHM-LAN 255.255.0.0
access-list outside_cryptomap_100 permit ip 10.x.x.0 255.255.0.0 LIU-LAN 255.255.0.0
access-list outside_cryptomap_100 permit ip 10.x.x.0 255.255.0.0 LIU-LAN 255.255.0.0
access-list outside_cryptomap_120 permit ip 10.x.x.0 255.255.0.0 LIU-LAN 255.255.0.0
access-list outside_cryptomap_180 permit ip 10.x.x.0 255.255.0.0 BGSUPIXVPN 255.255.0.0
access-list outside_cryptomap_180 permit ip 10.x.x.0 255.255.0.0 BGSUPIXVPN 255.255.0.0
access-list outside_cryptomap_200 permit ip 10.x.x.0 255.255.0.0 GS1PIX 255.255.255.0
access-list outside_cryptomap_200 permit ip 10.x.x.0 255.255.0.0 GS1PIX 255.255.255.0
access-list outside_cryptomap_900 permit ip 10.x.x.0 255.255.0.0 host UARKIPSEC
access-list outside_cryptomap_900 permit ip 10.x.x.0 255.255.0.0 host UARKIPSEC
access-list outside_cryptomap_240 permit ip 10.x.x.0 255.255.0.0 OMPIX 255.255.255.0
access-list outside_cryptomap_240 permit ip 10.x.x.0 255.255.0.0 OMPIX 255.255.255.0
access-list outside_cryptomap_260 permit ip 10.x.x.0 255.255.0.0 BUFFALOPIX 255.255.255.0
access-list outside_cryptomap_260 permit ip 10.x.x.0 255.255.0.0 BUFFALOPIX 255.255.255.0
access-list outside_cryptomap_280 permit ip 10.x.x.0 255.255.0.0 UHPIX 255.255.255.0
access-list outside_cryptomap_280 permit ip 10.x.x.0 255.255.0.0 UHPIX 255.255.255.0
access-list outside_cryptomap_1230 permit ip 10.x.x.0 255.255.0.0 CINPIX 255.255.255.0
access-list outside_cryptomap_1230 permit ip 10.x.x.0 255.255.0.0 CINPIX 255.255.255.0
access-list outside_cryptomap_320 permit ip 10.x.x.0 255.255.0.0 GS2PIX 255.255.255.0
access-list outside_cryptomap_360 permit ip 10.x.x.0 255.255.0.0 GRAD3PIX 255.255.255.0
access-list outside_cryptomap_360 permit ip 10.x.x.0 255.255.0.0 GRAD3PIX 255.255.255.0
access-list outside_cryptomap_340 permit ip 10.x.x.0 255.255.0.0 URPIX 255.255.255.0
access-list outside_cryptomap_340 permit ip 10.x.x.0 255.255.0.0 URPIX 255.255.255.0
access-list outside_cryptomap_380 permit ip 10.x.x.0 255.255.0.0 UMLPIX 255.255.255.0
access-list outside_cryptomap_380 permit ip 10.x.x.0 255.255.0.0 UMLPIX 255.255.255.0
access-list outside_cryptomap_400 permit ip 10.x.x.0 255.255.0.0 UNCWPIX 255.255.255.0
access-list outside_cryptomap_400 permit ip 10.x.x.0 255.255.0.0 UNCWPIX 255.255.255.0
access-list outside_cryptomap_420 permit ip 10.x.x.0 255.255.0.0 PEPPIX 255.255.255.0
access-list outside_cryptomap_440 permit ip 10.x.x.0 255.255.0.0 PEPPIX 255.255.255.0
access-list outside_cryptomap_310 permit ip 10.x.x.0 255.255.0.0 GS2PIX 255.255.255.0
access-list inside_outbound_nat1_acl permit ip 10.0.0.0 255.0.0.0 any
access-list inside_outbound permit ip 10.0.0.0 255.0.0.0 any
access-list outside_cryptomap_460 permit ip 10.x.x.0 255.255.0.0 GS6PIX 255.255.255.0
access-list outside_cryptomap_460 permit ip 10.x.x.0 255.255.0.0 GS6PIX 255.255.255.0
access-list outside_cryptomap_480 permit ip 10.x.x.0 255.255.0.0 GS7PIX 255.255.255.0
access-list outside_cryptomap_480 permit ip 10.x.x.0 255.255.0.0 GS7PIX 255.255.255.0
access-list outside_cryptomap_520 permit ip 10.x.x.0 255.255.0.0 OHIOPIX 255.255.255.0
access-list outside_cryptomap_520 permit ip 10.x.x.0 255.255.0.0 OHIOPIX 255.255.255.0
access-list outside_cryptomap_500 permit ip 10.x.x.0 255.255.0.0 PENNPIX 255.255.255.0
access-list outside_cryptomap_500 permit ip 10.x.x.0 255.255.0.0 PENNPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 host TuftsCodyTest
access-list 102 permit ip 10.x.x.0 255.255.0.0 host TuftsCodyProd
access-list 102 permit ip 10.x.x.0 255.255.0.0 host TuftsCodyProd
access-list 102 permit ip 10.x.x.0 255.255.0.0 host TuftsCodyTest
access-list 102 permit ip 10.x.x.0 255.255.0.0 TuftsPackard 255.255.255.192
access-list 102 permit ip 10.x.x.0 255.255.0.0 TuftsPackard 255.255.255.192
access-list 102 permit ip 10.x.x.0 255.255.0.0 GS1PIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 GS1PIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 UMSLPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 UMSLPIX 255.255.255.0
access-list 102 permit ip any 10.x.x.0 255.255.255.192
