https://community.cisco.com/t5/network-security/expanding-subnet-on-inside-interface/m-p/2419256#M308978 <P>Hello All!</P><P>I have something that I hope someone can give me a hand with. I have taken over a network with an existing ASA already configured and working perfectly. Right now the inside interface subnet is 255.255.255.0 and we would like to change it to be 255.255.254.0 so it will include 192.168.0.0 and 192.168.1.0 to&nbsp; make more addresses available on the network. Obviously I know I have to change our DHCP settings on the server and the subnet on the inside interface, but what else needs to be changed as far as ACL, NAT, etc? This ASA has multiple VPN's and it is critical to have as little downtime as possible. I am posting the current config, although I have removed any outside IP and password, etc info. If someone could please assist I would greatly appreciate it!</P><P>Thanks in advance!!!</P><P></P><P></P><P></P><P></P><P> <SPAN style="font-size: 10pt;">hostname *****</SPAN></P><P>domain-name *******.com</P><P>enable password ********* encrypted</P><P>passwd ******** encrypted</P><P>names</P><P>name 10.0.0.30 Adonis</P><P>!</P><P>interface Ethernet0/0</P><P> nameif outside</P><P> security-level 0</P><P> ip address 1.1.1.1 255.255.255.224 </P><P>!</P><P>interface Ethernet0/1</P><P> speed 100</P><P> duplex full</P><P> nameif inside</P><P> security-level 100</P><P> ip address 192.168.0.1 255.255.255.0 </P><P>!</P><P>interface Ethernet0/2</P><P> nameif dmz</P><P> security-level 50</P><P> ip address 10.0.0.1 255.255.255.0 </P><P>!</P><P>interface Ethernet0/3</P><P> shutdown</P><P> no nameif</P><P> no security-level</P><P> no ip address</P><P>!</P><P>interface Management0/0</P><P> shutdown</P><P> no nameif</P><P> no security-level</P><P> no ip address</P><P>!</P><P>boot system disk0:/asa842-18-k8.bin</P><P>ftp mode passive</P><P>clock timezone CST -6</P><P>clock summer-time CDT recurring</P><P>dns server-group DefaultDNS</P><P> domain-name *******.com</P><P>object network obj-192.168.0.0</P><P> subnet 192.168.0.0 255.255.255.0</P><P>object network obj-10.73.77.0</P><P> subnet 10.73.77.0 255.255.255.0</P><P>object network obj-192.168.51.0</P><P> subnet 192.168.51.0 255.255.255.0</P><P>object network obj-10.73.79.0</P><P> subnet 10.73.79.0 255.255.255.0</P><P>object network obj-192.168.6.0</P><P> subnet 192.168.6.0 255.255.255.0</P><P>object network obj-192.168.1.0</P><P> subnet 192.168.1.0 255.255.255.0</P><P>object network obj-192.168.50.0</P><P> subnet 192.168.50.0 255.255.255.0</P><P>object network obj-192.168.70.0</P><P> subnet 192.168.70.0 255.255.255.0</P><P>object network obj-192.168.2.0</P><P> subnet 192.168.2.0 255.255.255.0</P><P>object network obj-192.168.26.0</P><P> subnet 192.168.26.0 255.255.255.0</P><P>object network obj-10.73.95.0</P><P> subnet 10.73.95.0 255.255.255.0</P><P>object network obj-10.0.0.0</P><P> subnet 10.0.0.0 255.255.255.0</P><P>object network obj-192.168.5.0</P><P> subnet 192.168.5.0 255.255.255.0</P><P>object network obj-192.168.30.0</P><P> subnet 192.168.30.0 255.255.255.0</P><P>object network obj-10.73.90.0</P><P> subnet 10.73.90.0 255.255.255.0</P><P>object network obj-192.168.52.0</P><P> subnet 192.168.52.0 255.255.255.0</P><P>object network obj-192.168.53.0</P><P> subnet 192.168.53.0 255.255.255.0</P><P>object network obj-192.168.0.75</P><P> host 192.168.0.75</P><P>object network obj-192.168.0.132</P><P> host 192.168.0.132</P><P>object network obj-192.168.35.0</P><P> subnet 192.168.35.0 255.255.255.0</P><P>object network obj-10.73.88.0</P><P> subnet 10.73.88.0 255.255.255.0</P><P>object network obj-10.73.50.0</P><P> subnet 10.73.50.0 255.255.255.0</P><P>object network obj-192.168.82.0</P><P> subnet 192.168.82.0 255.255.255.0</P><P>object network obj-10.73.87.0</P><P> subnet 10.73.87.0 255.255.255.0</P><P>object network obj-10.73.78.0</P><P> subnet 10.73.78.0 255.255.255.0</P><P>object network obj-10.70.70.0</P><P> subnet 10.70.70.0 255.255.255.0</P><P>object network obj-10.73.80.0</P><P> subnet 10.73.80.0 255.255.255.0</P><P>object network obj-192.168.3.0</P><P> host 192.168.3.0</P><P>object network obj-192.168.4.0</P><P> host 192.168.4.0</P><P>object network obj-192.168.0.129</P><P> host 192.168.0.129</P><P>object network obj-192.168.0.5</P><P> host 192.168.0.5</P><P>object network obj_any</P><P> subnet 0.0.0.0 0.0.0.0</P><P>object network obj_any-01</P><P> subnet 0.0.0.0 0.0.0.0</P><P>object network obj-10.0.0.2</P><P> host 10.0.0.2</P><P>object network obj-10.0.0.3</P><P> host 10.0.0.3</P><P>object network obj-10.0.0.4</P><P> host 10.0.0.4</P><P>object network obj-10.0.0.10</P><P> host 10.0.0.10</P><P>object network obj-10.0.0.8</P><P> host 10.0.0.8</P><P>object network obj-10.0.0.11</P><P> host 10.0.0.11</P><P>object network Adonis</P><P> host 10.0.0.30</P><P>object network obj-10.0.0.15</P><P> host 10.0.0.15</P><P>object network obj-10.73.85.0</P><P> subnet 10.73.85.0 255.255.255.0</P><P>object network obj-192.168.20.0</P><P> subnet 192.168.20.0 255.255.255.0</P><P>object network obj-192.168.22.0</P><P> subnet 192.168.22.0 255.255.255.0</P><P>object network obj-192.168.27.0</P><P> subnet 192.168.27.0 255.255.255.0</P><P>object network obj-192.168.28.0</P><P> subnet 192.168.28.0 255.255.255.0</P><P>object network Controller1</P><P> host 192.168.0.136</P><P> description Controller1 VM</P><P>object network Controller2</P><P> host 192.168.0.253</P><P> description Controller2 VM</P><P>object-group network KIMCAM_VPN_REMOTE</P><P> network-object 192.168.5.0 255.255.255.0</P><P>object-group network KIMCAM_VPN_LOCAL</P><P> network-object 192.168.0.0 255.255.255.0</P><P> network-object 10.0.0.0 255.255.255.0</P><P>object-group network PIX506_VPN_REMOTE</P><P> network-object 10.73.87.0 255.255.255.0</P><P>object-group network PIX506_VPN_LOCAL</P><P> network-object 192.168.0.0 255.255.255.0</P><P> network-object 10.0.0.0 255.255.255.0</P><P>object-group network CONVEN_VPN_REMOTE</P><P> network-object 10.73.88.0 255.255.255.0</P><P>object-group network CONVEN_VPN_LOCAL</P><P> network-object 192.168.0.0 255.255.255.0</P><P> network-object 10.0.0.0 255.255.255.0</P><P>object-group network Controller</P><P> description Controller machines</P><P> network-object object Controller1</P><P> network-object object Controller2</P><P>object-group service Internet</P><P> description Internet Services 80/443</P><P> service-object tcp destination eq www </P><P> service-object tcp destination eq https </P><P>access-list dmzintf extended permit ip host 10.0.0.2 any </P><P>access-list dmzintf extended permit ip host **** any </P><P>access-list dmzintf extended permit ip host 10.0.0.3 any </P><P>access-list dmzintf extended permit ip host **** any </P><P>access-list dmzintf extended permit tcp host 10.0.0.2 eq 1433 any </P><P>access-list dmzintf extended permit tcp host 10.0.0.3 host 192.168.0.2 eq 137 </P><P>access-list dmzintf extended permit tcp host 10.0.0.3 host 192.168.0.2 eq 138 </P><P>access-list dmzintf extended permit tcp host 10.0.0.3 host 192.168.0.2 eq netbios-ssn </P><P>access-list dmzintf extended permit udp host 10.0.0.3 host 192.168.0.2 eq netbios-ns </P><P>access-list dmzintf extended permit udp host 10.0.0.3 host 192.168.0.2 eq netbios-dgm </P><P>access-list dmzintf extended permit udp host 10.0.0.3 host 192.168.0.2 eq 139 </P><P>access-list dmzintf extended permit ip host 10.0.0.4 any </P><P>access-list dmzintf extended permit ip host **** any </P><P>access-list dmzintf extended permit ip host 10.0.0.6 any </P><P>access-list dmzintf extended permit ip host 10.0.0.7 any </P><P>access-list dmzintf extended permit ip host 10.0.0.8 any </P><P>access-list dmzintf extended permit ip host 10.0.0.9 any </P><P>access-list dmzintf extended permit ip host 10.0.0.10 any </P><P>access-list dmzintf extended permit ip host 10.0.0.11 any </P><P>access-list dmzintf extended permit ip host 10.0.0.21 any </P><P>access-list dmzintf extended permit ip host 10.0.0.12 any </P><P>access-list dmzintf extended permit ip host 10.0.0.22 any </P><P>access-list dmzintf extended permit ip host 10.0.0.25 any </P><P>access-list dmzintf extended permit tcp host 10.0.0.7 host 10.73.95.36 eq sqlnet </P><P>access-list dmzintf extended permit tcp object Adonis any eq domain </P><P>access-list dmzintf extended permit udp object Adonis any eq domain </P><P>access-list dmzintf extended permit ip object Adonis host 10.73.95.16 </P><P>access-list dmzintf extended permit tcp host 10.0.0.15 host 192.168.0.121 eq domain </P><P>access-list dmzintf extended permit udp host 10.0.0.15 host 192.168.0.121 eq domain </P><P>access-list dmzintf extended permit udp host 10.0.0.15 host 192.168.0.120 eq domain </P><P>access-list dmzintf extended permit tcp host 10.0.0.15 host 192.168.0.120 eq domain </P><P>access-list dmzintf extended permit tcp host 10.0.0.15 any eq www </P><P>access-list dmzintf extended permit tcp host 10.0.0.15 any eq https </P><P>access-list dmzintf extended permit udp object Adonis any eq ntp </P><P>access-list tango extended permit ip 192.168.0.0 255.255.255.0 10.73.77.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.0.0 255.255.255.0 10.73.95.0 255.255.255.0 </P><P>access-list tango extended permit ip 10.0.0.0 255.255.255.0 10.73.95.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.26.0 255.255.255.0 10.73.95.0 255.255.255.0 </P><P>access-list tango extended permit ip 10.0.0.0 255.255.255.0 10.73.77.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.30.0 255.255.255.0 10.73.77.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.30.0 255.255.255.0 10.73.95.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.0.0 255.255.255.0 10.73.90.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.26.0 255.255.255.0 10.73.77.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.0.0 255.255.255.0 10.73.50.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.26.0 255.255.255.0 10.73.50.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.30.0 255.255.255.0 10.73.50.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.0.0 255.255.255.0 10.73.78.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.0.0 255.255.255.0 10.70.70.0 255.255.255.0 </P><P>access-list tango extended permit ip 10.0.0.0 255.255.255.0 10.73.78.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.0.0 255.255.255.0 10.73.80.0 255.255.255.0 </P><P>access-list tango extended permit ip 10.0.0.0 255.255.255.0 10.73.80.