static nat using gloabl ip

david contreras · ‎02-13-2013

I have an ASA configured with a server in our DMZ.

It is currently configured to be accessed via the internet on port 80. That works.

Now they want to initiate traffic from the DMZ to the internet.

I thought the static NAT would keep the IP. Its actually a No-nat.

We have registered IPs on the DMZ and wanted to use them for the internet.

I am seeing that when the server initiates communication to the internet it is picking up a global address from the global (outside) 1 x.x.230.1-x.x230.254.

Below is my current configuration.

(these first 2 lines allow access from outside to inside)

access-list acl_out extended permit tcp any host x.x.73.91 eq www

static (dmz1,outside) x.x.73.91 143.101.73.91 netmask 255.255.255.255

global (outside) 1 x.x.230.1-x.x.230.254

If i do a show xlate

it shows:

global x.x.73.91 local x.x.73.91

Which is why I thought I did not need to do anything to initiate from the dmz1 interface to outside!

Jouni Forss · ‎02-13-2013

Hi,

To my understanding only thing overriding a Static NAT configuration as you mention above would be some other Static NAT (Normal or Policy) that is before this Static NAT in the running configuration. In this case the correction would be to remove the overriding rule and enter it again so it goes after the above mentioned Static NAT

Could you confirm the operation of the NAT (and other aspects) with using the "packet-tracer" command and copy/paste the output here

packet-tracer input dmz1 tcp

- Jouni

david contreras · ‎02-13-2013

Here you go.

NEC-FW1(config)# packet-tracer input dmz1 rawip x.x.73.91 80 4.79.142.202

Phase: 1

Type: FLOW-LOOKUP

Subtype:

Result: ALLOW

Config:

Additional Information:

Found no matching flow, creating a new flow

Phase: 2

Type: ROUTE-LOOKUP

Subtype: input

Result: ALLOW

Config:

Additional Information:

in 0.0.0.0 0.0.0.0 outside

Phase: 3

Type: ROUTE-LOOKUP

Subtype: input

Result: ALLOW

Config:

Additional Information:

in x.x.73.0 255.255.255.0 dmz1

Phase: 4

Type: ACCESS-LIST

Subtype: log

Result: ALLOW

Config:

access-group acl_dmz1 in interface dmz1

access-list acl_dmz1 extended permit ip any any

Additional Information:

Phase: 5

Type: IP-OPTIONS

Subtype:

Result: ALLOW

Config:

Additional Information:

Phase: 6

Type: NAT

Subtype:

Result: ALLOW

Config:

static (dmz1,outside) x.x.73.91 x.x.73.91 netmask 255.255.255.255

nat-control

match ip dmz1 host x.x.73.91 outside any

static translation to x.x.73.91

translate_hits = 1, untranslate_hits = 511

Additional Information:

Static translate x.x.73.91/0 to x.x.73.91/0 using netmask 255.255.255.255

Phase: 7

Type: NAT

Subtype: host-limits

Result: ALLOW

Config:

static (dmz1,outside) x.x.73.91 x.x.73.91 netmask 255.255.255.255

nat-control

match ip dmz1 host x.x.73.91 outside any

static translation to x.x.73.91

translate_hits = 1, untranslate_hits = 511

Additional Information:

Phase: 8

Type: FLOW-CREATION

Subtype:

Result: ALLOW

Config:

Additional Information:

New flow created with id 837544850, packet dispatched to next module

Result:

input-interface: dmz1

input-status: up

input-line-status: up

output-interface: dmz1

output-status: up

output-line-status: up

Action: allow

Jouni Forss · ‎02-13-2013

Hi,

Result seems kinda wierd considering it says both input/output interface is "dmz1"

Though your "packet-tracer" isnt exactly in the format that I suggested. (protocol set to "tcp")

I guess should probably see almost the whole config to see if theres anything special there. Unless the different "packet-tracer" command gives something that makes more sense.

I don't really know why there are 2 route-lookups for example. And why they are both "input". Then again not the first time the result of the command has seemed somewhat strange.

- Jouni

david contreras · ‎02-13-2013

FW1(config)# sh run

: Saved

:

ASA Version 8.2(1)

!

hostname FW1

names

dns-guard

!

interface GigabitEthernet0/0

nameif outside

security-level 0

ip address x.x.6.4 255.255.255.0

!

interface GigabitEthernet0/1

speed 100

duplex full

nameif inside

security-level 100

ip address 172.25.1.2 255.255.255.0

!

interface GigabitEthernet0/2

speed 100

duplex full

nameif dmz1

security-level 25

ip address x.x.0.5 255.255.255.0

!

interface GigabitEthernet0/3

speed 100

duplex full

nameif ServProv

security-level 50

ip address x.x.13.2 255.255.255.0

!

interface Management0/0

nameif management

security-level 100

ip address 192.168.1.1 255.255.255.0

management-only

!

boot system disk0:/asa822-k8.bin

boot system disk0:/asa821-k8.bin

ftp mode passive

object-group icmp-type ICMP

icmp-object echo

icmp-object echo-reply

icmp-object unreachable

icmp-object time-exceeded

object-group network WEB-Servers

access-list acl_out extended permit tcp any host x.x.250.18 eq https

access-list acl_out extended permit tcp any host x.x.250.18 eq www

access-list acl_out extended permit tcp any host x.x.250.70 eq www

access-list acl_out extended permit udp any host x.x.112.2 eq domain

access-list acl_out extended permit tcp any host x.x.112.2 eq domain

access-list acl_out extended permit udp any host x.x.112.2 eq ntp

output - suppressed

access-list acl_dmz1 extended permit ip host x.x.75.90 172.24.28.0 255.255.255.0

access-list acl_dmz1 extended permit ip host x.x.75.91 172.24.28.0 255.255.255.0

access-list acl_dmz1 extended permit ip host x.x.75.90 172.24.73.0 255.255.255.0

access-list acl_dmz1 extended permit ip host x.x.75.91 172.24.73.0 255.255.255.0

access-list acl_dmz1 extended permit ip any 172.24.172.0 255.255.255.0

access-list acl_dmz1 extended permit ip any 172.24.17.0 255.255.255.0

access-list acl_dmz1 extended permit ip host x.x.250.18 172.24.21.0 255.255.255.0

access-list acl_dmz1 extended permit ip host x.x.250.18 172.24.28.0 255.255.255.0

access-list acl_dmz1 extended permit ip any host x.y.32.10

access-list acl_dmz1 extended permit ip any 172.24.20.0 255.255.255.0

access-list acl_dmz1 extended permit ip any 172.24.28.0 255.255.255.0

access-list acl_dmz1 extended permit ip any host 172.25.248.12

access-list acl_dmz1 extended permit ip x.x.125.0 255.255.255.0 10.11.17.0 255.255.255.0

access-list acl_dmz1 extended permit ip x.x.125.0 255.255.255.0 10.25.125.0 255.255.255.0

access-list acl_dmz1 extended permit ip x.x.130.0 255.255.255.0 10.25.125.0 255.255.255.0

access-list acl_dmz1 extended permit ip x.x.130.0 255.255.255.0 10.11.17.0 255.255.255.0

access-list acl_dmz1 extended permit tcp host x.x.75.142 host 172.24.76.76 eq 5000

access-list acl_dmz1 extended deny tcp any any eq 5000

access-list acl_dmz1 extended deny udp any any eq 1434

access-list acl_dmz1 extended deny udp any any eq 3127

access-list acl_dmz1 extended deny tcp any any eq 6346

access-list acl_dmz1 extended deny tcp any any eq 6699

access-list acl_dmz1 extended deny udp any any eq 1214

access-list acl_dmz1 extended deny ip any host 63.210.247.160

access-list acl_dmz1 extended deny ip any host 208.49.21.95

access-list acl_dmz1 extended deny ip any host 165.254.12.201

access-list acl_dmz1 extended deny ip any host 130.94.92.113

access-list acl_dmz1 extended deny ip any host 216.235.81.6

access-list acl_dmz1 extended deny ip any host 212.187.204.47

access-list acl_dmz1 extended deny ip any host 66.151.128.9

access-list acl_dmz1 extended deny ip any 64.124.45.0 255.255.255.0

access-list acl_dmz1 extended permit tcp any 172.24.0.0 255.255.0.0 eq 135

access-list acl_dmz1 extended permit tcp any 172.25.248.0 255.255.254.0

access-list acl_dmz1 extended permit tcp any 128.191.0.0 255.255.0.0 eq 135

access-list acl_dmz1 extended permit tcp any x.y.0.0 255.255.0.0 eq 135

access-list acl_dmz1 extended permit tcp any 157.123.0.0 255.255.0.0 eq 135

access-list acl_dmz1 extended permit tcp x.x.124.0 255.255.255.0 172.26.128.0 255.255.128.0

access-list acl_dmz1 extended permit tcp 172.16.64.0 255.255.255.0 172.26.128.0 255.255.128.0

access-list acl_dmz1 extended deny udp any any eq 135

access-list acl_dmz1 extended deny tcp any any eq 135

access-list acl_dmz1 extended deny udp any any eq 445

access-list acl_dmz1 extended deny tcp any any eq 138

access-list acl_dmz1 extended deny udp any any eq 139

access-list acl_dmz1 extended deny udp any any eq 2110

access-list acl_dmz1 extended deny tcp any any eq 2110

access-list acl_dmz1 extended deny tcp any any eq 3410

access-list acl_dmz1 extended permit tcp any host 172.24.20.60 eq smtp

access-list acl_dmz1 extended permit tcp host x.x.75.46 any eq smtp

access-list acl_dmz1 extended permit tcp host x.x.250.22 any eq smtp

access-list acl_dmz1 extended permit tcp host x.x.250.61 any eq smtp

access-list acl_dmz1 extended permit tcp host x.x.112.2 any eq smtp

access-list acl_dmz1 extended permit tcp host x.x.0.20 any eq smtp

access-list acl_dmz1 extended permit tcp host x.x.0.21 any eq smtp

access-list acl_dmz1 extended permit tcp host x.w.66.58 any eq smtp

access-list acl_dmz1 extended deny tcp any any eq 465

access-list acl_dmz1 extended permit tcp x.x.250.0 255.255.255.0 any eq smtp

access-list acl_dmz1 extended permit tcp x.x.129.0 255.255.255.0 host 172.25.144.5 eq smtp

access-list acl_dmz1 extended permit tcp x.x.129.0 255.255.255.0 host 172.25.145.5 eq smtp

access-list acl_dmz1 extended deny tcp any any eq smtp

access-list acl_dmz1 extended permit ip any any

access-list acl_dmz1 extended permit udp host x.x.157.12 any eq tftp

access-list acl_dmz1 extended permit tcp host x.x.157.12 any eq ftp

access-list acl_dmz1 extended permit tcp host x.x.157.12 any eq ftp-data

access-list acl_dmz1 extended permit ip any host x.x.24.62

access-list acl_dmz1 extended permit ip any 172.24.54.0 255.255.255.0

access-list acl_dmz1 extended permit ip any 172.24.21.0 255.255.255.0

access-list acl_dmz1 extended permit ip any 172.16.68.0 255.255.255.0

access-list acl_dmz1 extended permit ip host x.x.250.52 host 172.24.23.150

access-list acl_dmz1 extended permit icmp x.x.75.0 255.255.255.0 any echo

access-list acl_dmz1 extended permit icmp x.x.75.0 255.255.255.0 any echo-reply

access-list acl_dmz1 extended permit ip host x.x.75.90 host x.z.186.69

access-list acl_dmz1 extended permit ip 172.16.51.0 255.255.255.0 host 10.38.65.12

access-list acl_ServProv extended deny tcp any any eq 5000

access-list acl_ServProv extended deny tcp any any eq 465

access-list acl_ServProv extended permit tcp host x.x.159.56 172.24.130.0 255.255.254.0 eq 1044

access-list acl_ServProv extended permit tcp host x.x.159.56 172.24.132.0 255.255.254.0 eq 1044