access-list 102 permit ip 10.x.x.0 255.255.0.0 NYUIPSEC 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 WSUPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 WSUPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 host 141.211.137.28
access-list 102 permit ip 10.x.x.0 255.255.0.0 host 141.211.137.28
access-list 102 permit ip 10.x.x.0 255.255.0.0 UNIPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 UNIPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 UCLA 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 UCLA 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 IDAHOPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 IDAHOPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 UNCCHPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 UNCCHPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 LUPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 LUPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 host UARKIPSEC
access-list 102 permit ip 10.x.x.0 255.255.0.0 host UARKIPSEC
access-list 102 permit ip 10.x.x.0 255.255.0.0 NIUPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 NIUPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 IUPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 IUPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 GS9PIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 GS9PIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 GS8PIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 GS8PIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 GS10PIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 GS10PIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 host psuipsec
access-list 102 permit ip 10.x.x.0 255.255.0.0 host psuipsec
access-list 102 permit ip 10.x.x.0 255.255.0.0 umichpix 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 umichpix 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 psupix 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 psupix 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 host SCARIPSEC
access-list 102 permit ip 10.x.x.0 255.255.0.0 host SCARIPSEC
access-list 102 permit ip 10.x.x.0 255.255.0.0 host NYUAPPSRV
access-list 102 permit ip 10.x.x.0 255.255.0.0 host NYUAPPSRV
access-list 102 permit ip any 10.x.x.0 255.255.255.128
access-list 102 permit ip 10.x.x.0 255.255.0.0 CincyPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 CincyPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 CINPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 CINPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 UTAPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 UTAPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 TEMPPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 TEMPPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 GS5PIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 GS5PIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 host STANPIX
access-list 102 permit ip 10.x.x.0 255.255.0.0 host STANPIX
access-list 102 permit ip 10.x.x.0 255.255.0.0 Columbia-IPSec 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 Columbia-IPSec 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 AMESPIXVPN 255.255.0.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 AMESPIXVPN 255.255.0.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 UGA-LAN 255.255.0.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 UGA-LAN 255.255.0.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 AHM-LAN 255.255.0.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 AHM-LAN 255.255.0.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 LIU-LAN 255.255.0.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 LIU-LAN 255.255.0.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 ACU-LAN 255.255.0.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 ACU-LAN 255.255.0.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 BGSUPIXVPN 255.255.0.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 BGSUPIXVPN 255.255.0.