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.26.0 255.255.255.0 10.73.80.0 255.255.255.0 </P><P>access-list karen extended permit ip 192.168.0.0 255.255.255.0 192.168.2.0 255.255.255.0 </P><P>access-list karen extended permit ip 10.0.0.0 255.255.255.0 192.168.2.0 255.255.255.0 </P><P>access-list walker extended permit ip 192.168.2.0 255.255.255.0 10.73.79.0 255.255.255.0 </P><P>access-list walker extended permit ip 10.0.0.0 255.255.255.0 10.73.79.0 255.255.255.0 </P><P>access-list walker extended permit ip 192.168.0.0 255.255.255.0 10.73.79.0 255.255.255.0 </P><P>access-list walker extended permit ip 192.168.26.0 255.255.255.0 10.73.79.0 255.255.255.0 </P><P>access-list walker extended permit ip 192.168.30.0 255.255.255.0 10.73.79.0 255.255.255.0 </P><P>access-list beverly extended permit ip 192.168.0.0 255.255.255.0 192.168.6.0 255.255.255.0 </P><P>access-list beverly extended permit ip 10.0.0.0 255.255.255.0 192.168.6.0 255.255.255.0 </P><P>access-list hooper extended permit ip 192.168.0.0 255.255.255.0 192.168.1.0 255.255.255.0 </P><P>access-list hooper extended permit ip 10.0.0.0 255.255.255.0 192.168.1.0 255.255.255.0 </P><P>access-list hooper extended permit ip 192.168.30.0 255.255.255.0 192.168.1.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 10.73.77.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.51.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 10.73.79.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.6.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.1.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.50.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.70.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.2.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.26.0 255.255.255.0 10.73.79.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 10.73.95.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.26.0 255.255.255.0 10.73.95.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.5.0 255.255.255.0 </P><P>access-list 110 extended permit ip 10.0.0.0 255.255.255.0 192.168.5.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.30.0 255.255.255.0 10.73.77.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.30.0 255.255.255.0 192.168.1.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.30.0 255.255.255.0 10.73.95.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 10.73.90.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.30.0 255.255.255.0 10.73.79.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.26.0 255.255.255.0 192.168.52.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.52.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.30.0 255.255.255.0 192.168.52.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.30.0 255.255.255.0 192.168.53.0 255.255.255.0 </P><P>access-list 110 extended permit ip host 192.168.0.75 192.168.53.0 255.255.255.0 </P><P>access-list 110 extended permit ip host 192.168.0.132 192.168.53.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.35.0 255.255.255.0 </P><P>access-list 110 extended permit ip 10.0.0.0 255.255.255.0 192.168.35.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.26.0 255.255.255.0 10.73.77.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.26.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 10.73.88.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 10.73.50.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.26.0 255.255.255.0 10.73.50.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.30.0 255.255.255.0 10.73.50.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.82.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 10.73.87.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 10.73.78.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 10.70.70.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 10.73.80.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.26.0 255.255.255.0 10.73.80.0 255.255.255.0 </P><P>access-list 110 extended permit ip 10.0.0.0 255.255.255.0 10.73.95.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 10.73.77.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 192.168.2.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 192.168.3.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 192.168.51.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 10.73.79.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 192.168.6.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 192.168.1.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 192.168.50.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 192.168.70.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 10.73.95.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 192.168.5.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 192.168.52.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 192.168.35.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 10.73.88.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 10.73.87.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 10.73.78.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 10.73.80.0 255.255.255.0 </P><P>access-list 120 extended permit ip 10.0.0.0 255.255.255.0 192.168.50.0 255.255.255.0 </P><P>access-list 120 extended permit ip 192.168.26.0 255.255.255.0 192.168.50.0 255.255.255.0 </P><P>access-list 120 extended permit ip 192.168.0.0 255.255.255.0 192.168.50.0 255.255.255.0 </P><P>access-list pix2pix extended permit ip 192.168.0.0 255.255.255.0 192.168.70.0 255.255.255.0 </P><P>access-list pix2pix extended permit ip 10.0.0.0 255.255.255.0 192.168.70.0 255.255.255.0 </P><P>access-list pix2pix extended permit ip 192.168.0.0 255.255.255.0 192.168.5.0 255.255.255.0 </P><P>access-list pix2pix extended permit ip 10.0.0.0 255.255.255.0 192.168.5.0 255.255.255.0 </P><P>access-list pix2pix extended permit ip 192.168.0.0 255.255.255.0 192.168.35.0 255.255.255.0 </P><P>access-list pix2pix extended permit ip 10.0.0.0 255.255.255.0 192.168.35.0 255.255.255.0 </P><P>access-list pix2pix extended permit ip 192.168.0.0 255.255.255.0 10.73.88.0 255.255.255.0 </P><P>access-list pix2pix extended permit ip 10.0.0.0 255.255.255.0 10.73.88.0 255.255.255.0 </P><P>access-list 121 extended permit ip 192.168.0.0 255.255.255.0 192.168.52.0 255.255.255.0 </P><P>access-list 121 extended permit ip 192.168.26.0 255.255.255.0 192.168.52.0 255.255.255.0 </P><P>access-list 121 extended permit ip 192.168.30.0 255.255.255.0 192.168.52.0 255.255.255.0 </P><P>access-list 121 extended permit ip 10.0.0.0 255.255.255.0 192.168.52.0 255.255.255.0 </P><P>access-list 122 extended permit ip 192.168.0.0 255.255.255.0 192.168.53.0 255.255.255.0 </P><P>access-list 122 extended permit ip 192.168.30.0 255.255.255.0 192.168.53.0 255.255.255.0 </P><P>access-list DYNVPN extended permit ip object-group KIMCAM_VPN_LOCAL object-group KIMCAM_VPN_REMOTE </P><P>access-list DYNVPN extended permit ip any 192.168.50.0 255.255.255.0 </P><P>access-list DYNVPN extended permit ip object-group PIX506_VPN_LOCAL object-group PIX506_VPN_REMOTE </P><P>access-list DYNVPN extended permit ip object-group CONVEN_VPN_LOCAL object-group CONVEN_VPN_REMOTE </P><P>access-list outsideif extended permit tcp any host 10.0.0.3 eq www </P><P>access-list outsideif extended permit tcp any host 10.0.0.3 eq https </P><P>access-list outsideif extended permit udp any host 10.0.0.3 eq domain </P><P>access-list outsideif extended permit tcp any host 10.0.0.3 eq 7877 </P><P>access-list outsideif extended permit tcp any host 10.0.0.3 eq 7777 </P><P>access-list outsideif extended permit tcp any host 10.0.0.3 eq 2121 </P><P>access-list outsideif extended permit tcp any host 10.0.0.3 eq 1755 </P><P>access-list outsideif extended permit udp any host 10.0.0.3 eq 1755 </P><P>access-list outsideif extended permit udp any host 10.0.0.3 eq 5005 </P><P>access-list outsideif extended permit tcp any host 10.0.0.3 eq rtsp </P><P>access-list outsideif extended permit tcp any host 10.0.0.4 eq www </P><P>access-list outsideif extended permit ip host ***** host 192.168.0.75 </P><P>access-list outsideif extended permit ip host ***** host 192.168.0.75 </P><P>access-list outsideif extended permit tcp any host 10.0.0.10 eq www </P><P>access-list outsideif extended permit tcp any host 10.0.0.10 eq 1755 </P><P>access-list outsideif extended permit udp any host 10.0.0.10 eq 1755 </P><P>access-list outsideif extended permit udp any host 10.0.0.10 eq 5005 </P><P>access-list outsideif extended permit tcp any host 10.0.0.10 eq rtsp </P><P>access-list outsideif extended permit tcp any host 10.0.0.10 eq https </P><P>access-list outsideif extended permit udp any host 10.0.0.10 eq domain </P><P>access-list outsideif extended permit tcp any host 10.0.0.10 eq 7877 </P><P>access-list outsideif extended permit tcp any host 10.0.0.10 eq 7777 </P><P>access-list outsideif extended permit tcp any host 10.0.0.10 eq 2121 </P><P>access-list outsideif extended permit tcp host **** host 192.168.0.75 </P><P>access-list outsideif extended permit tcp host **** any eq 161 </P><P>access-list outsideif extended permit tcp host **** any eq 162 </P><P>access-list outsideif extended permit udp host **** any eq snmp </P><P>access-list outsideif extended permit udp host **** any eq snmptrap </P><P>access-list outsideif extended permit tcp any host 10.0.0.8 eq https </P><P>access-list outsideif extended permit tcp any host 10.0.0.8 eq www </P><P>access-list outsideif extended permit tcp any host 10.0.0.11 eq 1755 </P><P>access-list outsideif extended permit udp any host 10.0.0.11 eq 1755 </P><P>access-list outsideif extended permit udp any host 10.0.0.11 eq 5005 </P><P>access-list outsideif extended permit tcp any host 10.0.0.11 eq rtsp </P><P>access-list outsideif extended permit tcp any host 10.0.0.11 eq www </P><P>access-list outsideif extended permit tcp any host 10.0.0.11 eq https </P><P>access-list outsideif extended permit tcp host **** host **** eq 3389 </P><P>access-list outsideif extended permit tcp host **** host **** eq 3389 </P><P>access-list outsideif extended permit tcp any host 192.168.0.129 eq smtp </P><P>access-list outsideif extended permit tcp any host 192.168.0.129 eq https </P><P>access-list outsideif extended permit tcp any host 192.168.0.129 eq www </P><P>access-list outsideif extended permit tcp any host 192.168.0.129 eq pop3 </P><P>access-list outsideif extended permit tcp host **** host 192.168.0.129 eq 3389 </P><P>access-list outsideif extended permit tcp any host **** eq https </P><P>access-list outsideif extended permit udp any object Adonis eq domain </P><P>access-list outsideif extended permit tcp any object Adonis eq domain </P><P>access-list outsideif extended permit tcp any host 192.168.0.132 eq www </P><P>access-list outsideif extended permit tcp any host 192.168.0.132 eq https </P><P>access-list outsideif extended permit tcp any host 192.168.0.5 eq pop3 </P><P>access-list outsideif extended permit tcp any host 192.168.0.5 eq www </P><P>access-list outsideif extended permit tcp