access-list acl_ServProv extended permit tcp host x.x.159.56 172.24.130.0 255.255.254.0 eq 5690

access-list acl_ServProv extended permit tcp host x.x.159.56 172.24.132.0 255.255.254.0 eq 5690

access-list acl_in extended permit ip 172.24.20.0 255.255.255.0 any

access-list acl_in extended permit ip 172.24.17.0 255.255.255.0 any

access-list acl_in extended permit ip 172.24.172.0 255.255.255.0 any

access-list acl_in extended permit ip 172.24.28.0 255.255.255.0 any

access-list acl_in extended permit ip 172.24.35.0 255.255.255.0 x.x.200.0 255.255.255.0

access-list acl_in extended permit ip 172.24.35.0 255.255.255.0 172.16.53.0 255.255.255.0

access-list acl_in extended permit ip 172.24.73.0 255.255.255.0 any

access-list acl_in extended permit ip host x.y.32.10 any

access-list acl_in extended permit ip host 172.24.114.91 any

access-list acl_in extended permit tcp any host x.x.159.54 eq https

access-list acl_in extended permit tcp any host x.x.159.54 eq www

access-list acl_in extended permit udp any host x.x.159.54 eq 1935

access-list acl_in extended permit tcp any host x.x.159.54 eq 1935

access-list acl_in extended permit tcp any host x.x.159.50 eq 1434

access-list acl_in extended permit udp any host x.x.159.50 eq 1434

access-list acl_in extended permit udp 172.24.142.0 255.255.255.0 host x.x.159.55 eq 1434

access-list acl_in extended permit udp 172.24.142.0 255.255.255.0 host x.x.159.53 eq 1434

access-list acl_in extended permit udp 172.24.142.0 255.255.255.0 host x.x.159.52 eq 1434

access-list acl_in extended permit udp 172.24.142.0 255.255.255.0 host x.x.159.51 eq 1434

access-list acl_in extended permit tcp any host x.x.157.110 eq 1434

access-list acl_in extended permit udp any host x.x.157.110 eq 1434

access-list acl_in extended deny ip host 172.24.75.50 any

access-list acl_in extended deny ip host 172.24.21.51 any

access-list acl_in extended deny ip host 172.24.21.53 any

access-list acl_in extended deny ip host x.w.80.218 any

access-list acl_in extended deny ip host x.w.176.4 any

access-list acl_in extended deny ip host x.w.40.54 any

access-list acl_in extended deny ip host x.w.47.151 any

access-list acl_in extended deny udp any any eq tftp

access-list acl_in extended deny tcp any any eq 6346

access-list acl_in extended deny tcp any any eq 6699

access-list acl_in extended deny udp any any eq 1434

access-list acl_in extended deny ip any host x.x.128.9

access-list acl_in extended deny tcp any any eq 8998

access-list acl_in extended deny udp any any eq 8998

access-list acl_in extended deny tcp any any eq 17300

access-list acl_in extended deny udp any any eq 17300

access-list acl_in extended deny tcp any any eq 27374

access-list acl_in extended deny udp any any eq 27374

access-list acl_in extended deny udp any any eq 3127

access-list acl_in extended deny tcp any any eq 5000

access-list acl_in extended deny tcp any any eq 3410

access-list acl_in extended permit tcp x.x.0.0 255.255.0.0 any eq 1025

access-list acl_in extended deny tcp any any range 6881 6999

access-list acl_in extended permit tcp host x.w.66.68 any eq 1025

access-list acl_in extended deny tcp any any eq 1025

access-list acl_in extended permit ip any any

access-list acl_in extended permit tcp any host x.x.250.39 eq 5222

access-list acl_in extended permit ip any 172.24.54.0 255.255.255.0

access-list acl_in extended permit ip any 172.24.21.0 255.255.255.0

access-list acl_in extended permit ip any 172.16.68.0 255.255.255.0

access-list acl_in extended permit tcp 172.24.142.0 255.255.255.0 host x.x.159.51 eq 8002