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 OMPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 OMPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 UHPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 UHPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 GS2PIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 GS2PIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 PEPPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 PEPPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 GRAD3PIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 GRAD3PIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 URPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 URPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 UMLPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 UMLPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 GS7PIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 GS7PIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 OHIOPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 OHIOPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 PENNPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 PENNPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 WASHPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 WASHPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 WAYNEPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 WAYNEPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 BCPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 BCPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 BUFFALOPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 BUFFALOPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 UNCWPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 UNCWPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 GS6PIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 GS6PIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 GS4PIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 GS4PIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 SMUPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 SMUPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 UWOPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 UWOPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 SFSU 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 SFSU 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 PACE 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 PACE 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 OUPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 OUPIX 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 OU-Stations 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 OU-Stations 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 host Vanderbilt
access-list 102 permit ip 10.x.x.0 255.255.0.0 host Vanderbilt
access-list 102 permit ip 10.x.x.0 255.255.0.0 host Webserver
access-list 102 permit ip 10.x.x.0 255.255.0.0 host Webserver
access-list 102 permit ip 10.x.x.0 255.255.0.0 host UMICHIPSEC
access-list 102 permit ip 10.x.x.0 255.255.0.0 host UMICHIPSEC
access-list 102 permit ip 10.x.x.0 255.255.0.0 host VUWINDB
access-list 102 permit ip 10.x.x.0 255.255.0.0 host VUWINDB
access-list 102 permit ip 10.x.x.0 255.255.0.0 NYUIPSEC 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 VU-Stations 255.255.255.0
access-list 102 permit ip 10.x.x.0 255.255.0.0 VU-Stations 255.255.255.0
access-list outside_cryptomap_540 permit ip 10.x.x.0 255.255.0.0 GS4PIX 255.255.255.0
access-list outside_cryptomap_540 permit ip 10.x.x.0 255.255.0.0 GS4PIX 255.255.255.0
access-list outside_cryptomap_560 permit ip 10.x.x.0 255.255.0.0 WASHPIX 255.255.255.0
access-list outside_cryptomap_560 permit ip 10.x.x.0 255.255.0.0 WASHPIX 255.255.255.0
access-list outside_cryptomap_580 permit ip 10.x.x.0 255.255.0.0 WAYNEPIX 255.255.255.0
access-list outside_cryptomap_580 permit ip 10.x.x.0 255.255.0.0 WAYNEPIX 255.255.255.0
access-list outside_cryptomap_600 permit ip 10.x.x.0 255.255.0.0 TuftsPackard 255.255.255.192
access-list outside_cryptomap_600 permit ip 10.x.x.0 255.255.0.0 TuftsPackard 255.255.255.192