any host 192.168.0.5 eq https </P><P>access-list outsideif extended permit icmp host **** any </P><P>access-list outsideif extended permit ip host **** host 192.168.0.132 </P><P>access-list outsideif extended permit tcp any host 10.0.0.15 eq www </P><P>access-list outsideif extended permit tcp any host 10.0.0.15 eq https </P><P>access-list outsideif extended permit tcp any host 192.168.0.5 eq 995 </P><P>access-list outsideif extended permit tcp any host 192.168.0.5 eq 587 </P><P>access-list outsideif extended permit tcp host **** host 72.159.96.162 eq ssh </P><P>access-list outsideif extended permit tcp host **** host 72.159.96.162 eq ssh </P><P>access-list outsideif extended permit icmp any any </P><P>pager lines 24</P><P>logging enable</P><P>logging timestamp</P><P>logging trap warnings</P><P>logging history warnings</P><P>logging asdm informational</P><P>logging host inside 192.168.0.2</P><P>logging host inside 10.73.95.70</P><P>mtu outside 1500</P><P>mtu inside 1500</P><P>mtu dmz 1500</P><P>ip local pool vpn3000-pool 192.168.50.180-192.168.50.209</P><P>ip local pool vpn3001-pool 192.168.52.180-192.168.52.190</P><P>ip local pool vpn3002-pool 192.168.53.180-192.168.53.185</P><P>ip local pool sp-software 192.168.50.140-192.168.50.179</P><P>icmp unreachable rate-limit 1 burst-size 1</P><P>icmp permit host **** outside</P><P>icmp permit host **** outside</P><P>asdm image disk0:/asdm-645-206.bin</P><P>asdm history enable</P><P>arp timeout 14400</P><P>nat (inside,outside) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.77.0 obj-10.73.77.0 no-proxy-arp route-lookup</P><P>nat (inside,outside) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.5.0 obj-192.168.5.0 no-proxy-arp route-lookup</P><P>nat (inside,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.5.0 obj-192.168.5.0 no-proxy-arp route-lookup</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.77.0 obj-10.73.77.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.51.0 obj-192.168.51.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.79.0 obj-10.73.79.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.6.0 obj-192.168.6.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.1.0 obj-192.168.1.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.50.0 obj-192.168.50.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.70.0 obj-192.168.70.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.2.0 obj-192.168.2.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.26.0 obj-192.168.26.0 destination static obj-10.73.79.0 obj-10.73.79.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.95.0 obj-10.73.95.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.26.0 obj-192.168.26.0 destination static obj-10.73.95.0 obj-10.73.95.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.30.0 obj-192.168.30.0 destination static obj-10.73.77.0 obj-10.73.77.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.30.0 obj-192.168.30.0 destination static obj-192.168.1.0 obj-192.168.1.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.30.0 obj-192.168.30.0 destination static obj-10.73.95.0 obj-10.73.95.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.90.0 obj-10.73.90.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.30.0 obj-192.168.30.0 destination static obj-10.73.79.0 obj-10.73.79.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.26.0 obj-192.168.26.0 destination static obj-192.168.52.0 obj-192.168.52.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.52.0 obj-192.168.52.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.30.0 obj-192.168.30.0 destination static obj-192.168.52.0 obj-192.168.52.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.30.0 obj-192.168.30.0 destination static obj-192.168.53.0 obj-192.168.53.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.75 obj-192.168.0.75 destination static obj-192.168.53.0 obj-192.168.53.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.132 obj-192.168.0.132 destination static obj-192.168.53.0 obj-192.168.53.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.35.0 obj-192.168.35.0 no-proxy-arp</P><P>nat (inside,any) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.35.0 obj-192.168.35.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.26.0 obj-192.168.26.0 destination static obj-10.73.77.0 obj-10.73.77.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.26.0 obj-192.168.26.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.88.0 obj-10.73.88.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.50.0 obj-10.73.50.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.26.0 obj-192.168.26.0 destination static obj-10.73.50.0 obj-10.73.50.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.30.0 obj-192.168.30.0 destination static obj-10.73.50.0 obj-10.73.50.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.82.0 obj-192.168.82.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.87.0 obj-10.73.87.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.78.0 obj-10.73.78.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.70.70.0 obj-10.70.70.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.80.0 obj-10.73.80.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.26.0 obj-192.168.26.0 destination static obj-10.73.80.0 obj-10.73.80.0 no-proxy-arp</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-10.73.77.0 obj-10.73.77.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.2.0 obj-192.168.2.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.3.0 obj-192.168.3.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.51.0 obj-192.168.51.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-10.73.79.0 obj-10.73.79.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.6.0 obj-192.168.6.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.1.0 obj-192.168.1.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.50.0 obj-192.168.50.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.70.0 obj-192.168.70.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-10.73.95.0 obj-10.73.95.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.5.0 obj-192.168.5.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.52.0 obj-192.168.52.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.35.0 obj-192.168.35.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-10.73.88.0 obj-10.73.88.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-10.73.87.0 obj-10.73.87.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-10.73.78.0 obj-10.73.78.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-10.73.80.0 obj-10.73.80.0 no-proxy-arp route-lookup</P><P>nat (inside,outside) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.85.0 obj-10.73.85.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-10.73.85.0 obj-10.73.85.0 no-proxy-arp route-lookup</P><P>nat (inside,outside) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.20.0 obj-192.168.20.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.20.0 obj-192.168.20.0 no-proxy-arp route-lookup</P><P>nat (inside,outside) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.22.0 obj-192.168.22.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.22.0 obj-192.168.22.0 no-proxy-arp route-lookup</P><P>nat (inside,outside) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.27.0 obj-192.168.27.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.27.0 obj-192.168.27.0 no-proxy-arp route-lookup</P><P>nat (inside,outside) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.28.0 obj-192.168.28.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.28.0 obj-192.168.28.0 no-proxy-arp route-lookup</P><P>!</P><P>object network obj-192.168.0.0</P><P> nat (inside,dmz) static 192.168.0.0 no-proxy-arp route-lookup</P><P>object network obj-10.73.77.0</P><P> nat (inside,dmz) static 10.73.77.0 no-proxy-arp route-lookup</P><P>object network obj-192.168.1.0</P><P> nat (inside,dmz) static 192.168.1.0 no-proxy-arp route-lookup</P><P>object network obj-192.168.2.0</P><P> nat (inside,dmz) static 192.168.2.0 no-proxy-arp route-lookup</P><P>object network obj-10.0.0.0</P><P> nat (inside,dmz) static 10.0.0.0 no-proxy-arp route-lookup</P><P>object network obj-192.168.5.0</P><P> nat (inside,dmz) static 192.168.5.0 no-proxy-arp route-lookup</P><P>object network obj-192.168.0.75</P><P> nat (inside,outside) static 1.1.1.1</P><P>object network obj-192.168.0.132</P><P> nat (inside,outside) static 1.1.1.1</P><P>object network obj-192.168.3.0</P><P> nat (inside,dmz) static 192.168.3.0 no-proxy-arp route-lookup</P><P>object network obj-192.168.4.0</P><P> nat (inside,dmz) static 192.168.4.0 no-proxy-arp route-lookup</P><P>object network obj-192.168.0.129</P><P> nat (inside,outside) static 1.1.1.1</P><P>object network obj-192.168.0.5</P><P> nat (inside,outside) static 1.1.1.1</P><P>object network obj_any</P><P> nat (inside,outside) dynamic interface</P><P>object network obj_any-01</P><P> nat (dmz,outside) dynamic interface</P><P>object network obj-10.0.0.2</P><P> nat (dmz,outside) static 1.1.1.1</P><P>object network obj-10.0.0.3</P><P> nat (dmz,outside) static 1.1.1.1</P><P>object network obj-10.0.0.4</P><P> nat (dmz,outside) static 1.1.1.1</P><P>object network obj-10.0.0.10</P><P> nat (dmz,outside) static 1.1.1.1</P><P>object network obj-10.0.0.8</P><P> nat (dmz,outside) static 1.1.1.1</P><P>object network obj-10.0.0.11</P><P> nat (dmz,outside) static 1.1.1.1</P><P>object network Adonis</P><P> nat (dmz,outside) static 1.1.1.1</P><P>object network obj-10.0.0.15</P><P> nat (dmz,outside) static 1.1.1.1</P><P>access-group outsideif in interface outside</P><P>access-group dmzintf in interface dmz</P><P>route outside 0.0.0.0 0.0.0.0 *.*.*.