access-list acl_in extended permit ip host x.x.250.18 172.24.21.0 255.255.255.0

pager lines 24

logging enable

logging timestamp

logging buffered warnings

logging trap warnings

logging history errors

logging asdm errors

logging from-address necfw@necam.com

logging recipient-address steve.nguyen@necam.com level emergencies

logging facility 23

logging queue 2056

logging host inside 172.24.20.73

mtu outside 1500

mtu inside 1500

mtu dmz1 1500

mtu ServProv 1500

mtu management 1500

ip verify reverse-path interface outside

ip verify reverse-path interface inside

ip verify reverse-path interface dmz1

ip verify reverse-path interface ServProv

ip audit name Out-attack attack action drop reset

ip audit name In-attack attack action drop reset

ip audit name dmz-attack attack action drop reset

ip audit name ServProv-attack attack action drop reset

ip audit interface outside Out-attack

ip audit interface inside In-attack

ip audit interface dmz1 dmz-attack

ip audit interface ServProv ServProv-attack

no failover

icmp unreachable rate-limit 1 burst-size 1

asdm image disk0:/asdm-621.bin

no asdm history enable

arp timeout 14400

nat-control

global (outside) 1 x.x.230.1-x.x.230.254

global (outside) 1 x.x.231.1-x.x.231.254

global (outside) 2 x.x.243.1-x.x.243.254

global (outside) 3 x.x.241.1-x.x.241.20

global (dmz1) 1 x.x.242.1-x.x.242.254

global (ServProv) 2 x.x.244.1-x.x.244.254

nat (inside) 1 0.0.0.0 0.0.0.0 tcp 22000 0

nat (dmz1) 1 0.0.0.0 0.0.0.0 tcp 28000 0

nat (ServProv) 2 0.0.0.0 0.0.0.0 tcp 500 0

static (dmz1,outside) x.x.0.0 x.x.0.0 netmask 255.255.255.0

static (dmz1,outside) x.x.147.12 x.x.147.12 netmask 255.255.255.255

static (dmz1,outside) x.x.147.13 x.x.147.13 netmask 255.255.255.255

static (dmz1,outside) x.x.147.52 x.x.147.52 netmask 255.255.255.255

static (dmz1,outside) x.x.147.53 x.x.147.53 netmask 255.255.255.255

static (dmz1,outside) x.x.147.54 x.x.147.54 netmask 255.255.255.255

static (dmz1,outside) x.x.147.55 x.x.147.55 netmask 255.255.255.255

static (dmz1,outside) x.x.147.101 x.x.147.101 netmask 255.255.255.255

static (dmz1,outside) x.x.250.20 x.x.250.20 netmask 255.255.255.255

static (dmz1,outside) x.x.250.21 x.x.250.21 netmask 255.255.255.255

static (dmz1,outside) x.x.250.23 x.x.250.23 netmask 255.255.255.255

static (dmz1,outside) x.x.250.25 x.x.250.25 netmask 255.255.255.255

static (dmz1,outside) x.x.250.26 x.x.250.26 netmask 255.255.255.255

static (dmz1,outside) x.x.250.27 x.x.250.27 netmask 255.255.255.255

static (dmz1,outside) x.x.250.30 x.x.250.30 netmask 255.255.255.255

static (dmz1,outside) x.x.250.42 x.x.250.42 netmask 255.255.255.255

static (dmz1,outside) x.x.250.48 x.x.250.48 netmask 255.255.255.255

static (dmz1,outside) x.x.250.49 x.x.250.49 netmask 255.255.255.255

static (dmz1,outside) x.x.250.54 x.x.250.54 netmask 255.255.255.255

static (dmz1,outside) x.x.250.59 x.x.250.59 netmask 255.255.255.255

static (dmz1,outside) x.x.250.67 x.x.250.67 netmask 255.255.255.255

static (dmz1,outside) x.x.250.77 x.x.250.77 netmask 255.255.255.255

static (dmz1,outside) x.x.250.120 x.x.250.120 netmask 255.255.255.255

static (dmz1,outside) x.x.250.211 x.x.250.211 netmask 255.255.255.255

static (dmz1,outside) x.x.250.212 x.x.250.212 netmask 255.255.255.255

static (dmz1,outside) x.x.250.5 x.x.250.5 netmask 255.255.255.255

static (dmz1,outside) x.w.66.10 x.w.66.10 netmask 255.255.255.255

static (dmz1,outside) x.w.66.20 x.w.66.20 netmask 255.255.255.255

static (dmz1,outside) x.w.66.30 x.w.66.30 netmask 255.255.255.255

static (dmz1,outside) x.w.66.31 x.w.66.31 netmask 255.255.255.255

static (dmz1,outside) x.w.66.50 x.w.66.50 netmask 255.255.255.255

static (dmz1,outside) x.w.66.60 x.w.66.60 netmask 255.255.255.255

static (dmz1,outside) x.x.75.105 x.x.75.105 netmask 255.255.255.255

static (dmz1,outside) x.x.75.11 x.x.75.11 netmask 255.255.255.255

static (dmz1,outside) x.x.75.107 x.x.75.107 netmask 255.255.255.255

static (dmz1,outside) x.x.75.109 x.x.75.109 netmask 255.255.255.255

static (dmz1,outside) x.x.75.110 x.x.75.110 netmask 255.255.255.255

static (dmz1,outside) x.x.75.112 x.x.75.112 netmask 255.255.255.255

static (dmz1,outside) x.x.75.114 x.x.75.114 netmask 255.255.255.255

static (dmz1,outside) x.x.75.12 x.x.75.12 netmask 255.255.255.255

static (dmz1,outside) x.x.75.13 x.x.75.13 netmask 255.255.255.255

static (dmz1,outside) x.x.75.14 x.x.75.14 netmask 255.255.255.255

static (dmz1,outside) x.x.75.15 x.x.75.15 netmask 255.255.255.255

static (dmz1,outside) x.x.75.16 x.x.75.16 netmask 255.255.255.255

static (dmz1,outside) x.x.75.17 x.x.75.17 netmask 255.255.255.255

static (dmz1,outside) x.x.75.18 x.x.75.18 netmask 255.255.255.255

static (dmz1,outside) x.x.75.29 x.x.75.29 netmask 255.255.255.255

static (dmz1,outside) x.x.75.30 x.x.75.30 netmask 255.255.255.255

static (dmz1,outside) x.x.75.19 x.x.75.19 netmask 255.255.255.255

static (dmz1,outside) x.x.75.20 x.x.75.20 netmask 255.255.255.255

static (dmz1,outside) x.x.73.50 x.x.73.50 netmask 255.255.255.255

static (dmz1,outside) x.x.73.51 x.x.73.51 netmask 255.255.255.255

static (inside,dmz1) x.y.0.0 x.y.0.0 netmask 255.255.0.0

static (inside,dmz1) 198.170.2.0 198.170.2.0 netmask 255.255.255.0

static (inside,dmz1) x.x.30.0 x.x.30.0 netmask 255.255.255.0

static (inside,dmz1) 192.216.80.0 192.216.80.0 netmask 255.255.255.0

<--- More --->

static (inside,dmz1) x.x.146.0 x.x.146.0 netmask 255.255.255.0

static (inside,dmz1) x.x.224.0 x.x.224.0 netmask 255.255.255.0

static (inside,dmz1) x.x.44.0 x.x.44.0 netmask 255.255.255.0

static (inside,dmz1) x.x.86.0 x.x.86.0 netmask 255.255.255.0

static (inside,dmz1) x.x.145.0 x.x.145.0 netmask 255.255.255.0

static (inside,dmz1) x.x.130.0 x.x.130.0 netmask 255.255.255.0

static (inside,dmz1) 198.170.1.0 198.170.1.0 netmask 255.255.255.0

static (inside,dmz1) x.w.40.0 x.w.40.0 netmask 255.255.255.0

static (dmz1,outside) x.x.73.55 x.x.73.55 netmask 255.255.255.255

static (dmz1,outside) x.x.112.2 x.x.112.2 netmask 255.255.255.255

static (dmz1,outside) x.x.112.3 x.x.112.3 netmask 255.255.255.255

static (dmz1,outside) x.x.112.7 x.x.112.7 netmask 255.255.255.255

static (dmz1,outside) x.x.112.21 x.x.112.21 netmask 255.255.255.255

static (dmz1,outside) x.x.112.30 x.x.112.30 netmask 255.255.255.255

static (dmz1,outside) x.x.112.35 x.x.112.35 netmask 255.255.255.255

static (dmz1,outside) x.x.112.36 x.x.112.36 netmask 255.255.255.255

static (dmz1,outside) x.x.112.50 x.x.112.50 netmask 255.255.255.255

static (dmz1,outside) x.x.10.100 x.x.10.100 netmask 255.255.255.255

static (inside,dmz1) x.x.36.0 x.x.36.0 netmask 255.255.255.0

static (inside,dmz1) x.w.162.0 x.w.162.0 netmask 255.255.255.0

static (inside,dmz1) x.w.152.0 x.w.152.0 netmask 255.255.255.0

static (inside,dmz1) x.w.16.0 x.w.16.0 netmask 255.255.255.0

static (inside,dmz1) x.w.223.0 x.w.223.0 netmask 255.255.255.0

static (inside,dmz1) x.w.232.0 x.w.232.0 netmask 255.255.255.0

static (inside,dmz1) x.w.240.0 x.w.240.0 netmask 255.255.255.0

static (inside,dmz1) x.w.200.0 x.w.200.0 netmask 255.255.255.0

static (inside,dmz1) x.w.138.0 x.w.138.0 netmask 255.255.255.0

static (inside,dmz1) x.w.80.0 x.w.80.0 netmask 255.255.255.0

static (inside,dmz1) x.w.204.0 x.w.204.0 netmask 255.255.255.0

static (inside,dmz1) x.w.136.0 x.w.136.0 netmask 255.255.255.0

static (inside,dmz1) x.w.48.0 x.w.48.0 netmask 255.255.255.0

static (inside,dmz1) x.w.28.0 x.w.28.0 netmask 255.255.255.0

static (inside,dmz1) x.w.72.0 x.w.72.0 netmask 255.255.255.0

static (inside,dmz1) x.w.104.0 x.w.104.0 netmask 255.255.255.0

static (inside,dmz1) x.w.112.0 x.w.112.0 netmask 255.255.255.0

static (inside,dmz1) x.w.132.0 x.w.132.0 netmask 255.255.255.0

static (inside,dmz1) x.w.144.0 x.w.144.0 netmask 255.255.255.0

static (inside,dmz1) x.w.146.0 x.w.146.0 netmask 255.255.255.0

static (inside,dmz1) x.w.47.0 x.w.47.0 netmask 255.255.255.0

static (inside,dmz1) x.w.176.0 x.w.176.0 netmask 255.255.255.0

static (inside,dmz1) x.w.116.0 x.w.116.0 netmask 255.255.255.0

static (inside,dmz1) 172.25.0.0 172.25.0.0 netmask 255.255.0.0

static (inside,ServProv) 172.24.112.0 172.24.112.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.113.0 172.24.113.0 netmask 255.255.255.0

static (inside,dmz1) 172.24.21.0 172.24.21.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.21.0 172.24.21.0 netmask 255.255.255.0

static (inside,dmz1) 172.24.20.0 172.24.20.0 netmask 255.255.255.0

static (inside,dmz1) 172.24.32.0 172.24.32.0 netmask 255.255.224.0

static (inside,dmz1) 172.24.96.0 172.24.96.0 netmask 255.255.224.0

static (inside,ServProv) 172.24.232.0 172.24.232.0 netmask 255.255.255.0

static (inside,dmz1) 172.24.128.0 172.24.128.0 netmask 255.255.224.0

static (inside,dmz1) 172.24.160.0 172.24.160.0 netmask 255.255.224.0

static (inside,dmz1) 172.24.192.0 172.24.192.0 netmask 255.255.224.0

static (inside,dmz1) 172.24.224.0 172.24.224.0 netmask 255.255.224.0

static (inside,dmz1) 172.24.64.0 172.24.64.0 netmask 255.255.224.0

static (inside,dmz1) 172.24.25.0 172.24.25.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.233.0 172.24.233.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.20.0 172.24.20.0 netmask 255.255.255.0

static (inside,dmz1) 172.24.18.0 172.24.18.0 netmask 255.255.255.0

static (ServProv,dmz1) x.x.149.0 x.x.149.0 netmask 255.255.255.0

static (inside,dmz1) 10.0.0.0 10.0.0.0 netmask 255.0.0.0

static (dmz1,outside) x.x.147.51 x.x.147.51 netmask 255.255.255.255

static (inside,ServProv) 147.76.0.0 147.76.0.0 netmask 255.255.0.0

static (dmz1,outside) x.w.66.51 x.w.66.51 netmask 255.255.255.255

static (dmz1,outside) x.x.73.40 x.x.73.40 netmask 255.255.255.255

static (dmz1,outside) x.x.73.30 x.x.73.30 netmask 255.255.255.255

static (inside,dmz1) x.x.94.0 x.x.94.0 netmask 255.255.255.0

static (inside,dmz1) x.w.105.0 x.w.105.0 netmask 255.255.255.0

static (inside,dmz1) x.w.120.0 x.w.120.0 netmask 255.255.255.0

static (dmz1,outside) x.x.147.240 x.x.147.60 netmask 255.255.255.255

static (dmz1,outside) x.w.106.50 x.w.106.50 netmask 255.255.255.255

static (ServProv,dmz1) x.x.13.1 x.x.13.1 netmask 255.255.255.255

static (dmz1,outside) x.x.147.66 x.x.147.66 netmask 255.255.255.255

static (dmz1,outside) x.x.250.105 x.x.250.105 netmask 255.255.255.255

static (inside,dmz1) x.x.35.0 x.x.35.0 netmask 255.255.255.0

static (inside,dmz1) x.w.125.0 x.w.125.0 netmask 255.255.255.0

static (dmz1,outside) x.x.73.57 x.x.73.57 netmask 255.255.255.255

static (dmz1,outside) x.x.147.81 x.x.147.81 netmask 255.255.255.255

static (dmz1,outside) x.x.147.91 x.x.147.91 netmask 255.255.255.255

static (inside,dmz1) 157.123.160.0 157.123.160.0 netmask 255.255.252.0

static (inside,dmz1) 157.123.96.0 157.123.96.0 netmask 255.255.240.0

static (inside,dmz1) 157.123.136.0 157.123.136.0 netmask 255.255.252.0

static (inside,dmz1) 157.123.121.0 157.123.121.0 netmask 255.255.255.0

static (dmz1,outside) x.w.66.13 x.w.66.13 netmask 255.255.255.255

static (dmz1,outside) x.w.66.14 x.w.66.14 netmask 255.255.255.255

static (dmz1,outside) x.w.66.15 x.w.66.15 netmask 255.255.255.255

static (inside,dmz1) 172.24.6.0 172.24.6.0 netmask 255.255.255.0

static (inside,dmz1) 172.24.8.0 172.24.8.0 netmask 255.255.255.0

static (inside,dmz1) 172.24.4.0 172.24.4.0 netmask 255.255.255.0

static (inside,dmz1) 172.24.153.0 172.24.153.0 netmask 255.255.255.0

static (inside,dmz1) x.x.37.0 x.x.37.0 netmask 255.255.255.0

static (inside,dmz1) x.w.161.0 x.w.161.0 netmask 255.255.255.0

static (dmz1,outside) x.x.250.200 x.x.250.200 netmask 255.255.255.255

static (dmz1,outside) x.x.147.57 x.x.147.57 netmask 255.255.255.255

static (dmz1,outside) x.x.147.56 x.x.147.56 netmask 255.255.255.255

static (dmz1,outside) x.x.250.71 x.x.250.71 netmask 255.255.255.255

static (dmz1,outside) x.x.75.254 x.x.75.254 netmask 255.255.255.255

static (dmz1,outside) x.x.13.100 x.x.13.100 netmask 255.255.255.255

static (dmz1,outside) x.x.73.200 x.x.73.200 netmask 255.255.255.255

static (dmz1,outside) x.x.75.250 x.x.75.250 netmask 255.255.255.255

static (dmz1,outside) x.x.75.251 x.x.75.251 netmask 255.255.255.255

static (dmz1,outside) x.x.75.252 x.x.75.252 netmask 255.255.255.255

static (inside,dmz1) 172.24.17.100 172.24.17.100 netmask 255.255.255.255

static (inside,dmz1) 172.24.17.110 172.24.17.110 netmask 255.255.255.255

static (inside,dmz1) 203.127.246.0 203.127.246.0 netmask 255.255.255.0

static (dmz1,outside) x.x.92.0 x.x.92.0 netmask 255.255.255.0

static (dmz1,outside) x.x.250.221 x.x.250.221 netmask 255.255.255.255

static (dmz1,outside) x.x.250.222 x.x.250.222 netmask 255.255.255.255

static (inside,dmz1) 1x.15.200.0 1x.15.200.0 netmask 255.255.255.0

static (inside,dmz1) 1x.15.108.0 1x.15.108.0 netmask 255.255.255.0

static (inside,dmz1) 1x.191.172.0 1x.191.172.0 netmask 255.255.252.0

static (inside,dmz1) 172.28.4.0 172.28.4.0 netmask 255.255.255.0

static (dmz1,outside) x.x.75.35 x.x.75.35 netmask 255.255.255.255

static (inside,dmz1) 172.24.17.200 172.24.17.200 netmask 255.255.255.255

static (dmz1,outside) x.x.5.140 x.x.5.140 netmask 255.255.255.255

static (dmz1,outside) x.w.66.41 x.w.66.41 netmask 255.255.255.255

static (dmz1,outside) x.x.250.103 x.x.250.103 netmask 255.255.255.255

static (inside,dmz1) 172.24.17.51 172.24.17.51 netmask 255.255.255.255

static (dmz1,outside) x.x.75.121 x.x.75.121 netmask 255.255.255.255

static (dmz1,outside) x.x.147.83 x.x.147.83 netmask 255.255.255.255

static (inside,dmz1) x.x.1.250 x.x.1.250 netmask 255.255.255.255

static (dmz1,outside) x.x.147.15 x.x.147.15 netmask 255.255.255.255

static (inside,dmz1) 1x.15.110.1 1x.15.110.1 netmask 255.255.255.255

static (ServProv,dmz1) x.x.120.0 x.x.120.0 netmask 255.255.255.0

static (ServProv,dmz1) x.x.10.0 x.x.10.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.17.0 172.24.17.0 netmask 255.255.255.0