access-list outside_cryptomap_dyn_20 permit ip any 10.x.x.0 255.255.255.192
access-list outside_cryptomap_700 permit ip 10.x.x.0 255.255.0.0 NYUIPSEC 255.255.255.0
access-list outside_cryptomap_700 permit ip 10.x.x.0 255.255.0.0 NYUIPSEC 255.255.255.0
access-list outside_cryptomap_700 permit ip 10.x.x.0 255.255.0.0 host 128.122.223.154
access-list outside_cryptomap_620 permit ip 10.x.x.0 255.255.0.0 BCPIX 255.255.255.0
access-list outside_cryptomap_620 permit ip 10.x.x.0 255.255.0.0 BCPIX 255.255.255.0
access-list outside_cryptomap_760 permit ip 10.x.x.0 255.255.0.0 UNIPIX 255.255.255.0
access-list outside_cryptomap_760 permit ip 10.x.x.0 255.255.0.0 UNIPIX 255.255.255.0
access-list outside_to_dmz permit tcp any host 64.x.x.10 eq www
access-list outside_to_dmz permit tcp any host 64.x.x.10 eq 4899
access-list outside_to_dmz permit tcp any host 64.x.x.10 eq 3389
access-list outside_cryptomap_720 permit ip 10.x.x.0 255.255.0.0 WSUPIX 255.255.255.0
access-list outside_cryptomap_720 permit ip 10.x.x.0 255.255.0.0 WSUPIX 255.255.255.0
access-list outside_cryptomap_800 permit ip 10.x.x.0 255.255.0.0 UCLA 255.255.255.0
access-list outside_cryptomap_800 permit ip 10.x.x.0 255.255.0.0 UCLA 255.255.255.0
access-list outside_cryptomap_680 permit ip 10.x.x.0 255.255.0.0 Vanderbilt 255.255.255.192
access-list outside_cryptomap_680 permit ip 10.x.x.0 255.255.0.0 Vanderbilt 255.255.255.192
access-list outside_cryptomap_940 permit ip 10.x.x.0 255.255.0.0 NIUPIX 255.255.255.0
access-list outside_cryptomap_940 permit ip 10.x.x.0 255.255.0.0 NIUPIX 255.255.255.0
access-list outside_cryptomap_740 permit ip 10.x.x.0 255.255.0.0 host UMICHIPSEC
access-list outside_cryptomap_740 permit ip 10.x.x.0 255.255.0.0 host UMICHIPSEC
access-list outside_cryptomap_920 permit ip 10.x.x.0 255.255.0.0 192.x.x.0 255.255.255.0
access-list outside_cryptomap_920 permit ip 10.x.x.0 255.255.0.0 192.x.x.0 255.255.255.0
access-list outside_cryptomap_860 permit ip 10.x.x.0 255.255.0.0 UNCCHPIX 255.255.255.0
access-list outside_cryptomap_860 permit ip 10.x.x.0 255.255.0.0 UNCCHPIX 255.255.255.0
access-list outside_cryptomap_880 permit ip 10.x.x.0 255.255.0.0 LUPIX 255.255.255.0
access-list outside_cryptomap_880 permit ip 10.x.x.0 255.255.0.0 LUPIX 255.255.255.0
access-list outside_cryptomap_840 permit ip 10.x.x.0 255.255.0.0 IDAHOPIX 255.255.255.0
access-list outside_cryptomap_840 permit ip 10.x.x.0 255.255.0.0 IDAHOPIX 255.255.255.0
access-list outside_cryptomap_1000 permit ip 10.x.x.0 255.255.0.0 GS8PIX 255.255.255.0
access-list outside_cryptomap_1000 permit ip 10.x.x.0 255.255.0.0 GS8PIX 255.255.255.0
access-list outside_cryptomap_980 permit ip 10.x.x.0 255.255.0.0 GS9PIX 255.255.255.0
access-list outside_cryptomap_980 permit ip 10.x.x.0 255.255.0.0 GS9PIX 255.255.255.0
access-list outside_cryptomap_960 permit ip 10.x.x.0 255.255.0.0 IUPIX 255.255.255.0
access-list outside_cryptomap_960 permit ip 10.x.x.0 255.255.0.0 IUPIX 255.255.255.0
access-list outside_cryptomap_dyn_40 permit ip any 10.2.54.0 255.255.255.128
access-list outside_cryptomap_1080 permit ip 10.x.x.0 255.255.0.0 psupix 255.255.255.0
access-list outside_cryptomap_1080 permit ip 10.x.x.0 255.255.0.0 psupix 255.255.255.0
access-list outside_cryptomap_1120 permit ip 10.x.x.0 255.255.0.0 host NYUAPPSRV
access-list outside_cryptomap_1120 permit ip 10.x.x.0 255.255.0.0 host NYUAPPSRV
access-list outside_cryptomap_1120 permit ip 10.x.x.0 255.255.0.0 host 128.x.x.166
access-list outside_cryptomap_1040 permit ip 10.x.x.0 255.255.0.0 host psuipsec
access-list outside_cryptomap_1040 permit ip 10.x.x.0 255.255.0.0 host psuipsec
access-list outside_cryptomap_1060 permit ip 10.x.x.0 255.255.0.0 umichpix 255.255.255.0
access-list outside_cryptomap_1060 permit ip 10.x.x.0 255.255.0.0 umichpix 255.255.255.0
access-list outside_cryptomap_1110 permit ip 10.x.x.0 255.255.0.0 host SCARIPSEC
access-list outside_cryptomap_1110 permit ip 10.x.x.0 255.255.0.0 host SCARIPSEC
access-list outside_cryptomap_1200 permit ip 10.x.x.0 255.255.0.0 UMSLPIX 255.255.255.0