* 1</P><P>route inside 192.168.26.0 255.255.255.0 192.168.0.9 1</P><P>route inside 192.168.30.0 255.255.255.0 192.168.0.8 1</P><P>timeout xlate 3:00:00</P><P>timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02</P><P>timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00</P><P>timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00</P><P>timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute</P><P>timeout tcp-proxy-reassembly 0:01:00</P><P>timeout floating-conn 0:00:00</P><P>dynamic-access-policy-record DfltAccessPolicy</P><P>aaa-server TACACS+ protocol tacacs+</P><P>aaa-server TACACS+ (inside) host 10.73.95.70</P><P> timeout 8</P><P> key *******</P><P>aaa-server TACACS+ (outside) host </P><P> timeout 8</P><P> key *******</P><P>aaa-server RADIUS protocol radius</P><P>aaa-server RADIUS_Auth protocol radius</P><P>aaa-server RADIUS_Auth (inside) host 192.168.0.7</P><P> key ****</P><P> authentication-port 1812</P><P> accounting-port 1813</P><P>user-identity default-domain LOCAL</P><P>aaa authentication ssh console TACACS+ </P><P>aaa authentication http console TACACS+ </P><P>http server enable</P><P>http 192.168.0.0 255.255.255.0 inside</P><P>http 10.73.77.0 255.255.255.0 inside</P><P>snmp-server host inside 10.73.77.106 </P><P>snmp-server host outside **** poll </P><P>no snmp-server location</P><P>no snmp-server contact</P><P>snmp-server community public</P><P>snmp-server enable traps snmp authentication linkup linkdown coldstart</P><P>snmp-server enable traps syslog</P><P>crypto ipsec ikev1 transform-set myset esp-des esp-md5-hmac </P><P>crypto dynamic-map dynmap 20 set ikev1 transform-set myset</P><P>crypto dynamic-map dynmap 30 match address DYNVPN</P><P>crypto dynamic-map dynmap 30 set ikev1 transform-set myset</P><P>crypto map mymap 5 match address tango</P><P>crypto map mymap 5 set peer **** </P><P>crypto map mymap 5 set ikev1 transform-set myset</P><P>crypto map mymap 5 set security-association lifetime seconds 28800</P><P>crypto map mymap 5 set security-association lifetime kilobytes 4608000</P><P>crypto map mymap 6 match address karen</P><P>crypto map mymap 6 set peer ****</P><P>crypto map mymap 6 set ikev1 transform-set myset</P><P>crypto map mymap 6 set security-association lifetime seconds 28800</P><P>crypto map mymap 6 set security-association lifetime kilobytes 4608000</P><P>crypto map mymap 9 match address walker</P><P>crypto map mymap 9 set peer **** </P><P>crypto map mymap 9 set ikev1 transform-set myset</P><P>crypto map mymap 9 set security-association lifetime seconds 28800</P><P>crypto map mymap 9 set security-association lifetime kilobytes 4608000</P><P>crypto map mymap 12 match address hooper</P><P>crypto map mymap 12 set peer ****</P><P>crypto map mymap 12 set ikev1 transform-set myset</P><P>crypto map mymap 12 set security-association lifetime seconds 28800</P><P>crypto map mymap 12 set security-association lifetime kilobytes 4608000</P><P>crypto map mymap 15 match address beverly</P><P>crypto map mymap 15 set peer ****</P><P>crypto map mymap 15 set ikev1 transform-set myset</P><P>crypto map mymap 15 set security-association lifetime seconds 28800</P><P>crypto map mymap 15 set security-association lifetime kilobytes 4608000</P><P>crypto map mymap 100 ipsec-isakmp dynamic dynmap</P><P>crypto map mymap interface outside</P><P>crypto ca trustpoint _SmartCallHome_ServerCA</P><P> crl configure</P><P>crypto ca certificate chain _SmartCallHome_ServerCA</P><P>crypto isakmp identity address </P><P>crypto isakmp nat-traversal 60</P><P>crypto ikev1 enable outside</P><P>crypto ikev1 policy 10</P><P> authentication pre-share</P><P> encryption des</P><P> hash md5</P><P> group 2</P><P> lifetime 86400</P><P>crypto ikev1 policy 20</P><P> authentication pre-share</P><P> encryption des</P><P> hash md5</P><P> group 1</P><P> lifetime 86400</P><P>crypto ikev1 policy 65535</P><P> authentication pre-share</P><P> encryption 3des</P><P> hash sha</P><P> group 2</P><P> lifetime 86400</P><P>console timeout 0</P><P>management-access inside</P><P>threat-detection basic-threat</P><P>threat-detection statistics access-list</P><P>no threat-detection statistics tcp-intercept</P><P>webvpn</P><P>group-policy sp-remote internal</P><P>group-policy sp-remote attributes</P><P> wins-server value 192.168.0.2</P><P> dns-server value 192.168.0.121 192.168.0.120</P><P> vpn-idle-timeout 30</P><P> split-tunnel-policy tunnelspecified</P><P> split-tunnel-network-list value 120</P><P> default-domain value *******.com</P><P>group-policy sp-software internal</P><P>group-policy sp-software attributes</P><P> wins-server value 192.168.0.2</P><P> dns-server value 192.168.0.121 192.168.0.120</P><P> vpn-idle-timeout 30</P><P> split-tunnel-policy tunnelspecified</P><P> split-tunnel-network-list value 120</P><P> default-domain value *******.com</P><P>group-policy vpn3002 internal</P><P>group-policy vpn3002 attributes</P><P> wins-server value 192.168.0.2</P><P> dns-server value 192.168.0.121 192.168.0.120</P><P> vpn-idle-timeout 2</P><P> split-tunnel-policy tunnelspecified</P><P> split-tunnel-network-list value 122</P><P> default-domain value *******.com</P><P>group-policy vpn3000 internal</P><P>group-policy vpn3000 attributes</P><P> wins-server value 192.168.0.2</P><P> dns-server value 192.168.0.121 192.168.0.120</P><P> vpn-idle-timeout 30</P><P> split-tunnel-policy tunnelspecified</P><P> split-tunnel-network-list value 120</P><P> default-domain value *******.com</P><P>group-policy vpn3001 internal</P><P>group-policy vpn3001 attributes</P><P> wins-server value 192.168.0.2</P><P> dns-server value 192.168.0.121 192.168.0.120</P><P> vpn-idle-timeout 30</P><P> split-tunnel-policy tunnelspecified</P><P> split-tunnel-network-list value 121</P><P> default-domain value *******.com</P><P>group-policy pix2pix internal</P><P>group-policy pix2pix attributes</P><P> wins-server value 192.168.0.2</P><P> dns-server value 192.168.0.121 192.168.0.120</P><P> vpn-idle-timeout 30</P><P> vpn-tunnel-protocol ikev1 l2tp-ipsec </P><P> split-tunnel-policy tunnelspecified</P><P> split-tunnel-network-list value pix2pix</P><P> default-domain value *******.com</P><P> nem enable</P><P>username admin password ***** encrypted privilege 15</P><P>tunnel-group DefaultL2LGroup ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group DefaultRAGroup general-attributes</P><P> authentication-server-group (outside) RADIUS_Auth</P><P>tunnel-group DefaultRAGroup ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group 1.1.1.1 type ipsec-l2l</P><P>tunnel-group 1.1.1.1 ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group 1.1.1.1&nbsp; type ipsec-l2l</P><P>tunnel-group 1.1.1.1&nbsp; ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group 1.1.1.1&nbsp; type ipsec-l2l</P><P>tunnel-group 1.1.1.1&nbsp; ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group 1.1.1.1&nbsp; type ipsec-l2l</P><P>tunnel-group 1.1.1.1&nbsp; ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group 1.1.1.1&nbsp; type ipsec-l2l</P><P>tunnel-group 1.1.1.1&nbsp; ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group 1.1.1.1&nbsp; type ipsec-l2l</P><P>tunnel-group 1.1.1.1&nbsp; ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group 1.1.1.1&nbsp; type ipsec-l2l</P><P>tunnel-group 1.1.1.1&nbsp; ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group vpn3000 type remote-access</P><P>tunnel-group vpn3000 general-attributes</P><P> address-pool vpn3000-pool</P><P> authentication-server-group (outside) RADIUS_Auth</P><P> default-group-policy vpn3000</P><P>tunnel-group vpn3000 ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group pix2pix type remote-access</P><P>tunnel-group pix2pix general-attributes</P><P> authentication-server-group (outside) RADIUS_Auth</P><P> default-group-policy pix2pix</P><P>tunnel-group pix2pix ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group vpn3001 type remote-access</P><P>tunnel-group vpn3001 general-attributes</P><P> address-pool vpn3001-pool</P><P> authentication-server-group (outside) RADIUS_Auth</P><P> default-group-policy vpn3001</P><P>tunnel-group vpn3001 ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group vpn3002 type remote-access</P><P>tunnel-group vpn3002 general-attributes</P><P> address-pool vpn3002-pool</P><P> authentication-server-group (outside) RADIUS_Auth</P><P> default-group-policy vpn3002</P><P>tunnel-group vpn3002 ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group sp-remote type remote-access</P><P>tunnel-group sp-remote general-attributes</P><P> address-pool vpn3000-pool</P><P> authentication-server-group (outside) RADIUS_Auth</P><P> default-group-policy sp-remote</P><P>tunnel-group sp-remote ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group sp-software type remote-access</P><P>tunnel-group sp-software general-attributes</P><P> address-pool sp-software</P><P> authentication-server-group (outside) RADIUS_Auth</P><P> default-group-policy sp-software</P><P>tunnel-group sp-software ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>!</P><P>class-map inspection_default</P><P> match default-inspection-traffic</P><P>!</P><P>!</P><P>policy-map type inspect dns preset_dns_map</P><P> parameters</P><P>&nbsp; message-length maximum 512</P><P>policy-map global_policy</P><P> class inspection_default</P><P>&nbsp; inspect dns preset_dns_map </P><P>&nbsp; inspect ftp </P><P>&nbsp; inspect h323 h225 </P><P>&nbsp; inspect h323 ras </P><P>&nbsp; inspect http </P><P>&nbsp; inspect rsh </P><P>&nbsp; inspect rtsp </P><P>&nbsp; inspect skinny&nbsp; </P><P>&nbsp; inspect sqlnet </P><P>&nbsp; inspect tftp </P><P>&nbsp; inspect ip-options </P><P>!</P><P>service-policy global_policy global</P><P>prompt hostname context </P><P>call-home reporting anonymous</P><P>call-home</P><P> profile CiscoTAC-1</P><P>&nbsp; no active</P> Tue, 12 Mar 2019 03:04:45 GMT djl7780 2019-03-12T03:04:45Z https://community.cisco.com/t5/network-security/expanding-subnet-on-inside-interface/m-p/2419256#M308978 <P>Hello All!</P><P>I have something that I hope someone can give me a hand with. I have taken over a network with an existing ASA already configured and working perfectly. Right now the inside interface subnet is 255.255.255.0 and we would like to change it to be 255.255.254.0 so it will include 192.168.0.0 and 192.168.1.0 to&nbsp; make more addresses available on the network. Obviously I know I have to change our DHCP settings on the server and the subnet on the inside interface, but what else needs to be changed as far as ACL, NAT, etc? This ASA has multiple VPN's and it is critical to have as little downtime as possible. I am posting the current config, although I have removed any outside IP and password, etc info. If someone could please assist I would greatly appreciate it!</P><P>Thanks in advance!!!</P><P></P><P></P><P></P><P></P><P> <SPAN style="font-size: 10pt;">hostname *****</SPAN></P><P>domain-name *******.com</P><P>enable password ********* encrypted</P><P>passwd ******** encrypted</P><P>names</P><P>name 10.0.0.30 Adonis</P><P>!</P><P>interface Ethernet0/0</P><P> nameif outside</P><P> security-level 0</P><P> ip address 1.1.1.1 255.255.255.224 </P><P>!</P><P>interface Ethernet0/1</P><P> speed 100</P><P> duplex full</P><P> nameif inside</P><P> security-level 100</P><P> ip address 192.168.0.1 255.255.255.0 </P><P>!</P><P>interface Ethernet0/2</P><P> nameif dmz</P><P> security-level 50</P><P> ip address 10.0.0.1 255.255.255.0 </P><P>!</P><P>interface Ethernet0/3</P><P> shutdown</P><P> no nameif</P><P> no security-level</P><P> no ip address</P><P>!</P><P>interface Management0/0</P><P> shutdown</P><P> no nameif</P><P> no security-level</P><P> no ip address</P><P>!