ahw-cwb08-cgi-asa1# sh run
: Saved
:
ASA Version 8.0(4)
!
hostname ahw-cwb08-cgi-asa1
domain-name edm.cgi.com
enable password ZT9a9oZN5U5rsJoR encrypted
passwd ZT9a9oZN5U5rsJoR encrypted
names
dns-guard
!
interface Ethernet0/0
speed 100
duplex full
nameif outside
security-level 0
ip address 155.15.237.166 255.255.255.252
ospf cost 10
!
interface Ethernet0/1
nameif inside
security-level 100
ip address 199.213.186.16 255.255.254.0
ospf cost 10
!
interface Ethernet0/2
shutdown
no nameif
no security-level
no ip address
!
interface Ethernet0/3
shutdown
no nameif
no security-level
no ip address
!
interface Management0/0
shutdown
no nameif
no security-level
no ip address
management-only
!
banner exec WARNING
banner exec You have logged in to a secure CGI device. If you are not authorized to access this
banner exec device, log out immediately or risk possible criminal consequences.
banner asdm WARNING
banner asdm You have logged in to a secure CGI device. If you are not authorized to access this
banner asdm device, log out immediately or risk possible criminal consequences.
boot system disk0:/asa804-k8.bin
ftp mode passive
clock timezone MST -7
clock summer-time MDT recurring
dns server-group DefaultDNS
domain-name domain.domain.com
access-list Outside_access_in extended permit ip 155.15.237.172 255.255.255.252 any
access-list Outside_access_in extended permit ip 155.15.237.0 255.255.255.252 any
access-list Outside_access_in extended permit ip 155.15.237.164 255.255.255.252 any
access-list Outside_access_in extended permit ip 155.15.0.0 255.255.0.0 any
access-list Outside_access_in extended permit icmp any any echo
access-list Outside_access_in extended permit icmp any any echo-reply
access-list Outside_access_in extended permit icmp any any source-quench
access-list Outside_access_in extended permit icmp any any unreachable
access-list Outside_access_in extended permit icmp any any time-exceeded
access-list Outside_access_in remark Rule for Exchange mail flow
access-list Outside_access_in extended permit tcp any any eq smtp
access-list Outside_access_in extended permit tcp any any eq ftp
pager lines 24
logging enable
logging timestamp
logging trap debugging
logging asdm warnings
logging from-address blah@blah.com
logging recipient-address blah@blah.com level alerts
logging facility 16
logging host inside 199.213.186.223
logging rate-limit unlimited message 106100
mtu outside 1500
mtu inside 1500
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-615.bin
no asdm history enable
arp timeout 14400
static (inside,outside) 199.213.186.0 199.213.186.0 netmask 255.255.254.0
access-group Outside_access_in in interface outside
route outside 0.0.0.0 0.0.0.0 155.15.237.165 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
dynamic-access-policy-record DfltAccessPolicy
aaa authentication ssh console LOCAL
http server enable
http 199.213.186.0 255.255.254.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
no service resetoutbound interface outside
no service resetoutbound interface inside
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