static (dmz1,outside) x.x.176.17 x.x.176.17 netmask 255.255.255.255

static (dmz1,outside) x.x.176.15 x.x.176.15 netmask 255.255.255.255

static (dmz1,outside) x.x.250.113 x.x.250.113 netmask 255.255.255.255

static (ServProv,dmz1) x.x.154.0 x.x.154.0 netmask 255.255.255.0

static (dmz1,outside) x.x.250.56 x.x.250.56 netmask 255.255.255.255

static (dmz1,outside) x.x.250.61 x.x.250.61 netmask 255.255.255.255

static (dmz1,outside) x.x.250.60 x.x.250.60 netmask 255.255.255.255

static (dmz1,outside) x.x.250.58 x.x.250.58 netmask 255.255.255.255

static (dmz1,outside) x.x.250.57 x.x.250.57 netmask 255.255.255.255

static (inside,dmz1) 172.28.203.1 172.28.203.1 netmask 255.255.255.255

static (inside,dmz1) 172.28.203.2 172.28.203.2 netmask 255.255.255.255

static (inside,dmz1) 172.28.203.3 172.28.203.3 netmask 255.255.255.255

static (inside,dmz1) 172.28.203.4 172.28.203.4 netmask 255.255.255.255

static (dmz1,outside) x.x.95.20 x.x.95.20 netmask 255.255.255.255

static (dmz1,outside) x.x.95.21 x.x.95.21 netmask 255.255.255.255

static (dmz1,outside) x.x.250.191 x.x.250.191 netmask 255.255.255.255

static (inside,dmz1) 172.24.27.31 172.24.27.31 netmask 255.255.255.255

static (inside,dmz1) 172.24.27.19 172.24.27.19 netmask 255.255.255.255

static (inside,dmz1) 172.24.27.20 172.24.27.20 netmask 255.255.255.255

static (inside,dmz1) 172.24.27.22 172.24.27.22 netmask 255.255.255.255

static (inside,dmz1) 172.24.27.64 172.24.27.64 netmask 255.255.255.192

static (inside,dmz1) 172.24.27.128 172.24.27.128 netmask 255.255.255.128

static (inside,dmz1) 172.24.27.30 172.24.27.30 netmask 255.255.255.255

static (inside,dmz1) 172.24.27.15 172.24.27.15 netmask 255.255.255.255

static (inside,dmz1) 172.24.27.11 172.24.27.11 netmask 255.255.255.255

static (inside,dmz1) 172.24.27.10 172.24.27.10 netmask 255.255.255.255

static (inside,dmz1) 172.24.17.21 172.24.17.21 netmask 255.255.255.255

static (inside,dmz1) 192.168.106.0 192.168.106.0 netmask 255.255.255.0

static (dmz1,outside) x.x.250.69 x.x.250.69 netmask 255.255.255.255

static (inside,dmz1) 172.24.17.30 172.24.17.30 netmask 255.255.255.255

static (inside,dmz1) 128.191.160.0 128.191.160.0 netmask 255.255.252.0

static (inside,dmz1) 128.191.140.0 128.191.140.0 netmask 255.255.252.0

static (inside,dmz1) 172.24.27.32 172.24.27.32 netmask 255.255.255.224

static (dmz1,outside) x.x.147.58 x.x.147.58 netmask 255.255.255.255

static (inside,dmz1) 172.24.27.254 172.24.27.254 netmask 255.255.255.255

static (inside,ServProv) 172.24.27.254 172.24.27.254 netmask 255.255.255.255

static (dmz1,outside) x.x.147.84 x.x.147.84 netmask 255.255.255.255

static (dmz1,outside) x.x.176.76 x.x.176.76 netmask 255.255.255.255

static (ServProv,outside) x.x.120.144 x.x.120.144 netmask 255.255.255.240

static (ServProv,outside) x.x.120.160 x.x.120.160 netmask 255.255.255.240

static (ServProv,outside) x.x.120.192 x.x.120.192 netmask 255.255.255.224

static (ServProv,outside) x.x.120.224 x.x.120.224 netmask 255.255.255.240

static (ServProv,outside) x.x.120.252 x.x.120.252 netmask 255.255.255.255

static (inside,ServProv) 172.24.27.10 172.24.27.10 netmask 255.255.255.255

static (inside,dmz1) 203.127.254.7 203.127.254.7 netmask 255.255.255.255

static (dmz1,outside) x.x.112.5 x.x.112.5 netmask 255.255.255.255

static (dmz1,outside) x.x.112.4 x.x.112.4 netmask 255.255.255.255

static (dmz1,outside) x.x.75.122 x.x.75.122 netmask 255.255.255.255

static (inside,ServProv) 172.24.114.0 172.24.114.0 netmask 255.255.255.0

static (dmz1,outside) x.x.75.25 x.x.75.25 netmask 255.255.255.255

static (inside,dmz1) 172.24.27.13 172.24.27.13 netmask 255.255.255.255

static (ServProv,outside) x.x.120.0 x.x.120.0 netmask 255.255.255.128

static (inside,dmz1) 172.24.27.0 172.24.27.0 netmask 255.255.255.0

static (dmz1,outside) x.x.250.100 x.x.250.100 netmask 255.255.255.255

static (dmz1,outside) x.x.250.197 x.x.250.197 netmask 255.255.255.255

static (dmz1,outside) x.x.250.193 x.x.250.193 netmask 255.255.255.255

static (dmz1,outside) x.x.250.196 x.x.250.196 netmask 255.255.255.255

static (dmz1,outside) x.w.66.53 x.w.66.53 netmask 255.255.255.255

static (inside,dmz1) x.x.82.0 x.x.82.0 netmask 255.255.255.0

static (inside,dmz1) x.w.222.0 x.w.222.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.27.11 172.24.27.11 netmask 255.255.255.255

static (inside,dmz1) 192.168.100.0 192.168.100.0 netmask 255.255.255.0

static (inside,dmz1) 192.168.101.0 192.168.101.0 netmask 255.255.255.0

static (inside,dmz1) x.x.99.0 x.x.99.0 netmask 255.255.255.0

static (dmz1,outside) x.x.229.67 x.x.147.67 netmask 255.255.255.255

static (dmz1,outside) x.x.10.196 x.x.10.196 netmask 255.255.255.255

static (inside,dmz1) x.w.102.0 x.w.102.0 netmask 255.255.255.0

static (dmz1,outside) x.x.75.115 x.x.75.115 netmask 255.255.255.255

static (ServProv,outside) x.x.10.196 x.x.10.196 netmask 255.255.255.255

static (inside,dmz1) 1x.1x.137.0 1x.1x.137.0 netmask 255.255.255.0

static (dmz1,outside) x.x.250.11 x.x.250.11 netmask 255.255.255.255

static (dmz1,outside) x.x.75.47 x.x.75.47 netmask 255.255.255.255

static (dmz1,outside) x.x.75.42 x.x.75.42 netmask 255.255.255.255

static (inside,ServProv) 172.24.27.20 172.24.27.20 netmask 255.255.255.255

static (inside,dmz1) 172.24.22.0 172.24.22.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.22.0 172.24.22.0 netmask 255.255.255.0

static (dmz1,outside) x.x.75.50 x.x.75.50 netmask 255.255.255.255

static (inside,ServProv) 172.24.172.0 172.24.172.0 netmask 255.255.255.0

static (inside,ServProv) x.x.35.0 x.x.35.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.160.0 172.24.160.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.215.0 172.24.215.0 netmask 255.255.255.0

static (dmz1,outside) x.x.176.45 x.x.176.45 netmask 255.255.255.255

static (inside,ServProv) 172.24.25.0 172.24.25.0 netmask 255.255.255.0

static (ServProv,dmz1) x.x.13.10 x.x.13.10 netmask 255.255.255.255

static (ServProv,dmz1) x.x.13.20 x.x.13.20 netmask 255.255.255.255

static (ServProv,dmz1) x.x.164.0 x.x.164.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.142.0 172.24.142.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.72.0 172.24.72.0 netmask 255.255.255.0

static (dmz1,outside) x.x.250.202 x.x.250.202 netmask 255.255.255.255

static (dmz1,outside) x.x.112.112 x.x.112.112 netmask 255.255.255.255

static (inside,ServProv) 172.24.54.0 172.24.54.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.161.0 172.24.161.0 netmask 255.255.255.0

static (dmz1,outside) x.w.66.100 x.w.66.100 netmask 255.255.255.255

static (dmz1,outside) x.x.75.150 x.x.75.150 netmask 255.255.255.255

static (dmz1,outside) x.x.75.152 x.x.75.152 netmask 255.255.255.255

static (dmz1,outside) x.x.75.153 x.x.75.153 netmask 255.255.255.255

static (dmz1,outside) x.x.75.154 x.x.75.154 netmask 255.255.255.255

static (inside,dmz1) 172.24.28.0 172.24.28.0 netmask 255.255.255.0

static (inside,dmz1) 172.26.144.0 172.26.144.0 netmask 255.255.240.0

static (inside,dmz1) 172.26.160.0 172.26.160.0 netmask 255.255.240.0

static (dmz1,outside) x.x.75.140 x.x.75.140 netmask 255.255.255.255

static (dmz1,outside) x.x.75.141 x.x.75.141 netmask 255.255.255.255

static (dmz1,outside) x.x.75.142 x.x.75.142 netmask 255.255.255.255

static (dmz1,outside) x.x.250.180 x.x.250.180 netmask 255.255.255.255

static (dmz1,outside) x.x.250.115 x.x.250.115 netmask 255.255.255.255

static (ServProv,outside) x.x.119.0 x.x.119.0 netmask 255.255.255.224

static (ServProv,dmz1) x.x.119.0 x.x.119.0 netmask 255.255.255.224

static (inside,ServProv) 172.24.134.0 172.24.134.0 netmask 255.255.255.0

static (dmz1,outside) x.x.250.190 x.x.250.190 netmask 255.255.255.255

static (dmz1,outside) x.x.250.95 x.x.250.95 netmask 255.255.255.255

static (inside,dmz1) 172.24.23.0 172.24.23.0 netmask 255.255.255.0

static (dmz1,outside) x.x.250.82 x.x.250.82 netmask 255.255.255.255

static (dmz1,outside) x.x.250.83 x.x.250.83 netmask 255.255.255.255

static (inside,dmz1) 172.24.17.40 172.24.17.40 netmask 255.255.255.255

static (dmz1,outside) x.x.250.84 x.x.250.84 netmask 255.255.255.255

static (dmz1,outside) x.x.250.85 x.x.250.85 netmask 255.255.255.255

static (inside,dmz1) 172.24.24.0 172.24.24.0 netmask 255.255.255.0

static (dmz1,outside) x.x.250.90 x.x.250.90 netmask 255.255.255.255

static (inside,ServProv) 172.25.74.0 172.25.74.0 netmask 255.255.255.0

static (dmz1,outside) x.x.250.80 x.x.250.80 netmask 255.255.255.255

static (dmz1,outside) x.x.250.81 x.x.250.81 netmask 255.255.255.255

static (dmz1,outside) x.x.250.93 x.x.250.93 netmask 255.255.255.255

static (dmz1,outside) x.x.250.65 x.x.250.65 netmask 255.255.255.255

static (dmz1,outside) x.x.250.101 x.x.250.101 netmask 255.255.255.255

static (ServProv,dmz1) x.x.156.0 x.x.156.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.150.0 172.24.150.0 netmask 255.255.255.0