</P><P>boot system disk0:/asa842-18-k8.bin</P><P>ftp mode passive</P><P>clock timezone CST -6</P><P>clock summer-time CDT recurring</P><P>dns server-group DefaultDNS</P><P> domain-name *******.com</P><P>object network obj-192.168.0.0</P><P> subnet 192.168.0.0 255.255.255.0</P><P>object network obj-10.73.77.0</P><P> subnet 10.73.77.0 255.255.255.0</P><P>object network obj-192.168.51.0</P><P> subnet 192.168.51.0 255.255.255.0</P><P>object network obj-10.73.79.0</P><P> subnet 10.73.79.0 255.255.255.0</P><P>object network obj-192.168.6.0</P><P> subnet 192.168.6.0 255.255.255.0</P><P>object network obj-192.168.1.0</P><P> subnet 192.168.1.0 255.255.255.0</P><P>object network obj-192.168.50.0</P><P> subnet 192.168.50.0 255.255.255.0</P><P>object network obj-192.168.70.0</P><P> subnet 192.168.70.0 255.255.255.0</P><P>object network obj-192.168.2.0</P><P> subnet 192.168.2.0 255.255.255.0</P><P>object network obj-192.168.26.0</P><P> subnet 192.168.26.0 255.255.255.0</P><P>object network obj-10.73.95.0</P><P> subnet 10.73.95.0 255.255.255.0</P><P>object network obj-10.0.0.0</P><P> subnet 10.0.0.0 255.255.255.0</P><P>object network obj-192.168.5.0</P><P> subnet 192.168.5.0 255.255.255.0</P><P>object network obj-192.168.30.0</P><P> subnet 192.168.30.0 255.255.255.0</P><P>object network obj-10.73.90.0</P><P> subnet 10.73.90.0 255.255.255.0</P><P>object network obj-192.168.52.0</P><P> subnet 192.168.52.0 255.255.255.0</P><P>object network obj-192.168.53.0</P><P> subnet 192.168.53.0 255.255.255.0</P><P>object network obj-192.168.0.75</P><P> host 192.168.0.75</P><P>object network obj-192.168.0.132</P><P> host 192.168.0.132</P><P>object network obj-192.168.35.0</P><P> subnet 192.168.35.0 255.255.255.0</P><P>object network obj-10.73.88.0</P><P> subnet 10.73.88.0 255.255.255.0</P><P>object network obj-10.73.50.0</P><P> subnet 10.73.50.0 255.255.255.0</P><P>object network obj-192.168.82.0</P><P> subnet 192.168.82.0 255.255.255.0</P><P>object network obj-10.73.87.0</P><P> subnet 10.73.87.0 255.255.255.0</P><P>object network obj-10.73.78.0</P><P> subnet 10.73.78.0 255.255.255.0</P><P>object network obj-10.70.70.0</P><P> subnet 10.70.70.0 255.255.255.0</P><P>object network obj-10.73.80.0</P><P> subnet 10.73.80.0 255.255.255.0</P><P>object network obj-192.168.3.0</P><P> host 192.168.3.0</P><P>object network obj-192.168.4.0</P><P> host 192.168.4.0</P><P>object network obj-192.168.0.129</P><P> host 192.168.0.129</P><P>object network obj-192.168.0.5</P><P> host 192.168.0.5</P><P>object network obj_any</P><P> subnet 0.0.0.0 0.0.0.0</P><P>object network obj_any-01</P><P> subnet 0.0.0.0 0.0.0.0</P><P>object network obj-10.0.0.2</P><P> host 10.0.0.2</P><P>object network obj-10.0.0.3</P><P> host 10.0.0.3</P><P>object network obj-10.0.0.4</P><P> host 10.0.0.4</P><P>object network obj-10.0.0.10</P><P> host 10.0.0.10</P><P>object network obj-10.0.0.8</P><P> host 10.0.0.8</P><P>object network obj-10.0.0.11</P><P> host 10.0.0.11</P><P>object network Adonis</P><P> host 10.0.0.30</P><P>object network obj-10.0.0.15</P><P> host 10.0.0.15</P><P>object network obj-10.73.85.0</P><P> subnet 10.73.85.0 255.255.255.0</P><P>object network obj-192.168.20.0</P><P> subnet 192.168.20.0 255.255.255.0</P><P>object network obj-192.168.22.0</P><P> subnet 192.168.22.0 255.255.255.0</P><P>object network obj-192.168.27.0</P><P> subnet 192.168.27.0 255.255.255.0</P><P>object network obj-192.168.28.0</P><P> subnet 192.168.28.0 255.255.255.0</P><P>object network Controller1</P><P> host 192.168.0.136</P><P> description Controller1 VM</P><P>object network Controller2</P><P> host 192.168.0.253</P><P> description Controller2 VM</P><P>object-group network KIMCAM_VPN_REMOTE</P><P> network-object 192.168.5.0 255.255.255.0</P><P>object-group network KIMCAM_VPN_LOCAL</P><P> network-object 192.168.0.0 255.255.255.0</P><P> network-object 10.0.0.0 255.255.255.0</P><P>object-group network PIX506_VPN_REMOTE</P><P> network-object 10.73.87.0 255.255.255.0</P><P>object-group network PIX506_VPN_LOCAL</P><P> network-object 192.168.0.0 255.255.255.0</P><P> network-object 10.0.0.0 255.255.255.0</P><P>object-group network CONVEN_VPN_REMOTE</P><P> network-object 10.73.88.0 255.255.255.0</P><P>object-group network CONVEN_VPN_LOCAL</P><P> network-object 192.168.0.0 255.255.255.0</P><P> network-object 10.0.0.0 255.255.255.0</P><P>object-group network Controller</P><P> description Controller machines</P><P> network-object object Controller1</P><P> network-object object Controller2</P><P>object-group service Internet</P><P> description Internet Services 80/443</P><P> service-object tcp destination eq www </P><P> service-object tcp destination eq https </P><P>access-list dmzintf extended permit ip host 10.0.0.2 any </P><P>access-list dmzintf extended permit ip host **** any </P><P>access-list dmzintf extended permit ip host 10.0.0.3 any </P><P>access-list dmzintf extended permit ip host **** any </P><P>access-list dmzintf extended permit tcp host 10.0.0.2 eq 1433 any </P><P>access-list dmzintf extended permit tcp host 10.0.0.3 host 192.168.0.2 eq 137 </P><P>access-list dmzintf extended permit tcp host 10.0.0.3 host 192.168.0.2 eq 138 </P><P>access-list dmzintf extended permit tcp host 10.0.0.3 host 192.168.0.2 eq netbios-ssn </P><P>access-list dmzintf extended permit udp host 10.0.0.3 host 192.168.0.2 eq netbios-ns </P><P>access-list dmzintf extended permit udp host 10.0.0.3 host 192.168.0.2 eq netbios-dgm </P><P>access-list dmzintf extended permit udp host 10.0.0.3 host 192.168.0.2 eq 139 </P><P>access-list dmzintf extended permit ip host 10.0.0.4 any </P><P>access-list dmzintf extended permit ip host **** any </P><P>access-list dmzintf extended permit ip host 10.0.0.6 any </P><P>access-list dmzintf extended permit ip host 10.0.0.7 any </P><P>access-list dmzintf extended permit ip host 10.0.0.8 any </P><P>access-list dmzintf extended permit ip host 10.0.0.9 any </P><P>access-list dmzintf extended permit ip host 10.0.0.10 any </P><P>access-list dmzintf extended permit ip host 10.0.0.11 any </P><P>access-list dmzintf extended permit ip host 10.0.0.21 any </P><P>access-list dmzintf extended permit ip host 10.0.0.12 any </P><P>access-list dmzintf extended permit ip host 10.0.0.22 any </P><P>access-list dmzintf extended permit ip host 10.0.0.25 any </P><P>access-list dmzintf extended permit tcp host 10.0.0.7 host 10.73.95.36 eq sqlnet </P><P>access-list dmzintf extended permit tcp object Adonis any eq domain </P><P>access-list dmzintf extended permit udp object Adonis any eq domain </P><P>access-list dmzintf extended permit ip object Adonis host 10.73.95.16 </P><P>access-list dmzintf extended permit tcp host 10.0.0.15 host 192.168.0.121 eq domain </P><P>access-list dmzintf extended permit udp host 10.0.0.15 host 192.168.0.121 eq domain </P><P>access-list dmzintf extended permit udp host 10.0.0.15 host 192.168.0.120 eq domain </P><P>access-list dmzintf extended permit tcp host 10.0.0.15 host 192.168.0.120 eq domain </P><P>access-list dmzintf extended permit tcp host 10.0.0.15 any eq www </P><P>access-list dmzintf extended permit tcp host 10.0.0.15 any eq https </P><P>access-list dmzintf extended permit udp object Adonis any eq ntp </P><P>access-list tango extended permit ip 192.168.0.0 255.255.255.0 10.73.77.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.0.0 255.255.255.0 10.73.95.0 255.255.255.0 </P><P>access-list tango extended permit ip 10.0.0.0 255.255.255.0 10.73.95.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.26.0 255.255.255.0 10.73.95.0 255.255.255.0 </P><P>access-list tango extended permit ip 10.0.0.0 255.255.255.0 10.73.77.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.30.0 255.255.255.0 10.73.77.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.30.0 255.255.255.0 10.73.95.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.0.0 255.255.255.0 10.73.90.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.26.0 255.255.255.0 10.73.77.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.0.0 255.255.255.0 10.73.50.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.26.0 255.255.255.0 10.73.50.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.30.0 255.255.255.0 10.73.50.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.0.0 255.255.255.0 10.73.78.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.0.0 255.255.255.0 10.70.70.0 255.255.255.0 </P><P>access-list tango extended permit ip 10.0.0.0 255.255.255.0 10.73.78.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.0.0 255.255.255.0 10.73.80.0 255.255.255.0 </P><P>access-list tango extended permit ip 10.0.0.0 255.255.255.0 10.73.80.0 255.255.255.0 </P><P>access-list tango extended permit ip 192.168.26.0 255.255.255.0 10.73.80.0 255.255.255.0 </P><P>access-list karen extended permit ip 192.168.0.0 255.255.255.0 192.168.2.0 255.255.255.0 </P><P>access-list karen extended permit ip 10.0.0.0 255.255.255.0 192.168.2.0 255.255.255.0 </P><P>access-list walker extended permit ip 192.168.2.0 255.255.255.0 10.73.79.0 255.255.255.0 </P><P>access-list walker extended permit ip 10.0.0.0 255.255.255.0 10.73.79.0 255.255.255.0 </P><P>access-list walker extended permit ip 192.168.0.0 255.255.255.0 10.73.79.0 255.255.255.0 </P><P>access-list walker extended permit ip 192.168.26.0 255.255.255.0 10.73.79.0 255.255.255.0 </P><P>access-list walker extended permit ip 192.168.30.0 255.255.255.0 10.73.79.0 255.255.255.0 </P><P>access-list beverly extended permit ip 192.168.0.0 255.255.255.0 192.168.6.0 255.255.255.0 </P><P>access-list beverly extended permit ip 10.0.0.0 255.255.255.0 192.168.6.0 255.255.255.0 </P><P>access-list hooper extended permit ip 192.168.0.0 255.255.255.0 192.168.1.0 255.255.255.0 </P><P>access-list hooper extended permit ip 10.0.0.0 255.255.255.0 192.168.1.0 255.255.255.0 </P><P>access-list hooper extended permit ip 192.168.30.0 255.255.255.0 192.168.1.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 10.73.77.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.51.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 10.73.79.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.6.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.1.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.50.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.70.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.2.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.26.0 255.255.255.0 10.73.79.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 10.73.95.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.26.0 255.255.255.0 10.73.95.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.5.0 255.255.255.0 </P><P>access-list 110 extended permit ip 10.0.0.0 255.255.255.0 192.168.5.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.30.0 255.255.255.0 10.73.77.