access-list outside_cryptomap_1200 permit ip 10.x.x.0 255.255.0.0 UMSLPIX 255.255.255.0
access-list outside_cryptomap_1250 permit ip 10.x.x.0 255.255.0.0 UTAPIX 255.255.255.0
access-list outside_cryptomap_1250 permit ip 10.x.x.0 255.255.0.0 UTAPIX 255.255.255.0
access-list outside_cryptomap_1270 permit ip 10.x.x.0 255.255.0.0 UWOPIX 255.255.255.0
access-list outside_cryptomap_1270 permit ip 10.x.x.0 255.255.0.0 UWOPIX 255.255.255.0
access-list outside_cryptomap_1300 permit ip 10.x.x.0 255.255.0.0 SFSU 255.255.255.0
access-list outside_cryptomap_1300 permit ip 10.x.x.0 255.255.0.0 SFSU 255.255.255.0
access-list outside_cryptomap_1340 permit ip 10.x.x.0 255.255.0.0 host STANPIX
access-list outside_cryptomap_1340 permit ip 10.x.x.0 255.255.0.0 host STANPIX
access-list outside_cryptomap_1260 permit ip 10.x.x.0 255.255.0.0 SMUPIX 255.255.255.0
access-list outside_cryptomap_1260 permit ip 10.x.x.0 255.255.0.0 SMUPIX 255.255.255.0
access-list outside_cryptomap_1380 permit ip 10.x.x.0 255.255.0.0 Columbia-IPSec 255.255.255.0
access-list outside_cryptomap_1380 permit ip 10.x.x.0 255.255.0.0 Columbia-IPSec 255.255.255.0
access-list outside_cryptomap_1290 permit ip 10.x.x.0 255.255.0.0 TEMPPIX 255.255.255.0
access-list outside_cryptomap_1290 permit ip 10.x.x.0 255.255.0.0 TEMPPIX 255.255.255.0
access-list outside_cryptomap_1320 permit ip 10.x.x.0 255.255.0.0 GS5PIX 255.255.255.0
access-list outside_cryptomap_1320 permit ip 10.x.x.0 255.255.0.0 GS5PIX 255.255.255.0
access-list outside_cryptomap_1360 permit ip 10.x.x.0 255.255.0.0 OU-Stations 255.255.255.0
access-list outside_cryptomap_1360 permit ip 10.x.x.0 255.255.0.0 OU-Stations 255.255.255.0
access-list outside_cryptomap_1350 permit ip 10.x.x.0 255.255.0.0 PACE 255.255.255.0
access-list outside_cryptomap_1350 permit ip 10.x.x.0 255.255.0.0 PACE 255.255.255.0
access-list outside_cryptomap_1400 permit ip host HHS_NAT host Hamilton_Health_Sciences
access-list outside_cryptomap_1400 deny ip 10.0.0.0 255.0.0.0 host Hamilton_Health_Sciences
access-list inside-outbound_nat3_acl permit ip 10.0.0.0 255.0.0.0 host Hamilton_Health_Sciences
pager lines 24
logging buffered debugging
logging trap informational
logging host inside 10.x.x.65
logging host inside 10.x.x.235
logging host inside 10.x.x.16
mtu outside 1500
mtu inside 1500
mtu DMZ 1500
ip address outside 64.x.x.4 255.255.255.224
ip address inside 10.x.x.2 255.255.248.0
ip address DMZ 10.x.x.1 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
ip local pool vpnpool 10.x.x.2-10.x.x.64 mask 255.255.0.0
no failover
failover timeout 0:00:00
failover poll 15
no failover ip address outside
no failover ip address inside
no failover ip address DMZ
<REMOVED PDM LOCATIONS's>
pdm location HHS_NAT 255.255.255.255 inside
pdm location Hamilton_Health_Sciences 255.255.255.255 outside
<REMOVED PDM LOCATIONS's>
pdm history enable
arp timeout 14400
global (outside) 3 HHS_NAT
nat (inside) 0 access-list 102
nat (inside) 3 access-list inside-outbound_nat3_acl 0 0
static (DMZ,outside) 64.x.x.10 Webserver netmask 255.255.255.255 0 0
static (inside,DMZ) 10.x.x.0 10.x.x.0 netmask 255.255.0.0 0 0
static (inside,DMZ) 10.x.x.0 10.x.x.0 netmask 255.255.0.0 0 0
static (inside,outside) HHS_NAT HHS_NAT netmask 255.255.255.255 0 0
access-group outside_to_dmz in interface outside
route outside 0.0.0.0 0.0.0.0 64.x.x.30 1
route inside 10.x.x.0 255.255.255.0 10.x.54.215 1
route inside 10.x.x.0 255.255.255.0 10.x.x.253 1
route inside 10.x.x.0 255.255.255.0 10.x.x.253 1
route inside 10.x.x.0 255.255.255.0 10.x.x.253 1
route inside 10.x.x.0 255.255.255.0 10.x.x.253 1
route inside 10.x.x.0 255.255.255.0 10.x.x.253 1
route inside 10.x.x.0 255.255.255.0 10.x.x.253 1
route inside 10.x.x.0 255.255.255.0 10.x.x.253 1
route inside 10.x.x.0 255.255.255.0 10.x.x.230 1
route inside 10.x.x.0 255.255.255.0 10.x.x.215 1
route inside 10.x.x.0 255.255.255.0 10.x.x.215 1
route inside 10.x.x.0 255.255.255.0 10.x.x.230 1
route inside DATAWH 255.255.255.0 10.x.x.215 1
route inside 10.x.x.0 255.255.255.0 10.x.x.252 1