static (dmz1,outside) x.x.250.140 x.x.250.140 netmask 255.255.255.255

static (dmz1,outside) x.x.250.141 x.x.250.141 netmask 255.255.255.255

static (dmz1,outside) x.x.69.15 x.x.69.15 netmask 255.255.255.255

static (dmz1,outside) x.x.75.156 x.x.75.156 netmask 255.255.255.255

static (inside,ServProv) 172.24.24.0 172.24.24.0 netmask 255.255.255.0

static (dmz1,outside) x.x.75.157 x.x.75.157 netmask 255.255.255.255

static (dmz1,outside) x.x.250.86 x.x.250.86 netmask 255.255.255.255

static (dmz1,outside) x.x.250.87 x.x.250.87 netmask 255.255.255.255

static (inside,dmz1) 147.76.204.58 147.76.204.58 netmask 255.255.255.255

static (dmz1,outside) x.x.75.161 x.x.75.161 netmask 255.255.255.255

static (inside,dmz1) 172.24.17.41 172.24.17.41 netmask 255.255.255.255

static (inside,dmz1) 172.24.17.31 172.24.17.31 netmask 255.255.255.255

static (dmz1,outside) x.x.75.32 x.x.75.32 netmask 255.255.255.255

static (inside,ServProv) 172.26.168.0 172.26.168.0 netmask 255.255.254.0

static (dmz1,outside) x.x.75.60 x.x.75.60 netmask 255.255.255.255

static (inside,dmz1) 172.24.75.0 172.24.75.0 netmask 255.255.255.0

static (dmz1,outside) x.x.75.158 x.x.75.158 netmask 255.255.255.255

static (dmz1,outside) x.x.250.192 x.x.250.192 netmask 255.255.255.255

static (dmz1,outside) x.x.75.80 x.x.75.80 netmask 255.255.255.255

static (dmz1,outside) x.x.250.45 x.x.250.45 netmask 255.255.255.255

static (dmz1,outside) x.x.75.23 x.x.75.23 netmask 255.255.255.255

static (dmz1,outside) x.x.73.59 x.x.73.59 netmask 255.255.255.255

static (dmz1,outside) x.x.250.66 x.x.250.66 netmask 255.255.255.255

static (dmz1,outside) x.x.75.46 x.x.75.46 netmask 255.255.255.255

static (dmz1,outside) x.x.75.45 x.x.75.45 netmask 255.255.255.255

static (inside,dmz1) 172.28.32.230 172.28.32.230 netmask 255.255.255.255

static (dmz1,outside) x.x.251.15 x.x.251.15 netmask 255.255.255.255

static (dmz1,outside) x.x.250.158 x.x.250.158 netmask 255.255.255.255

static (inside,dmz1) 172.24.29.0 172.24.29.0 netmask 255.255.255.0

static (dmz1,outside) x.x.73.61 x.x.73.61 netmask 255.255.255.255

static (dmz1,outside) x.x.75.70 x.x.75.70 netmask 255.255.255.255

static (dmz1,outside) x.x.250.203 x.x.250.203 netmask 255.255.255.255

static (inside,dmz1) 1x.1x.169.6 1x.1x.169.6 netmask 255.255.255.255

static (inside,dmz1) 1x.1x.169.16 1x.1x.169.16 netmask 255.255.255.255

static (inside,dmz1) 1x.1x.169.9 1x.1x.169.9 netmask 255.255.255.255

static (inside,dmz1) 172.31.8.115 172.31.8.115 netmask 255.255.255.255

static (dmz1,outside) x.x.75.81 x.x.75.81 netmask 255.255.255.255

static (dmz1,outside) x.x.250.99 x.x.250.99 netmask 255.255.255.255

static (dmz1,outside) x.x.75.117 x.x.75.117 netmask 255.255.255.255

static (dmz1,outside) x.x.176.198 x.x.176.198 netmask 255.255.255.254

static (inside,ServProv) x.y.32.0 x.y.32.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.130.0 172.24.130.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.133.0 172.24.133.0 netmask 255.255.255.0

static (inside,dmz1) 172.24.30.0 172.24.30.0 netmask 255.255.255.0

static (dmz1,outside) x.x.75.74 x.x.75.74 netmask 255.255.255.255

static (inside,dmz1) 172.24.112.81 172.24.112.81 netmask 255.255.255.255

static (ServProv,outside) x.x.159.162 x.x.159.162 netmask 255.255.255.255

static (dmz1,outside) x.x.250.22 x.x.250.22 netmask 255.255.255.255

static (ServProv,outside) x.x.159.250 x.x.159.250 netmask 255.255.255.255

static (inside,dmz1) 1xx.1xx.170.143 1xx.1xx.170.143 netmask 255.255.255.255

static (inside,ServProv) 172.25.249.0 172.25.249.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.23.0 172.24.23.0 netmask 255.255.255.0

static (dmz1,outside) x.x.75.113 x.x.75.113 netmask 255.255.255.255

static (dmz1,outside) x.x.250.50 x.x.250.50 netmask 255.255.255.255

static (dmz1,outside) x.x.75.171 x.x.75.171 netmask 255.255.255.255

static (dmz1,outside) x.x.75.172 x.x.75.172 netmask 255.255.255.255

static (dmz1,outside) x.x.75.175 x.x.75.175 netmask 255.255.255.255

static (dmz1,outside) x.x.75.177 x.x.75.177 netmask 255.255.255.255

static (dmz1,outside) x.x.75.179 x.x.75.179 netmask 255.255.255.255

static (dmz1,outside) x.x.75.180 x.x.75.180 netmask 255.255.255.255

static (dmz1,outside) x.x.75.181 x.x.75.181 netmask 255.255.255.255

static (dmz1,outside) x.x.75.182 x.x.75.182 netmask 255.255.255.255

static (dmz1,outside) x.x.75.183 x.x.75.183 netmask 255.255.255.255

static (dmz1,outside) x.x.75.184 x.x.75.184 netmask 255.255.255.255

static (dmz1,outside) x.x.75.143 x.x.75.143 netmask 255.255.255.255

static (dmz1,outside) x.x.75.21 x.x.75.21 netmask 255.255.255.255

static (dmz1,outside) x.x.250.110 x.x.250.110 netmask 255.255.255.255

static (dmz1,outside) x.x.75.185 x.x.75.185 netmask 255.255.255.255

static (dmz1,outside) x.x.75.174 x.x.75.174 netmask 255.255.255.255

static (dmz1,outside) x.x.75.176 x.x.75.176 netmask 255.255.255.255

static (dmz1,outside) x.x.75.178 x.x.75.178 netmask 255.255.255.255

static (ServProv,outside) x.x.120.205 x.x.120.205 netmask 255.255.255.255

static (dmz1,outside) x.x.250.44 x.x.250.44 netmask 255.255.255.255

static (inside,dmz1) 172.27.133.0 172.27.133.0 netmask 255.255.255.0

static (dmz1,outside) x.x.75.186 x.x.75.186 netmask 255.255.255.255

static (inside,ServProv) 1x.1x.172.0 1x.1x.172.0 netmask 255.255.252.0

static (inside,ServProv) 172.25.248.0 172.25.248.0 netmask 255.255.255.0

static (inside,dmz1) 172.24.17.90 172.24.17.90 netmask 255.255.255.255

static (dmz1,outside) x.x.75.187 x.x.75.187 netmask 255.255.255.255

static (dmz1,outside) x.x.75.163 x.x.75.163 netmask 255.255.255.255

static (inside,ServProv) 172.31.20.0 172.31.20.0 netmask 255.255.255.0

static (inside,ServProv) 172.31.30.0 172.31.30.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.28.0 172.24.28.0 netmask 255.255.255.0

static (ServProv,outside) x.x.157.60 x.x.157.60 netmask 255.255.255.255

static (ServProv,outside) x.x.157.130 x.x.157.130 netmask 255.255.255.255

static (inside,ServProv) 172.24.132.0 172.24.132.0 netmask 255.255.255.0

static (ServProv,dmz1) x.x.157.0 x.x.157.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.154.0 172.24.154.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.193.0 172.24.193.0 netmask 255.255.255.0

static (inside,ServProv) 172.26.168.0 172.26.168.0 netmask 255.255.255.0

static (inside,ServProv) 172.26.169.0 172.26.169.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.76.0 172.24.76.0 netmask 255.255.255.0