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.30.0 255.255.255.0 192.168.1.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.30.0 255.255.255.0 10.73.95.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 10.73.90.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.30.0 255.255.255.0 10.73.79.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.26.0 255.255.255.0 192.168.52.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.52.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.30.0 255.255.255.0 192.168.52.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.30.0 255.255.255.0 192.168.53.0 255.255.255.0 </P><P>access-list 110 extended permit ip host 192.168.0.75 192.168.53.0 255.255.255.0 </P><P>access-list 110 extended permit ip host 192.168.0.132 192.168.53.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.35.0 255.255.255.0 </P><P>access-list 110 extended permit ip 10.0.0.0 255.255.255.0 192.168.35.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.26.0 255.255.255.0 10.73.77.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.26.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 10.73.88.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 10.73.50.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.26.0 255.255.255.0 10.73.50.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.30.0 255.255.255.0 10.73.50.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 192.168.82.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 10.73.87.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 10.73.78.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 10.70.70.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.0.0 255.255.255.0 10.73.80.0 255.255.255.0 </P><P>access-list 110 extended permit ip 192.168.26.0 255.255.255.0 10.73.80.0 255.255.255.0 </P><P>access-list 110 extended permit ip 10.0.0.0 255.255.255.0 10.73.95.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 10.73.77.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 192.168.2.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 192.168.3.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 192.168.51.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 10.73.79.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 192.168.6.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 192.168.1.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 192.168.50.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 192.168.70.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 10.73.95.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 192.168.5.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 192.168.52.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 192.168.35.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 10.73.88.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 10.73.87.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 10.73.78.0 255.255.255.0 </P><P>access-list nonatdmz extended permit ip 10.0.0.0 255.255.255.0 10.73.80.0 255.255.255.0 </P><P>access-list 120 extended permit ip 10.0.0.0 255.255.255.0 192.168.50.0 255.255.255.0 </P><P>access-list 120 extended permit ip 192.168.26.0 255.255.255.0 192.168.50.0 255.255.255.0 </P><P>access-list 120 extended permit ip 192.168.0.0 255.255.255.0 192.168.50.0 255.255.255.0 </P><P>access-list pix2pix extended permit ip 192.168.0.0 255.255.255.0 192.168.70.0 255.255.255.0 </P><P>access-list pix2pix extended permit ip 10.0.0.0 255.255.255.0 192.168.70.0 255.255.255.0 </P><P>access-list pix2pix extended permit ip 192.168.0.0 255.255.255.0 192.168.5.0 255.255.255.0 </P><P>access-list pix2pix extended permit ip 10.0.0.0 255.255.255.0 192.168.5.0 255.255.255.0 </P><P>access-list pix2pix extended permit ip 192.168.0.0 255.255.255.0 192.168.35.0 255.255.255.0 </P><P>access-list pix2pix extended permit ip 10.0.0.0 255.255.255.0 192.168.35.0 255.255.255.0 </P><P>access-list pix2pix extended permit ip 192.168.0.0 255.255.255.0 10.73.88.0 255.255.255.0 </P><P>access-list pix2pix extended permit ip 10.0.0.0 255.255.255.0 10.73.88.0 255.255.255.0 </P><P>access-list 121 extended permit ip 192.168.0.0 255.255.255.0 192.168.52.0 255.255.255.0 </P><P>access-list 121 extended permit ip 192.168.26.0 255.255.255.0 192.168.52.0 255.255.255.0 </P><P>access-list 121 extended permit ip 192.168.30.0 255.255.255.0 192.168.52.0 255.255.255.0 </P><P>access-list 121 extended permit ip 10.0.0.0 255.255.255.0 192.168.52.0 255.255.255.0 </P><P>access-list 122 extended permit ip 192.168.0.0 255.255.255.0 192.168.53.0 255.255.255.0 </P><P>access-list 122 extended permit ip 192.168.30.0 255.255.255.0 192.168.53.0 255.255.255.0 </P><P>access-list DYNVPN extended permit ip object-group KIMCAM_VPN_LOCAL object-group KIMCAM_VPN_REMOTE </P><P>access-list DYNVPN extended permit ip any 192.168.50.0 255.255.255.0 </P><P>access-list DYNVPN extended permit ip object-group PIX506_VPN_LOCAL object-group PIX506_VPN_REMOTE </P><P>access-list DYNVPN extended permit ip object-group CONVEN_VPN_LOCAL object-group CONVEN_VPN_REMOTE </P><P>access-list outsideif extended permit tcp any host 10.0.0.3 eq www </P><P>access-list outsideif extended permit tcp any host 10.0.0.3 eq https </P><P>access-list outsideif extended permit udp any host 10.0.0.3 eq domain </P><P>access-list outsideif extended permit tcp any host 10.0.0.3 eq 7877 </P><P>access-list outsideif extended permit tcp any host 10.0.0.3 eq 7777 </P><P>access-list outsideif extended permit tcp any host 10.0.0.3 eq 2121 </P><P>access-list outsideif extended permit tcp any host 10.0.0.3 eq 1755 </P><P>access-list outsideif extended permit udp any host 10.0.0.3 eq 1755 </P><P>access-list outsideif extended permit udp any host 10.0.0.3 eq 5005 </P><P>access-list outsideif extended permit tcp any host 10.0.0.3 eq rtsp </P><P>access-list outsideif extended permit tcp any host 10.0.0.4 eq www </P><P>access-list outsideif extended permit ip host ***** host 192.168.0.75 </P><P>access-list outsideif extended permit ip host ***** host 192.168.0.75 </P><P>access-list outsideif extended permit tcp any host 10.0.0.10 eq www </P><P>access-list outsideif extended permit tcp any host 10.0.0.10 eq 1755 </P><P>access-list outsideif extended permit udp any host 10.0.0.10 eq 1755 </P><P>access-list outsideif extended permit udp any host 10.0.0.10 eq 5005 </P><P>access-list outsideif extended permit tcp any host 10.0.0.10 eq rtsp </P><P>access-list outsideif extended permit tcp any host 10.0.0.10 eq https </P><P>access-list outsideif extended permit udp any host 10.0.0.10 eq domain </P><P>access-list outsideif extended permit tcp any host 10.0.0.10 eq 7877 </P><P>access-list outsideif extended permit tcp any host 10.0.0.10 eq 7777 </P><P>access-list outsideif extended permit tcp any host 10.0.0.10 eq 2121 </P><P>access-list outsideif extended permit tcp host **** host 192.168.0.75 </P><P>access-list outsideif extended permit tcp host **** any eq 161 </P><P>access-list outsideif extended permit tcp host **** any eq 162 </P><P>access-list outsideif extended permit udp host **** any eq snmp </P><P>access-list outsideif extended permit udp host **** any eq snmptrap </P><P>access-list outsideif extended permit tcp any host 10.0.0.8 eq https </P><P>access-list outsideif extended permit tcp any host 10.0.0.8 eq www </P><P>access-list outsideif extended permit tcp any host 10.0.0.11 eq 1755 </P><P>access-list outsideif extended permit udp any host 10.0.0.11 eq 1755 </P><P>access-list outsideif extended permit udp any host 10.0.0.11 eq 5005 </P><P>access-list outsideif extended permit tcp any host 10.0.0.11 eq rtsp </P><P>access-list outsideif extended permit tcp any host 10.0.0.11 eq www </P><P>access-list outsideif extended permit tcp any host 10.0.0.11 eq https </P><P>access-list outsideif extended permit tcp host **** host **** eq 3389 </P><P>access-list outsideif extended permit tcp host **** host **** eq 3389 </P><P>access-list outsideif extended permit tcp any host 192.168.0.129 eq smtp </P><P>access-list outsideif extended permit tcp any host 192.168.0.129 eq https </P><P>access-list outsideif extended permit tcp any host 192.168.0.129 eq www </P><P>access-list outsideif extended permit tcp any host 192.168.0.129 eq pop3 </P><P>access-list outsideif extended permit tcp host **** host 192.168.0.129 eq 3389 </P><P>access-list outsideif extended permit tcp any host **** eq https </P><P>access-list outsideif extended permit udp any object Adonis eq domain </P><P>access-list outsideif extended permit tcp any object Adonis eq domain </P><P>access-list outsideif extended permit tcp any host 192.168.0.132 eq www </P><P>access-list outsideif extended permit tcp any host 192.168.0.132 eq https </P><P>access-list outsideif extended permit tcp any host 192.168.0.5 eq pop3 </P><P>access-list outsideif extended permit tcp any host 192.168.0.5 eq www </P><P>access-list outsideif extended permit tcp any host 192.168.0.5 eq https </P><P>access-list outsideif extended permit icmp host **** any </P><P>access-list outsideif extended permit ip host **** host 192.168.0.132 </P><P>access-list outsideif extended permit tcp any host 10.0.0.15 eq www </P><P>access-list outsideif extended permit tcp any host 10.0.0.15 eq https </P><P>access-list outsideif extended permit tcp any host 192.168.0.5 eq 995 </P><P>access-list outsideif extended permit tcp any host 192.168.0.5 eq 587 </P><P>access-list outsideif extended permit tcp host **** host 72.159.96.162 eq ssh </P><P>access-list outsideif extended permit tcp host **** host 72.159.96.162 eq ssh </P><P>access-list outsideif extended permit icmp any any </P><P>pager lines 24</P><P>logging enable</P><P>logging timestamp</P><P>logging trap warnings</P><P>logging history warnings</P><P>logging asdm informational</P><P>logging host inside 192.168.0.2</P><P>logging host inside 10.73.95.70</P><P>mtu outside 1500</P><P>mtu inside 1500</P><P>mtu dmz 1500</P><P>ip local pool vpn3000-pool 192.168.50.180-192.168.50.209</P><P>ip local pool vpn3001-pool 192.168.52.180-192.168.52.190</P><P>ip local pool vpn3002-pool 192.168.53.180-192.168.53.185</P><P>ip local pool sp-software 192.168.50.140-192.168.50.179</P><P>icmp unreachable rate-limit 1 burst-size 1</P><P>icmp permit host **** outside</P><P>icmp permit host **** outside</P><P>asdm image disk0:/asdm-645-206.bin</P><P>asdm history enable</P><P>arp timeout 14400</P><P>nat (inside,outside) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.77.0 obj-10.73.77.0 no-proxy-arp route-lookup</P><P>nat (inside,outside) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.5.0 obj-192.168.5.0 no-proxy-arp route-lookup</P><P>nat (inside,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.5.0 obj-192.168.5.0 no-proxy-arp route-lookup</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.77.0 obj-10.73.77.