route inside 10.x.x.0 255.255.0.0 10.x.x.230 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout sip-disconnect 0:02:00 sip-invite 0:03:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server TACACS+ max-failed-attempts 3
aaa-server TACACS+ deadtime 10
aaa-server RADIUS protocol radius
aaa-server RADIUS max-failed-attempts 3
aaa-server RADIUS deadtime 10
aaa-server RADIUS (inside) host 10.x.x.219 letmein515e timeout 10
aaa-server LOCAL protocol local
ntp server 10.x.x.224 source inside prefer
http server enable
http 10.0.0.0 255.0.0.0 inside
snmp-server host inside 10.x.x.65
snmp-server host inside 10.x.x.224 poll
snmp-server location Cedar Rapids
no snmp-server contact
snmp-server community xxxxxxxxxx
no snmp-server enable traps
tftp-server inside 10.x.x.1 515-config
floodguard enable
sysopt connection permit-ipsec
crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto dynamic-map outside_dyn_map 20 match address outside_cryptomap_dyn_20
crypto dynamic-map outside_dyn_map 20 set transform-set ESP-DES-MD5
crypto dynamic-map outside_dyn_map 40 match address outside_cryptomap_dyn_40
crypto dynamic-map outside_dyn_map 40 set transform-set ESP-3DES-MD5
crypto map outside_map 20 ipsec-isakmp
<REMOVED CRYPTO-MAPS>
crypto map outside_map 1400 ipsec-isakmp
crypto map outside_map 1400 match address outside_cryptomap_1400
crypto map outside_map 1400 set peer 199.x.x.23
crypto map outside_map 1400 set transform-set ESP-3DES-MD5
crypto map outside_map 65535 ipsec-isakmp dynamic outside_dyn_map
crypto map outside_map client authentication RADIUS
crypto map outside_map interface outside
<REMOVED CRYPTO-MAPS>
isakmp enable outside
<REMOVED ISAKMP Key's>
isakmp key ******** address 199.212.122.23 netmask 255.255.255.255 no-xauth no-config-mode
<REMOVED ISAKMP Key's>
isakmp identity address
isakmp keepalive 10
isakmp nat-traversal 20
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption aes-256
isakmp policy 10 hash sha
isakmp policy 10 group 2
isakmp policy 10 lifetime 86400
isakmp policy 20 authentication pre-share
isakmp policy 20 encryption des
isakmp policy 20 hash md5
isakmp policy 20 group 1
isakmp policy 20 lifetime 86400
isakmp policy 40 authentication pre-share
isakmp policy 40 encryption des
isakmp policy 40 hash sha
isakmp policy 40 group 2
isakmp policy 40 lifetime 86400
isakmp policy 60 authentication pre-share
isakmp policy 60 encryption des
isakmp policy 60 hash sha
isakmp policy 60 group 1
isakmp policy 60 lifetime 86400
isakmp policy 80 authentication pre-share
isakmp policy 80 encryption des
isakmp policy 80 hash md5
isakmp policy 80 group 2
isakmp policy 80 lifetime 86400
isakmp policy 100 authentication pre-share
isakmp policy 100 encryption 3des
isakmp policy 100 hash sha
isakmp policy 100 group 2
isakmp policy 100 lifetime 86400
isakmp policy 120 authentication pre-share
isakmp policy 120 encryption 3des
isakmp policy 120 hash md5
isakmp policy 120 group 2
isakmp policy 120 lifetime 86400
isakmp policy 140 authentication pre-share
isakmp policy 140 encryption 3des
isakmp policy 140 hash md5
isakmp policy 140 group 1
isakmp policy 140 lifetime 86400
isakmp policy 180 authentication pre-share
isakmp policy 180 encryption aes-256
isakmp policy 180 hash sha
isakmp policy 180 group 5
isakmp policy 180 lifetime 86400
isakmp policy 200 authentication pre-share
isakmp policy 200 encryption aes-256
isakmp policy 200 hash md5
isakmp policy 200 group 5
isakmp policy 200 lifetime 86400
isakmp policy 220 authentication pre-share
isakmp policy 220 encryption 3des
isakmp policy 220 hash sha
isakmp policy 220 group 1
isakmp policy 220 lifetime 86400
vpngroup vpnrem address-pool vpnpool
vpngroup vpnrem dns-server 10.x.x.219
vpngroup vpnrem wins-server 10.x.x.91
vpngroup vpnrem default-domain ruffalo.int
vpngroup vpnrem idle-time 1800
vpngroup vpnrem password ********
telnet 10.x.x.0 255.0.0.0 inside
telnet 164.x.x.11 255.255.255.255 inside
telnet 164.x.x.11 255.255.255.255 DMZ
telnet timeout 10
ssh 0.0.0.0 0.0.0.0 outside
ssh 10.x.x.0 255.255.248.0 inside
ssh timeout 60
console timeout 0
terminal width 80
: end