static (dmz1,outside) x.x.75.54 x.x.75.54 netmask 255.255.255.255

static (dmz1,outside) x.x.75.55 x.x.75.55 netmask 255.255.255.255

static (dmz1,outside) x.x.0.20 x.x.0.20 netmask 255.255.255.255 tcp 10000 100

static (inside,ServProv) 128.191.168.0 128.191.168.0 netmask 255.255.252.0

static (inside,dmz1) x.x.80.0 x.x.80.0 netmask 255.255.255.0

static (inside,dmz1) 172.25.2.0 172.25.2.0 netmask 255.255.255.0

static (dmz1,outside) x.x.80.10 x.x.80.10 netmask 255.255.255.255

static (inside,ServProv) x.x.152.0 x.x.152.0 netmask 255.255.255.0

static (dmz1,outside) x.x.0.21 x.x.0.21 netmask 255.255.255.255 tcp 10000 100

static (inside,ServProv) 172.31.43.0 172.31.43.0 netmask 255.255.255.0

static (inside,dmz1) 172.24.76.0 172.24.76.0 netmask 255.255.255.0

static (inside,dmz1) 172.24.77.0 172.24.77.0 netmask 255.255.255.0

static (inside,dmz1) 1x.1x.168.0 1x.1x.168.0 netmask 255.255.252.0

static (inside,dmz1) 1x.1x.169.0 1x.1x.169.0 netmask 255.255.255.0

static (dmz1,outside) x.x.75.33 x.x.75.33 netmask 255.255.255.255

static (ServProv,outside) x.x.152.110 x.x.152.110 netmask 255.255.255.255

static (dmz1,outside) x.w.66.61 x.w.66.61 netmask 255.255.255.255

static (dmz1,outside) x.x.75.188 x.x.75.188 netmask 255.255.255.255

static (dmz1,outside) x.x.75.57 x.x.75.57 netmask 255.255.255.255

static (inside,ServProv) 172.24.73.0 172.24.73.0 netmask 255.255.255.0

static (ServProv,outside) x.x.120.161 x.x.120.161 netmask 255.255.255.255

static (inside,dmz1) 172.24.17.60 172.24.17.60 netmask 255.255.255.255

static (inside,dmz1) 172.24.17.61 172.24.17.61 netmask 255.255.255.255

static (inside,dmz1) 172.27.129.0 172.27.129.0 netmask 255.255.255.0

static (inside,dmz1) 172.27.132.0 172.27.132.0 netmask 255.255.255.0

static (ServProv,outside) x.x.157.40 x.x.157.40 netmask 255.255.255.255

static (ServProv,outside) x.x.157.152 x.x.157.152 netmask 255.255.255.255

static (ServProv,outside) x.x.159.150 x.x.159.150 netmask 255.255.255.255

static (ServProv,outside) x.x.159.151 x.x.159.151 netmask 255.255.255.255

static (ServProv,outside) x.x.157.41 x.x.157.41 netmask 255.255.255.255

static (inside,ServProv) 172.24.144.0 172.24.144.0 netmask 255.255.255.0

static (inside,ServProv) 172.25.108.0 172.25.108.0 netmask 255.255.252.0

static (inside,ServProv) 172.25.181.0 172.25.181.0 netmask 255.255.255.0

static (dmz1,outside) x.x.176.196 x.x.176.196 netmask 255.255.255.255

static (dmz1,outside) x.x.176.197 x.x.176.197 netmask 255.255.255.255

static (dmz1,outside) x.w.66.70 x.w.66.70 netmask 255.255.255.255

static (dmz1,outside) x.x.75.111 x.x.75.111 netmask 255.255.255.255

static (inside,ServProv) 172.26.175.0 172.26.175.0 netmask 255.255.255.0

static (inside,dmz1) 172.16.80.0 172.16.80.0 netmask 255.255.255.0

static (inside,ServProv) 172.26.165.0 172.26.165.0 netmask 255.255.255.0

<--- More --->

static (inside,dmz1) 172.27.137.0 172.27.137.0 netmask 255.255.255.0

static (inside,dmz1) 172.27.136.0 172.27.136.0 netmask 255.255.255.0

static (dmz1,outside) x.x.75.145 x.x.75.145 netmask 255.255.255.255

static (dmz1,outside) x.x.75.146 x.x.75.146 netmask 255.255.255.255

static (dmz1,outside) x.x.250.31 x.x.250.31 netmask 255.255.255.255

static (dmz1,outside) x.w.66.64 x.w.66.64 netmask 255.255.255.255

static (dmz1,outside) x.w.66.65 x.w.66.65 netmask 255.255.255.255

static (dmz1,outside) x.x.75.144 x.x.75.144 netmask 255.255.255.255

static (ServProv,outside) x.x.165.12 x.x.165.12 netmask 255.255.255.255

static (dmz1,outside) x.x.75.147 x.x.75.147 netmask 255.255.255.255

static (dmz1,outside) x.x.90.91 x.x.90.91 netmask 255.255.255.255

static (dmz1,outside) x.x.250.156 x.x.250.156 netmask 255.255.255.255

static (ServProv,dmz1) x.x.165.0 x.x.165.0 netmask 255.255.255.0

static (ServProv,outside) x.x.159.52 x.x.159.52 netmask 255.255.255.255

static (dmz1,outside) x.x.75.190 x.x.75.190 netmask 255.255.255.255

static (inside,ServProv) 172.24.224.0 172.24.224.0 netmask 255.255.255.0

static (dmz1,outside) x.x.75.138 x.x.75.138 netmask 255.255.255.255

static (dmz1,outside) x.x.250.35 x.x.250.35 netmask 255.255.255.255

static (dmz1,outside) x.x.75.191 x.x.75.191 netmask 255.255.255.255

static (inside,ServProv) 172.26.160.0 172.26.160.0 netmask 255.255.255.0

static (dmz1,outside) x.x.75.162 x.x.75.162 netmask 255.255.255.255

static (dmz1,outside) x.w.66.59 x.w.66.59 netmask 255.255.255.255

static (dmz1,outside) x.x.75.166 x.x.75.166 netmask 255.255.255.255

static (dmz1,outside) x.w.66.80 x.w.66.80 netmask 255.255.255.255

static (dmz1,outside) x.w.66.81 x.w.66.81 netmask 255.255.255.255

static (dmz1,outside) x.w.66.82 x.w.66.82 netmask 255.255.255.255

static (inside,dmz1) 172.24.14.0 172.24.14.0 netmask 255.255.255.0

static (inside,dmz1) 172.24.13.0 172.24.13.0 netmask 255.255.255.0

static (dmz1,outside) x.x.73.63 x.x.73.63 netmask 255.255.255.255

static (ServProv,outside) x.x.159.53 x.x.159.53 netmask 255.255.255.255

static (inside,dmz1) 1x.x.111.0 1x.x.111.0 netmask 255.255.255.0

static (inside,ServProv) 172.16.22.0 172.16.22.0 netmask 255.255.255.0

static (dmz1,outside) x.x.250.225 x.x.250.225 netmask 255.255.255.255

static (dmz1,outside) x.x.73.70 x.x.73.70 netmask 255.255.255.255

static (dmz1,outside) x.x.85.12 x.x.85.12 netmask 255.255.255.255

static (dmz1,outside) x.x.148.10 x.x.148.10 netmask 255.255.255.255

static (inside,dmz1) x.x.118.0 x.x.118.0 netmask 255.255.255.0

static (dmz1,outside) x.x.168.0 x.x.168.0 netmask 255.255.255.192

static (ServProv,outside) x.x.159.51 x.x.159.51 netmask 255.255.255.255

static (inside,dmz1) 172.16.16.0 172.16.16.0 netmask 255.255.248.0

static (inside,dmz1) 172.27.135.0 172.27.135.0 netmask 255.255.255.0

static (dmz1,outside) x.x.250.112 x.x.250.112 netmask 255.255.255.255

static (dmz1,outside) x.x.250.109 x.x.250.109 netmask 255.255.255.255

static (ServProv,outside) x.x.159.200 x.x.159.200 netmask 255.255.255.255

static (ServProv,outside) x.x.159.201 x.x.159.201 netmask 255.255.255.255

static (ServProv,outside) x.x.159.202 x.x.159.202 netmask 255.255.255.255

static (ServProv,outside) x.x.159.203 x.x.159.203 netmask 255.255.255.255

static (ServProv,outside) x.x.159.204 x.x.159.204 netmask 255.255.255.255

static (ServProv,outside) x.x.159.205 x.x.159.205 netmask 255.255.255.255

static (ServProv,outside) x.x.159.206 x.x.159.206 netmask 255.255.255.255

static (ServProv,outside) x.x.159.207 x.x.159.207 netmask 255.255.255.255

static (ServProv,outside) x.x.159.208 x.x.159.208 netmask 255.255.255.255

static (ServProv,outside) x.x.159.209 x.x.159.209 netmask 255.255.255.255

static (ServProv,outside) x.x.159.210 x.x.159.210 netmask 255.255.255.255

static (dmz1,outside) x.x.250.36 x.x.250.36 netmask 255.255.255.255

static (dmz1,outside) x.x.73.75 x.x.73.75 netmask 255.255.255.255

static (dmz1,outside) x.w.66.58 x.w.66.58 netmask 255.255.255.255

static (dmz1,outside) x.x.73.76 x.x.73.76 netmask 255.255.255.255

static (ServProv,outside) x.x.120.216 x.x.120.216 netmask 255.255.255.255

static (dmz1,outside) x.w.66.57 x.w.66.57 netmask 255.255.255.255

static (inside,ServProv) 172.24.166.0 172.24.166.0 netmask 255.255.255.0

static (dmz1,outside) x.x.75.167 x.x.75.167 netmask 255.255.255.255

static (dmz1,outside) x.x.75.168 x.x.75.168 netmask 255.255.255.255

static (dmz1,outside) x.x.75.169 x.x.75.169 netmask 255.255.255.255

static (dmz1,outside) x.x.75.134 x.x.75.134 netmask 255.255.255.255

static (dmz1,outside) x.x.75.135 x.x.75.135 netmask 255.255.255.255

static (dmz1,outside) x.x.75.136 x.x.75.136 netmask 255.255.255.255

static (dmz1,outside) x.x.75.137 x.x.75.137 netmask 255.255.255.255

static (dmz1,outside) x.x.85.20 x.x.85.20 netmask 255.255.255.255

static (dmz1,outside) x.w.66.56 x.w.66.56 netmask 255.255.255.255

static (dmz1,outside) x.x.147.47 x.x.147.47 netmask 255.255.255.255

static (dmz1,outside) x.x.73.71 x.x.73.71 netmask 255.255.255.255

static (inside,dmz1) 172.24.17.120 172.24.17.120 netmask 255.255.255.255

static (inside,dmz1) 172.24.17.125 172.24.17.125 netmask 255.255.255.255

static (dmz1,outside) x.x.250.16 x.x.250.16 netmask 255.255.255.255

static (inside,ServProv) 172.16.18.0 172.16.18.0 netmask 255.255.255.0

static (inside,ServProv) 128.191.124.0 128.191.124.0 netmask 255.255.252.0

static (dmz1,outside) x.x.75.173 x.x.75.173 netmask 255.255.255.255

static (ServProv,outside) x.x.159.54 x.x.159.54 netmask 255.255.255.255

static (ServProv,outside) x.x.159.55 x.x.159.55 netmask 255.255.255.255

static (dmz1,outside) x.w.66.69 x.w.66.69 netmask 255.255.255.255

static (inside,ServProv) 172.24.141.0 172.24.141.0 netmask 255.255.255.0

static (dmz1,outside) x.x.147.110 x.x.147.110 netmask 255.255.255.255

static (dmz1,outside) x.x.147.112 x.x.147.112 netmask 255.255.255.255

static (dmz1,outside) x.x.147.111 x.x.147.111 netmask 255.255.255.255

static (dmz1,outside) x.x.147.113 x.x.147.113 netmask 255.255.255.255

static (dmz1,outside) x.x.147.114 x.x.147.114 netmask 255.255.255.255

static (dmz1,outside) x.x.147.115 x.x.147.115 netmask 255.255.255.255

static (dmz1,outside) x.x.147.116 x.x.147.116 netmask 255.255.255.255

static (dmz1,outside) x.x.250.72 x.x.250.72 netmask 255.255.255.255

static (dmz1,outside) x.x.250.76 x.x.250.76 netmask 255.255.255.255

static (dmz1,outside) x.x.250.73 x.x.250.73 netmask 255.255.255.255

static (inside,ServProv) 172.24.40.0 172.24.40.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.41.0 172.24.41.0 netmask 255.255.255.0

static (dmz1,outside) x.x.250.74 x.x.250.74 netmask 255.255.255.255

static (dmz1,outside) x.x.250.75 x.x.250.75 netmask 255.255.255.255

static (dmz1,outside) x.x.250.78 x.x.250.78 netmask 255.255.255.255

static (dmz1,outside) x.x.250.79 x.x.250.79 netmask 255.255.255.255

static (dmz1,outside) x.w.66.68 x.w.66.68 netmask 255.255.255.255

static (inside,ServProv) 172.24.74.0 172.24.74.0 netmask 255.255.255.0

static (ServProv,dmz1) x.x.159.0 x.x.159.0 netmask 255.255.255.0

static (inside,ServProv) 172.26.172.0 172.26.172.0 netmask 255.255.255.0

static (dmz1,outside) x.x.75.200 x.x.75.200 netmask 255.255.255.255

static (dmz1,outside) x.x.75.189 x.x.75.189 netmask 255.255.255.255

static (dmz1,outside) x.x.250.121 x.x.250.121 netmask 255.255.255.255

static (dmz1,outside) x.x.200.11 x.x.200.11 netmask 255.255.255.255

static (dmz1,outside) x.x.200.12 x.x.200.12 netmask 255.255.255.255

static (dmz1,outside) x.x.200.13 x.x.200.13 netmask 255.255.255.255

static (dmz1,outside) x.x.200.14 x.x.200.14 netmask 255.255.255.255

static (dmz1,outside) x.x.200.15 x.x.200.15 netmask 255.255.255.255

static (dmz1,outside) x.x.200.16 x.x.200.16 netmask 255.255.255.255

static (dmz1,outside) x.x.75.56 x.x.75.56 netmask 255.255.255.255

static (inside,dmz1) 172.24.35.0 172.24.35.0 netmask 255.255.255.0

static (ServProv,outside) x.x.165.100 x.x.165.100 netmask 255.255.255.255

static (inside,dmz1) 172.26.176.0 172.26.176.0 netmask 255.255.255.0

static (inside,ServProv) 10.47.73.201 10.47.73.201 netmask 255.255.255.255

static (ServProv,outside) x.x.157.151 x.x.157.151 netmask 255.255.255.255

static (ServProv,outside) x.x.157.150 x.x.157.150 netmask 255.255.255.255

static (ServProv,outside) x.x.159.50 x.x.159.50 netmask 255.255.255.255

static (dmz1,outside) x.x.75.58 x.x.75.58 netmask 255.255.255.255

static (ServProv,outside) x.x.120.218 x.x.120.218 netmask 255.255.255.255

static (ServProv,outside) x.x.157.46 x.x.157.46 netmask 255.255.255.255

static (dmz1,outside) x.x.200.17 x.x.200.17 netmask 255.255.255.255

static (dmz1,outside) x.x.75.106 x.x.75.106 netmask 255.255.255.255

static (inside,ServProv) 172.24.75.0 172.24.75.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.77.0 172.24.77.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.78.0 172.24.78.0 netmask 255.255.255.0

static (ServProv,outside) x.x.157.11 x.x.157.11 netmask 255.255.255.255

static (inside,ServProv) 172.24.192.0 172.24.192.0 netmask 255.255.255.0

static (dmz1,outside) x.x.250.46 x.x.250.46 netmask 255.255.255.255

static (dmz1,outside) x.x.250.47 x.x.250.47 netmask 255.255.255.255

static (dmz1,outside) x.x.250.33 x.x.250.33 netmask 255.255.255.255

static (dmz1,outside) x.x.250.34 x.x.250.34 netmask 255.255.255.255

static (dmz1,outside) x.x.250.37 x.x.250.37 netmask 255.255.255.255

static (dmz1,outside) x.x.250.38 x.x.250.38 netmask 255.255.255.255

static (dmz1,outside) x.x.75.59 x.x.75.59 netmask 255.255.255.255

static (dmz1,outside) x.x.75.104 x.x.75.104 netmask 255.255.255.255

static (dmz1,outside) x.x.250.51 x.x.250.51 netmask 255.255.255.255

static (dmz1,outside) x.x.250.152 x.x.250.152 netmask 255.255.255.255

static (dmz1,outside) x.x.250.151 x.x.250.151 netmask 255.255.255.255

static (dmz1,outside) x.x.250.39 x.x.250.39 netmask 255.255.255.255

static (dmz1,outside) x.x.157.12 x.x.157.12 netmask 255.255.255.255

static (ServProv,outside) x.x.159.56 x.x.159.56 netmask 255.255.255.255

static (ServProv,outside) x.x.159.57 x.x.159.57 netmask 255.255.255.255

static (ServProv,outside) x.x.159.58 x.x.159.58 netmask 255.255.255.255

static (ServProv,outside) x.x.159.59 x.x.159.59 netmask 255.255.255.255

static (inside,ServProv) 172.24.169.0 172.24.169.0 netmask 255.255.255.0

static (inside,ServProv) 172.16.68.0 172.16.68.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.156.0 172.24.156.0 netmask 255.255.255.0