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.51.0 obj-192.168.51.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.79.0 obj-10.73.79.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.6.0 obj-192.168.6.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.1.0 obj-192.168.1.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.50.0 obj-192.168.50.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.70.0 obj-192.168.70.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.2.0 obj-192.168.2.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.26.0 obj-192.168.26.0 destination static obj-10.73.79.0 obj-10.73.79.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.95.0 obj-10.73.95.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.26.0 obj-192.168.26.0 destination static obj-10.73.95.0 obj-10.73.95.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.30.0 obj-192.168.30.0 destination static obj-10.73.77.0 obj-10.73.77.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.30.0 obj-192.168.30.0 destination static obj-192.168.1.0 obj-192.168.1.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.30.0 obj-192.168.30.0 destination static obj-10.73.95.0 obj-10.73.95.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.90.0 obj-10.73.90.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.30.0 obj-192.168.30.0 destination static obj-10.73.79.0 obj-10.73.79.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.26.0 obj-192.168.26.0 destination static obj-192.168.52.0 obj-192.168.52.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.52.0 obj-192.168.52.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.30.0 obj-192.168.30.0 destination static obj-192.168.52.0 obj-192.168.52.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.30.0 obj-192.168.30.0 destination static obj-192.168.53.0 obj-192.168.53.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.75 obj-192.168.0.75 destination static obj-192.168.53.0 obj-192.168.53.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.132 obj-192.168.0.132 destination static obj-192.168.53.0 obj-192.168.53.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.35.0 obj-192.168.35.0 no-proxy-arp</P><P>nat (inside,any) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.35.0 obj-192.168.35.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.26.0 obj-192.168.26.0 destination static obj-10.73.77.0 obj-10.73.77.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.26.0 obj-192.168.26.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.88.0 obj-10.73.88.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.50.0 obj-10.73.50.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.26.0 obj-192.168.26.0 destination static obj-10.73.50.0 obj-10.73.50.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.30.0 obj-192.168.30.0 destination static obj-10.73.50.0 obj-10.73.50.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.82.0 obj-192.168.82.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.87.0 obj-10.73.87.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.78.0 obj-10.73.78.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.70.70.0 obj-10.70.70.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.80.0 obj-10.73.80.0 no-proxy-arp</P><P>nat (inside,any) source static obj-192.168.26.0 obj-192.168.26.0 destination static obj-10.73.80.0 obj-10.73.80.0 no-proxy-arp</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-10.73.77.0 obj-10.73.77.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.2.0 obj-192.168.2.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.3.0 obj-192.168.3.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.51.0 obj-192.168.51.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-10.73.79.0 obj-10.73.79.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.6.0 obj-192.168.6.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.1.0 obj-192.168.1.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.50.0 obj-192.168.50.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.70.0 obj-192.168.70.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-10.73.95.0 obj-10.73.95.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.5.0 obj-192.168.5.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.52.0 obj-192.168.52.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.35.0 obj-192.168.35.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-10.73.88.0 obj-10.73.88.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-10.73.87.0 obj-10.73.87.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-10.73.78.0 obj-10.73.78.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-10.73.80.0 obj-10.73.80.0 no-proxy-arp route-lookup</P><P>nat (inside,outside) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-10.73.85.0 obj-10.73.85.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-10.73.85.0 obj-10.73.85.0 no-proxy-arp route-lookup</P><P>nat (inside,outside) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.20.0 obj-192.168.20.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.20.0 obj-192.168.20.0 no-proxy-arp route-lookup</P><P>nat (inside,outside) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.22.0 obj-192.168.22.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.22.0 obj-192.168.22.0 no-proxy-arp route-lookup</P><P>nat (inside,outside) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.27.0 obj-192.168.27.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.27.0 obj-192.168.27.0 no-proxy-arp route-lookup</P><P>nat (inside,outside) source static obj-192.168.0.0 obj-192.168.0.0 destination static obj-192.168.28.0 obj-192.168.28.0 no-proxy-arp route-lookup</P><P>nat (dmz,outside) source static obj-10.0.0.0 obj-10.0.0.0 destination static obj-192.168.28.0 obj-192.168.28.0 no-proxy-arp route-lookup</P><P>!</P><P>object network obj-192.168.0.0</P><P> nat (inside,dmz) static 192.168.0.0 no-proxy-arp route-lookup</P><P>object network obj-10.73.77.0</P><P> nat (inside,dmz) static 10.73.77.0 no-proxy-arp route-lookup</P><P>object network obj-192.168.1.0</P><P> nat (inside,dmz) static 192.168.1.0 no-proxy-arp route-lookup</P><P>object network obj-192.168.2.0</P><P> nat (inside,dmz) static 192.168.2.0 no-proxy-arp route-lookup</P><P>object network obj-10.0.0.0</P><P> nat (inside,dmz) static 10.0.0.0 no-proxy-arp route-lookup</P><P>object network obj-192.168.5.0</P><P> nat (inside,dmz) static 192.168.5.0 no-proxy-arp route-lookup</P><P>object network obj-192.168.0.75</P><P> nat (inside,outside) static 1.1.1.1</P><P>object network obj-192.168.0.132</P><P> nat (inside,outside) static 1.1.1.1</P><P>object network obj-192.168.3.0</P><P> nat (inside,dmz) static 192.168.3.0 no-proxy-arp route-lookup</P><P>object network obj-192.168.4.0</P><P> nat (inside,dmz) static 192.168.4.0 no-proxy-arp route-lookup</P><P>object network obj-192.168.0.129</P><P> nat (inside,outside) static 1.1.1.1</P><P>object network obj-192.168.0.5</P><P> nat (inside,outside) static 1.1.1.1</P><P>object network obj_any</P><P> nat (inside,outside) dynamic interface</P><P>object network obj_any-01</P><P> nat (dmz,outside) dynamic interface</P><P>object network obj-10.0.0.2</P><P> nat (dmz,outside) static 1.1.1.1</P><P>object network obj-10.0.0.3</P><P> nat (dmz,outside) static 1.1.1.1</P><P>object network obj-10.0.0.4</P><P> nat (dmz,outside) static 1.1.1.1</P><P>object network obj-10.0.0.10</P><P> nat (dmz,outside) static 1.1.1.1</P><P>object network obj-10.0.0.8</P><P> nat (dmz,outside) static 1.1.1.1</P><P>object network obj-10.0.0.11</P><P> nat (dmz,outside) static 1.1.1.1</P><P>object network Adonis</P><P> nat (dmz,outside) static 1.1.1.1</P><P>object network obj-10.0.0.15</P><P> nat (dmz,outside) static 1.1.1.1</P><P>access-group outsideif in interface outside</P><P>access-group dmzintf in interface dmz</P><P>route outside 0.0.0.0 0.0.0.0 *.*.*.* 1</P><P>route inside 192.168.26.0 255.255.255.0 192.168.0.9 1</P><P>route inside 192.168.30.0 255.255.255.0 192.168.0.8 1</P><P>timeout xlate 3:00:00</P><P>timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02</P><P>timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00</P><P>timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00</P><P>timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute</P><P>timeout tcp-proxy-reassembly 0:01:00</P><P>timeout floating-conn 0:00:00</P><P>dynamic-access-policy-record DfltAccessPolicy</P><P>aaa-server TACACS+ protocol tacacs+</P><P>aaa-server TACACS+ (inside) host 10.73.95.70</P><P> timeout 8</P><P> key *******</P><P>aaa-server TACACS+ (outside) host </P><P> timeout 8</P><P> key *******</P><P>aaa-server RADIUS protocol radius</P><P>aaa-server RADIUS_Auth protocol radius</P><P>aaa-server RADIUS_Auth (inside) host 192.168.0.7</P><P> key ****</P><P> authentication-port 1812</P><P> accounting-port 1813</P><P>user-identity default-domain LOCAL</P><P>aaa authentication ssh console TACACS+ </P><P>aaa authentication http console TACACS+ </P><P>http server enable</P><P>http 192.168.0.0 255.255.255.0 inside</P><P>http 10.73.77.0 255.255.255.0 inside</P><P>snmp-server host inside 10.73.77.106 </P><P>snmp-server host outside **** poll </P><P>no snmp-server location</P><P>no snmp-server contact</P><P>snmp-server community public</P><P>snmp-server enable traps snmp authentication linkup linkdown coldstart</P><P>snmp-server enable traps syslog</P><P>crypto ipsec ikev1 transform-set myset esp-des esp-md5-hmac </P><P>crypto dynamic-map dynmap 20 set ikev1 transform-set myset</P><P>crypto dynamic-map dynmap 30 match address DYNVPN</P><P>crypto dynamic-map dynmap 30 set ikev1 transform-set myset</P><P>crypto map mymap 5 match address tango</P><P>crypto map mymap 5 set peer **** </P><P>crypto map mymap 5 set ikev1 transform-set myset</P><P>crypto map mymap 5 set security-association lifetime seconds 28800</P><P>crypto map mymap 5 set security-association lifetime kilobytes 4608000</P><P>crypto map mymap 6 match address karen</P><P>crypto map mymap 6 set peer ****</P><P>crypto map mymap 6 set ikev1 transform-set myset</P><P>crypto map mymap 6 set security-association lifetime seconds 28800</P><P>crypto map mymap 6 set security-association lifetime kilobytes 4608000</P><P>crypto map mymap 9 match address walker</P><P>crypto map mymap 9 set peer **** </P><P>crypto map mymap 9 set ikev1 transform-set myset</P><P>crypto map mymap 9 set security-association lifetime seconds 28800</P><P>crypto map mymap 9 set security-association lifetime kilobytes 4608000</P><P>crypto map mymap 12 match address hooper</P><P>crypto map mymap 12 set peer ****</P><P>crypto map mymap 12 set