static (ServProv,outside) x.x.157.224 x.x.157.224 netmask 255.255.255.255

static (ServProv,outside) x.x.159.60 x.x.159.60 netmask 255.255.255.255

static (ServProv,outside) x.x.159.61 x.x.159.61 netmask 255.255.255.255

static (ServProv,outside) x.x.157.100 x.x.157.100 netmask 255.255.255.255

static (dmz1,outside) x.x.105.246 x.x.105.246 netmask 255.255.255.255

static (dmz1,outside) x.x.24.62 x.x.24.62 netmask 255.255.255.255

static (ServProv,outside) x.x.157.9 x.x.157.9 netmask 255.255.255.255

static (inside,ServProv) 172.26.149.0 172.26.149.0 netmask 255.255.255.0

static (dmz1,outside) x.x.200.20 x.x.200.20 netmask 255.255.255.255

static (dmz1,outside) x.x.200.21 x.x.200.21 netmask 255.255.255.255

static (dmz1,outside) x.x.200.22 x.x.200.22 netmask 255.255.255.255

static (ServProv,outside) x.x.159.120 x.x.159.120 netmask 255.255.255.255

static (ServProv,outside) x.x.159.121 x.x.159.121 netmask 255.255.255.255

static (ServProv,outside) x.x.159.122 x.x.159.122 netmask 255.255.255.255

static (ServProv,outside) x.x.159.123 x.x.159.123 netmask 255.255.255.255

static (ServProv,outside) x.x.159.124 x.x.159.124 netmask 255.255.255.255

static (ServProv,outside) x.x.159.125 x.x.159.125 netmask 255.255.255.255

static (ServProv,outside) x.x.159.126 x.x.159.126 netmask 255.255.255.255

static (dmz1,inside) x.x.250.39 x.x.250.39 netmask 255.255.255.255

static (dmz1,outside) x.x.250.40 x.x.250.40 netmask 255.255.255.255

static (dmz1,outside) x.x.250.53 x.x.250.53 netmask 255.255.255.255

static (ServProv,outside) x.x.157.49 x.x.157.49 netmask 255.255.255.255

static (ServProv,outside) x.x.157.50 x.x.157.50 netmask 255.255.255.255

static (ServProv,outside) x.x.157.85 x.x.157.85 netmask 255.255.255.255

static (ServProv,outside) x.x.157.245 x.x.157.245 netmask 255.255.255.255

static (ServProv,outside) x.x.157.240 x.x.157.240 netmask 255.255.255.255

static (ServProv,outside) x.x.157.241 x.x.157.241 netmask 255.255.255.255

static (ServProv,outside) x.x.157.242 x.x.157.242 netmask 255.255.255.255

static (ServProv,outside) x.x.157.243 x.x.157.243 netmask 255.255.255.255

static (inside,ServProv) 172.24.71.0 172.24.71.0 netmask 255.255.255.0

static (ServProv,outside) x.x.157.238 x.x.157.238 netmask 255.255.255.255

static (ServProv,outside) x.x.157.239 x.x.157.239 netmask 255.255.255.255

static (ServProv,inside) x.x.159.51 x.x.159.51 netmask 255.255.255.255

static (inside,ServProv) 172.24.181.0 172.24.181.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.131.0 172.24.131.0 netmask 255.255.255.0