ikev1 transform-set myset</P><P>crypto map mymap 12 set security-association lifetime seconds 28800</P><P>crypto map mymap 12 set security-association lifetime kilobytes 4608000</P><P>crypto map mymap 15 match address beverly</P><P>crypto map mymap 15 set peer ****</P><P>crypto map mymap 15 set ikev1 transform-set myset</P><P>crypto map mymap 15 set security-association lifetime seconds 28800</P><P>crypto map mymap 15 set security-association lifetime kilobytes 4608000</P><P>crypto map mymap 100 ipsec-isakmp dynamic dynmap</P><P>crypto map mymap interface outside</P><P>crypto ca trustpoint _SmartCallHome_ServerCA</P><P> crl configure</P><P>crypto ca certificate chain _SmartCallHome_ServerCA</P><P>crypto isakmp identity address </P><P>crypto isakmp nat-traversal 60</P><P>crypto ikev1 enable outside</P><P>crypto ikev1 policy 10</P><P> authentication pre-share</P><P> encryption des</P><P> hash md5</P><P> group 2</P><P> lifetime 86400</P><P>crypto ikev1 policy 20</P><P> authentication pre-share</P><P> encryption des</P><P> hash md5</P><P> group 1</P><P> lifetime 86400</P><P>crypto ikev1 policy 65535</P><P> authentication pre-share</P><P> encryption 3des</P><P> hash sha</P><P> group 2</P><P> lifetime 86400</P><P>console timeout 0</P><P>management-access inside</P><P>threat-detection basic-threat</P><P>threat-detection statistics access-list</P><P>no threat-detection statistics tcp-intercept</P><P>webvpn</P><P>group-policy sp-remote internal</P><P>group-policy sp-remote attributes</P><P> wins-server value 192.168.0.2</P><P> dns-server value 192.168.0.121 192.168.0.120</P><P> vpn-idle-timeout 30</P><P> split-tunnel-policy tunnelspecified</P><P> split-tunnel-network-list value 120</P><P> default-domain value *******.com</P><P>group-policy sp-software internal</P><P>group-policy sp-software attributes</P><P> wins-server value 192.168.0.2</P><P> dns-server value 192.168.0.121 192.168.0.120</P><P> vpn-idle-timeout 30</P><P> split-tunnel-policy tunnelspecified</P><P> split-tunnel-network-list value 120</P><P> default-domain value *******.com</P><P>group-policy vpn3002 internal</P><P>group-policy vpn3002 attributes</P><P> wins-server value 192.168.0.2</P><P> dns-server value 192.168.0.121 192.168.0.120</P><P> vpn-idle-timeout 2</P><P> split-tunnel-policy tunnelspecified</P><P> split-tunnel-network-list value 122</P><P> default-domain value *******.com</P><P>group-policy vpn3000 internal</P><P>group-policy vpn3000 attributes</P><P> wins-server value 192.168.0.2</P><P> dns-server value 192.168.0.121 192.168.0.120</P><P> vpn-idle-timeout 30</P><P> split-tunnel-policy tunnelspecified</P><P> split-tunnel-network-list value 120</P><P> default-domain value *******.com</P><P>group-policy vpn3001 internal</P><P>group-policy vpn3001 attributes</P><P> wins-server value 192.168.0.2</P><P> dns-server value 192.168.0.121 192.168.0.120</P><P> vpn-idle-timeout 30</P><P> split-tunnel-policy tunnelspecified</P><P> split-tunnel-network-list value 121</P><P> default-domain value *******.com</P><P>group-policy pix2pix internal</P><P>group-policy pix2pix attributes</P><P> wins-server value 192.168.0.2</P><P> dns-server value 192.168.0.121 192.168.0.120</P><P> vpn-idle-timeout 30</P><P> vpn-tunnel-protocol ikev1 l2tp-ipsec </P><P> split-tunnel-policy tunnelspecified</P><P> split-tunnel-network-list value pix2pix</P><P> default-domain value *******.com</P><P> nem enable</P><P>username admin password ***** encrypted privilege 15</P><P>tunnel-group DefaultL2LGroup ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group DefaultRAGroup general-attributes</P><P> authentication-server-group (outside) RADIUS_Auth</P><P>tunnel-group DefaultRAGroup ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group 1.1.1.1 type ipsec-l2l</P><P>tunnel-group 1.1.1.1 ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group 1.1.1.1&nbsp; type ipsec-l2l</P><P>tunnel-group 1.1.1.1&nbsp; ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group 1.1.1.1&nbsp; type ipsec-l2l</P><P>tunnel-group 1.1.1.1&nbsp; ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group 1.1.1.1&nbsp; type ipsec-l2l</P><P>tunnel-group 1.1.1.1&nbsp; ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group 1.1.1.1&nbsp; type ipsec-l2l</P><P>tunnel-group 1.1.1.1&nbsp; ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group 1.1.1.1&nbsp; type ipsec-l2l</P><P>tunnel-group 1.1.1.1&nbsp; ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group 1.1.1.1&nbsp; type ipsec-l2l</P><P>tunnel-group 1.1.1.1&nbsp; ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group vpn3000 type remote-access</P><P>tunnel-group vpn3000 general-attributes</P><P> address-pool vpn3000-pool</P><P> authentication-server-group (outside) RADIUS_Auth</P><P> default-group-policy vpn3000</P><P>tunnel-group vpn3000 ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group pix2pix type remote-access</P><P>tunnel-group pix2pix general-attributes</P><P> authentication-server-group (outside) RADIUS_Auth</P><P> default-group-policy pix2pix</P><P>tunnel-group pix2pix ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group vpn3001 type remote-access</P><P>tunnel-group vpn3001 general-attributes</P><P> address-pool vpn3001-pool</P><P> authentication-server-group (outside) RADIUS_Auth</P><P> default-group-policy vpn3001</P><P>tunnel-group vpn3001 ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group vpn3002 type remote-access</P><P>tunnel-group vpn3002 general-attributes</P><P> address-pool vpn3002-pool</P><P> authentication-server-group (outside) RADIUS_Auth</P><P> default-group-policy vpn3002</P><P>tunnel-group vpn3002 ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group sp-remote type remote-access</P><P>tunnel-group sp-remote general-attributes</P><P> address-pool vpn3000-pool</P><P> authentication-server-group (outside) RADIUS_Auth</P><P> default-group-policy sp-remote</P><P>tunnel-group sp-remote ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>tunnel-group sp-software type remote-access</P><P>tunnel-group sp-software general-attributes</P><P> address-pool sp-software</P><P> authentication-server-group (outside) RADIUS_Auth</P><P> default-group-policy sp-software</P><P>tunnel-group sp-software ipsec-attributes</P><P> ikev1 pre-shared-key ********</P><P>!</P><P>class-map inspection_default</P><P> match default-inspection-traffic</P><P>!</P><P>!</P><P>policy-map type inspect dns preset_dns_map</P><P> parameters</P><P>&nbsp; message-length maximum 512</P><P>policy-map global_policy</P><P> class inspection_default</P><P>&nbsp; inspect dns preset_dns_map </P><P>&nbsp; inspect ftp </P><P>&nbsp; inspect h323 h225 </P><P>&nbsp; inspect h323 ras </P><P>&nbsp; inspect http </P><P>&nbsp; inspect rsh </P><P>&nbsp; inspect rtsp </P><P>&nbsp; inspect skinny&nbsp; </P><P>&nbsp; inspect sqlnet </P><P>&nbsp; inspect tftp </P><P>&nbsp; inspect ip-options </P><P>!</P><P>service-policy global_policy global</P><P>prompt hostname context </P><P>call-home reporting anonymous</P><P>call-home</P><P> profile CiscoTAC-1</P><P>&nbsp; no active</P> Tue, 12 Mar 2019 03:04:45 GMT https://community.cisco.com/t5/network-security/expanding-subnet-on-inside-interface/m-p/2419256#M308978 djl7780 2019-03-12T03:04:45Z https://community.cisco.com/t5/network-security/expanding-subnet-on-inside-interface/m-p/2419257#M308979 <HTML><HEAD></HEAD><BODY><P> On the ASA:</P><P></P><P>NAT configuration associated to object network obj-192.168.0.0, you also need to consider&nbsp; object network obj-192.168.1.0 since both are /24.</P><P></P><P>On the router that connects to the ASA you need to change the subnet of the interface facing towards the ASA and consider that you have created a bigger broadcast domain. I am not sure if you are running any type of routing protocol on the internal router but if you are you need to consider this too. </P><P></P><P>Also look at this configuration line:</P><P></P><P>nat (inside,any) source static obj-192.168.30.0 obj-192.168.30.0 destination static obj-192.168.1.0 obj-192.168.1.0 no-proxy-arp</P><P></P><P>Does 192.168.1.0/24 network reside on another interface other than inside? If so then this would not be a wise configuration change. You need to get your facts right or give us more detail.</P><P></P><P>It seems it is related to the next configuration line that is part of VPN LAN to LAN.</P><P></P><P>crypto map mymap 12 match address hooper</P><P></P><P>access-list hooper extended permit ip 192.168.0.0 255.255.255.0 192.168.1.0 255.255.255.0 </P><P>access-list hooper extended permit ip 10.0.0.0 255.255.255.0 192.168.1.0 255.255.255.0 </P><P>access-list hooper extended permit ip 192.168.30.0 255.255.255.0 192.168.1.0 255.255.255.0 </P></BODY></HTML> Wed, 13 Nov 2013 20:36:38 GMT https://community.cisco.com/t5/network-security/expanding-subnet-on-inside-interface/m-p/2419257#M308979 jumora 2013-11-13T20:36:38Z https://community.cisco.com/t5/network-security/expanding-subnet-on-inside-interface/m-p/2419258#M308980 <HTML><HEAD></HEAD><BODY><P>Could I get an example of what the new NAT line would look like?</P><P></P><P>To anwser your question, <SPAN style="font-size: 10pt;">192.168.1.0/24 network only resides on the inside interface. I don't think I understand why it would not be a wise config change?</SPAN></P><P></P><P><SPAN style="font-size: 10pt;">It looks like there is another router (192.168.0.8) that has the 192.168.30.x network on it.</SPAN></P><P></P><P><SPAN style="font-size: 10pt;"><BR /></SPAN></P></BODY></HTML> Wed, 13 Nov 2013 21:11:19 GMT https://community.cisco.com/t5/network-security/expanding-subnet-on-inside-interface/m-p/2419258#M308980 djl7780 2013-11-13T21:11:19Z https://community.cisco.com/t5/network-security/expanding-subnet-on-inside-interface/m-p/2419259#M308981 <HTML><HEAD></HEAD><BODY><P>A configuration example is simple but as I said you need to confirm what you have.</P><P></P><P>Configuration example:</P><P>object network new_obj-192.168.0.0</P><P> subnet 192.168.0.0 255.255.254.0</P><P></P><P>nat (inside,any) source static new_obj-192.168.0.0&nbsp; new_obj-192.168.0.0 destination static obj-10.73.77.0 obj-10.73.77.0 no-proxy-arp</P><P>This is an example but you can also edit the NATs that involve the object network obj-192.168.0.0</P><P></P><P>object network obj-192.168.0.0</P><P> subnet 192.168.0.0 255.255.254.0</P><P></P><P>And it changes all the configurations that involve this NAT.</P><P></P><P>You need to be careful with what you are doing. </P><P></P><P></P><P>Please rate the assistance</P></BODY></HTML> Wed, 13 Nov 2013 22:05:41 GMT https://community.cisco.com/t5/network-security/expanding-subnet-on-inside-interface/m-p/2419259#M308981 jumora 2013-11-13T22:05:41Z