static (inside,dmz1) 172.16.68.0 172.16.68.0 netmask 255.255.255.0

static (inside,ServProv) 172.24.35.0 172.24.35.0 netmask 255.255.255.0

static (ServProv,inside) x.x.159.54 x.x.159.54 netmask 255.255.255.255

static (dmz1,outside) x.x.250.102 x.x.250.102 netmask 255.255.255.255

static (dmz1,outside) x.x.250.18 x.x.250.18 netmask 255.255.255.255

static (ServProv,outside) x.x.157.127 x.x.157.127 netmask 255.255.255.255

static (dmz1,outside) x.x.55.0 x.x.55.0 netmask 255.255.255.0

static (dmz1,outside) x.x.56.0 x.x.56.0 netmask 255.255.255.0

static (ServProv,outside) x.x.157.51 x.x.157.51 netmask 255.255.255.255

static (ServProv,outside) x.x.157.52 x.x.157.52 netmask 255.255.255.255

static (dmz1,outside) x.x.75.48 x.x.75.48 netmask 255.255.255.255

static (dmz1,outside) x.x.250.55 x.x.250.55 netmask 255.255.255.255

static (dmz1,outside) x.x.75.90 x.x.75.90 netmask 255.255.255.255

static (dmz1,outside) x.x.250.70 x.x.250.70 netmask 255.255.255.255

static (dmz1,inside) 172.16.51.0 172.16.51.0 netmask 255.255.255.0

static (dmz1,outside) x.x.75.192 x.x.75.192 netmask 255.255.255.255

static (inside,ServProv) 172.26.158.0 172.26.158.0 netmask 255.255.255.0

static (dmz1,outside) x.x.250.122 x.x.250.122 netmask 255.255.255.255

static (dmz1,outside) x.x.75.193 x.x.75.193 netmask 255.255.255.255

static (dmz1,outside) x.x.250.131 x.x.250.131 netmask 255.255.255.255

static (dmz1,outside) x.x.250.132 x.x.250.132 netmask 255.255.255.255

static (dmz1,outside) x.x.75.195 x.x.75.195 netmask 255.255.255.255

static (dmz1,outside) x.x.75.194 x.x.75.194 netmask 255.255.255.255

static (inside,dmz1) 172.26.143.0 172.26.143.0 netmask 255.255.255.0

static (ServProv,inside) x.x.159.56 x.x.159.56 netmask 255.255.255.255

static (ServProv,inside) x.x.159.55 x.x.159.55 netmask 255.255.255.255

static (inside,ServProv) x.y.34.0 x.y.34.0 netmask 255.255.255.0

static (inside,ServProv) 172.27.132.0 172.27.132.0 netmask 255.255.255.0

static (dmz1,outside) x.x.75.91 x.x.75.91 netmask 255.255.255.255

static (inside,dmz1) 172.24.164.0 172.24.164.0 netmask 255.255.254.0

static (inside,ServProv) 172.24.164.0 172.24.164.0 netmask 255.255.254.0

static (dmz1,outside) x.x.250.210 x.x.250.210 netmask 255.255.255.255

static (dmz1,outside) x.x.250.62 x.x.250.62 netmask 255.255.255.255

static (dmz1,outside) x.x.250.63 x.x.250.63 netmask 255.255.255.255

static (dmz1,outside) x.x.250.68 x.x.250.68 netmask 255.255.255.255

static (dmz1,inside) x.x.75.91 x.x.75.91 netmask 255.255.255.255

static (dmz1,inside) x.x.75.90 x.x.75.90 netmask 255.255.255.255

static (inside,dmz1) 172.24.73.0 172.24.73.0 netmask 255.255.255.0

static (dmz1,outside) x.x.73.91 x.x.73.91 netmask 255.255.255.255

access-group acl_out in interface outside

access-group acl_in in interface inside

access-group acl_dmz1 in interface dmz1

access-group acl_ServProv in interface ServProv

route outside 0.0.0.0 0.0.0.0 x.x.6.1 1

route inside 10.0.0.0 255.0.0.0 172.25.1.1 1

route dmz1 10.52.109.125 255.255.255.255 x.x.0.1 1

route dmz1 10.207.0.0 255.255.0.0 x.x.0.1 1

route dmz1 10.222.0.0 255.255.255.0 x.x.0.1 1

route dmz1 x.x.179.160 255.255.255.224 x.x.0.1 1

route dmz1 x.x.54.0 255.255.255.0 x.x.0.1 1

route dmz1 x.x.3.25 255.255.255.255 x.x.0.1 1

route dmz1 x.x.48.76 255.255.255.255 x.x.0.1 1

route dmz1 x.x.237.0 255.255.255.0 x.x.0.1 1

route inside 1x.1x.0.0 255.255.0.0 172.25.1.1 1

route outside 1x.1x.16.0 255.255.252.0 x.x.6.1 1

route dmz1 1x.1x.128.0 255.255.252.0 x.x.0.1 1

route dmz1 1x.x.21.0 255.255.255.0 x.x.0.1 1

route inside x.y.0.0 255.255.0.0 172.25.1.1 1

route outside x.y.4.0 255.255.255.0 x.x.6.1 1

route dmz1 x.201.10.105 255.255.255.255 x.x.0.1 1

route dmz1 x.201.30.65 255.255.255.255 x.x.0.1 1

route dmz1 x.201.79.131 255.255.255.255 x.x.0.1 1

route dmz1 x.37.9.0 255.255.255.0 x.x.0.1 1

route dmz1 x.37.37.0 255.255.255.0 x.x.0.1 1

route dmz1 x.38.51.0 255.255.255.0 x.x.0.1 1

route dmz1 x.38.192.0 255.255.255.0 x.x.0.1 1

route dmz1 x.38.215.0 255.255.255.0 x.x.0.1 1

route dmz1 x.40.5.0 255.255.255.0 x.x.0.1 1

route dmz1 x.43.199.15 255.255.255.255 x.x.0.1 1

route dmz1 x.43.227.0 255.255.255.0 x.x.0.1 1

route dmz1 x.47.117.0 255.255.255.0 x.x.0.1 1

route dmz1 x.51.253.0 255.255.255.0 x.x.0.1 1

route dmz1 x.53.11.0 255.255.255.0 x.x.0.1 1

route dmz1 x.53.21.56 255.255.255.255 x.x.0.1 1

route dmz1 x.53.21.96 255.255.255.255 x.x.0.1 1

route dmz1 x.53.21.116 255.255.255.255 x.x.0.1 1

route dmz1 x.58.56.0 255.255.255.0 x.x.0.1 1

route dmz1 x.58.95.0 255.255.255.0 x.x.0.1 1

route dmz1 x.91.44.0 255.255.255.0 x.x.0.1 1

route dmz1 x.91.47.0 255.255.255.0 x.x.0.1 1

route dmz1 x.113.96.0 255.255.254.0 x.x.0.1 1

route dmz1 x.113.119.0 255.255.255.0 x.x.0.1 1

route dmz1 x.113.127.0 255.255.255.0 x.x.0.1 1

route dmz1 x.155.0.0 255.255.0.0 x.x.0.1 1

route dmz1 x.188.17.0 255.255.255.0 x.x.0.1 1

route dmz1 x.188.22.243 255.255.255.255 x.x.0.1 1

route dmz1 x.188.53.49 255.255.255.255 x.x.0.1 1

route dmz1 x.190.226.0 255.255.255.0 x.x.0.1 1

route dmz1 x.200.63.71 255.255.255.255 x.x.0.1 1

route dmz1 x.200.112.55 255.255.255.255 x.x.0.1 1

route dmz1 x.208.192.0 255.255.255.0 x.x.0.1 1

route inside x.15.0.0 255.255.0.0 172.25.1.1 1

route outside x.15.10.0 255.255.255.0 x.x.6.1 1

route outside x.15.20.0 255.255.255.0 x.x.6.1 1

route outside x.15.21.0 255.255.255.0 x.x.6.1 1

route outside x.15.110.0 255.255.255.0 x.x.6.1 1

route dmz1 x.76.204.0 255.255.252.0 x.x.0.1 1

route dmz1 x.76.205.42 255.255.255.255 x.x.0.1 1

route inside x.x.0.0 255.255.0.0 172.25.1.1 1

route outside x.x.2.0 255.255.254.0 x.x.6.1 1

route outside x.x.4.0 255.255.254.0 x.x.6.1 1

route outside x.x.7.0 255.255.255.0 x.x.6.1 1

route outside x.x.8.0 255.255.254.0 x.x.6.1 1

route ServProv x.x.10.0 255.255.255.0 x.x.13.1 1

route outside x.x.12.0 255.255.255.0 x.x.6.1 1

route dmz1 x.x.15.0 255.255.255.0 x.x.0.1 1

route dmz1 x.x.20.0 255.255.255.0 x.x.0.1 1

route dmz1 x.x.23.0 255.255.255.0 x.x.0.1 1

route dmz1 x.x.24.0 255.255.254.0 x.x.0.1 1

route outside x.x.50.0 255.255.255.0 x.x.6.1 1

route dmz1 x.x.52.0 255.255.252.0 x.x.0.1 1

route dmz1 x.x.56.0 255.255.252.0 x.x.0.1 1

route outside x.x.64.0 255.255.255.0 x.x.6.1 1

route dmz1 x.x.69.0 255.255.255.0 x.x.0.1 1

route dmz1 x.x.73.0 255.255.255.0 x.x.0.1 1

route dmz1 x.x.74.0 255.255.254.0 x.x.0.1 1

route dmz1 x.x.80.0 255.255.255.0 x.x.0.1 1

route dmz1 x.x.85.0 255.255.255.0 x.x.0.1 1

route dmz1 x.x.90.0 255.255.255.0 x.x.0.1 1

route dmz1 x.x.92.0 255.255.255.0 x.x.0.1 1

route dmz1 x.x.95.0 255.255.255.0 x.x.0.1 1

route dmz1 x.x.99.0 255.255.255.0 x.x.0.1 1

route dmz1 x.x.101.0 255.255.255.0 x.x.0.1 1

route dmz1 x.x.102.0 255.255.254.0 x.x.0.1 1

route dmz1 x.x.104.0 255.255.254.0 x.x.0.1 1

route dmz1 x.x.108.0 255.255.255.0 x.x.0.1 1

route dmz1 x.x.110.0 255.255.255.0 x.x.0.1 1

route dmz1 x.x.112.0 255.255.255.0 x.x.0.1 1

route outside x.x.114.0 255.255.254.0 x.x.6.1 1

route outside x.x.116.0 255.255.255.0 x.x.6.1 1

route ServProv x.x.118.0 255.255.254.0 x.x.13.1 1

route dmz1 x.x.120.0 255.255.248.0 x.x.0.1 1

route ServProv x.x.120.0 255.255.255.0 x.x.13.1 1

route dmz1 x.x.128.0 255.255.248.0 x.x.0.1 1

route dmz1 x.x.136.0 255.255.255.0 x.x.0.1 1

route dmz1 x.x.138.0 255.255.255.0 x.x.0.1 1

route dmz1 x.x.146.0 255.255.254.0 x.x.0.1 1

route dmz1 x.x.148.0 255.255.255.0 x.x.0.1 1

route ServProv x.x.149.0 255.255.255.0 x.x.13.1 1

route ServProv x.x.152.0 255.255.255.0 x.x.13.1 1

route ServProv x.x.154.0 255.255.255.0 x.x.13.1 1

route ServProv x.x.156.0 255.255.252.0 x.x.13.1 1

route ServProv x.x.160.0 255.255.248.0 x.x.13.1 1

route dmz1 x.x.163.0 255.255.255.0 x.x.0.1 1

route dmz1 x.x.168.0 255.255.255.0 x.x.0.1 1

route outside x.x.172.0 255.255.254.0 x.x.6.1 1

route dmz1 x.x.176.0 255.255.255.0 x.x.0.1 1

route outside x.x.182.0 255.255.255.0 x.x.6.1 1

route dmz1 x.x.190.0 255.255.254.0 x.x.0.1 1

route dmz1 x.x.200.0 255.255.255.0 x.x.0.1 1

route outside x.x.220.0 255.255.255.0 x.x.6.1 1

route outside x.x.244.0 255.255.255.0 x.x.6.1 1

route dmz1 x.x.250.0 255.255.255.0 x.x.0.1 1

route dmz1 x.x.251.0 255.255.255.0 x.x.0.1 1

route ServProv x.x.253.0 255.255.255.0 x.x.13.1 1

route inside x.w.0.0 255.255.0.0 172.25.1.1 1

route dmz1 x.w.45.0 255.255.255.0 x.x.0.1 1

route dmz1 x.w.46.0 255.255.255.0 x.x.0.1 1

route dmz1 x.w.65.0 255.255.255.0 x.x.0.1 1

route dmz1 x.w.66.0 255.255.255.0 x.x.0.1 1

route dmz1 x.w.88.0 255.255.254.0 x.x.0.1 1

route dmz1 x.w.101.0 255.255.255.0 x.x.0.1 1

route dmz1 x.w.102.0 255.255.254.0 x.x.0.1 1

route dmz1 x.w.105.0 255.255.255.0 x.x.0.1 1

route dmz1 x.w.106.0 255.255.255.0 x.x.0.1 1

route outside x.w.108.0 255.255.255.0 x.x.6.1 1

route outside x.w.114.0 255.255.254.0 x.x.6.1 1

route dmz1 x.w.120.0 255.255.255.0 x.x.0.1 1

route dmz1 x.w.125.0 255.255.255.0 x.x.0.1 1

route dmz1 x.w.150.0 255.255.254.0 x.x.0.1 1

route outside x.w.208.0 255.255.255.0 x.x.6.1 1

route outside x.w.254.2 255.255.255.255 x.x.6.1 1

route dmz1 x.u.3.80 255.255.255.255 x.x.0.1 1

route dmz1 x.u.47.42 255.255.255.255 x.x.0.1 1

route dmz1 x.155.58.0 255.255.255.0 x.x.0.1 1

route dmz1 x.155.202.139 255.255.255.255 x.x.0.1 1

route inside x.76.0.0 255.255.0.0 172.25.1.1 1

route outside x.76.0.0 255.255.255.0 x.x.6.1 1

route outside x.76.15.0 255.255.255.0 x.x.6.1 1

route outside x.76.89.0 255.255.255.0 x.x.6.1 1

route outside x.76.96.0 255.255.255.0 x.x.6.1 1

route outside x.76.180.0 255.255.255.0 x.x.6.1 1

route outside x.76.240.0 255.255.255.0 x.x.6.1 1

route dmz1 x.235.44.0 255.255.255.0 x.x.0.1 1

route inside x.123.96.0 255.255.240.0 172.25.1.1 1

route dmz1 x.123.112.0 255.255.248.0 x.x.0.1 1

route inside x.123.121.0 255.255.255.0 172.25.1.1 1

route inside x.123.136.0 255.255.252.0 172.25.1.1 1

route inside x.123.160.0 255.255.252.0 172.25.1.1 1

route inside x.123.184.0 255.255.252.0 172.25.1.1 1

route inside x.123.188.0 255.255.255.0 172.25.1.1 1

route dmz1 x.145.5.243 255.255.255.255 x.x.0.1 1

route dmz1 x.145.162.34 255.255.255.255 x.x.0.1 1

route dmz1 x.145.162.35 255.255.255.255 x.x.0.1 1

route dmz1 x.145.162.103 255.255.255.255 x.x.0.1 1

route dmz1 x.145.251.154 255.255.255.255 x.x.0.1 1

route dmz1 172.16.0.0 255.255.0.0 x.x.0.1 1

route inside 172.16.16.0 255.255.248.0 172.25.1.7 1

route inside 172.16.16.0 255.255.248.0 172.25.1.4 2

route inside 172.16.80.0 255.255.240.0 172.25.1.7 1

route inside 172.16.80.0 255.255.240.0 172.25.1.4 2

route inside 172.24.0.0 255.255.0.0 172.25.1.7 1

route inside 172.24.0.0 255.255.0.0 172.25.1.4 2

route inside 172.24.0.0 255.255.0.0 172.25.1.1 3

route inside 172.25.0.0 255.255.0.0 172.25.1.1 1

route inside 172.26.0.0 255.255.0.0 172.25.1.1 1

route inside 172.26.16.0 255.255.25.0 172.25.1.1 3

route inside 172.26.144.0 255.255.240.0 172.25.1.7 1

route inside 172.26.144.0 255.255.240.0 172.25.1.4 2

route inside 172.26.144.0 255.255.240.0 172.25.1.1 3

route inside 172.26.158.0 255.255.255.0 172.25.1.5 1

route inside 172.26.160.0 255.255.240.0 172.25.1.7 1

route inside 172.26.160.0 255.255.240.0 172.25.1.4 2

route inside 172.26.160.0 255.255.240.0 172.25.1.1 3

route inside 172.26.176.0 255.255.255.0 172.25.1.7 1

route inside 172.26.176.0 255.255.255.0 172.25.1.4 2

route inside 172.27.128.0 255.255.128.0 172.25.1.1 1

route inside 172.27.132.0 255.255.255.0 172.25.1.1 1

route inside 172.28.0.0 255.252.0.0 172.25.1.1 1

route dmz1 172.30.60.1 255.255.255.255 x.x.0.1 1

route dmz1 1x.x.23.12 255.255.255.255 x.x.0.1 1

route dmz1 1x.x.141.0 255.255.255.0 x.x.0.1 1

route dmz1 1x.168.57.200 255.255.255.255 x.x.0.1 1

route inside 192.168.96.0 255.255.240.0 172.25.1.1 1

route dmz1 192.168.144.0 255.255.240.0 x.x.0.1 1

route inside 192.216.80.0 255.255.255.0 172.25.1.1 1

route dmz1 1x.x.131.0 255.255.255.0 x.x.0.1 1

route dmz1 1x.x.10.0 255.255.255.0 x.x.0.1 1

route dmz1 1x.1x.142.0 255.255.255.0 x.x.0.1 1

route dmz1 1x.1x.143.37 255.255.255.255 x.x.0.1 1

route dmz1 1x.1x.185.0 255.255.255.0 x.x.0.1 1

route inside 1x.1x.2.0 255.255.255.0 172.25.1.1 1

route inside 2xx.1xx.240.0 255.255.248.0 172.25.1.1 1

route inside 2xx.1xx.254.7 255.255.255.255 172.25.1.1 1

route dmz1 2x.x.199.2 255.255.255.255 x.x.0.1 1

route dmz1 2x.x.199.5 255.255.255.255 x.x.0.1 1

route dmz1 2x.x.14.25 255.255.255.255 x.x.0.1 1

route dmz1 2x.2x.180.101 255.255.255.255 x.x.0.1 1

route dmz1 2x.2x.180.113 255.255.255.255 x.x.0.1 1

route dmz1 2x.2x.180.137 255.255.255.255 x.x.0.1 1

route dmz1 2x.2x.184.65 255.255.255.255 x.x.0.1 1

route dmz1 2x.2x.46.9 255.255.255.255 x.x.0.1 1

route dmz1 2x.2x.46.10 255.255.255.255 x.x.0.1 1

route dmz1 2x.2x.46.47 255.255.255.255 x.x.0.1 1

route dmz1 2x.1x.14.250 255.255.255.255 x.x.0.1 1

route dmz1 2x.1x.66.7 255.255.255.255 x.x.0.1 1

route dmz1 2x.1x.66.8 255.255.255.255 x.x.0.1 1

route dmz1 2x.x.188.128 255.255.255.128 x.x.0.1 1

timeout xlate 3:00:00

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00

timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00

timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute

timeout tcp-proxy-reassembly 0:01:00

dynamic-access-policy-record DfltAccessPolicy

aaa-server TACACS+ protocol tacacs+

aaa-server RADIUS protocol radius

aaa-server ACE-Server protocol radius

aaa-server ACS protocol tacacs+

aaa-server ACS (inside) host 172.24.20.59

key xxxxxx

url-server (inside) vendor websense host 172.24.17.120 timeout 30 protocol TCP version 4 connections 5

aaa authentication enable console ACS LOCAL

aaa authentication ssh console ACS LOCAL

aaa authentication telnet console ACS LOCAL

aaa authentication serial console ACS LOCAL

aaa accounting command privilege 15 ACS

aaa accounting telnet console ACS

aaa accounting ssh console ACS

aaa accounting enable console ACS

filter url except 0.0.0.0 0.0.0.0 x.x.73.0 255.255.255.0 allow

filter url except 0.0.0.0 0.0.0.0 x.x.75.0 255.255.255.0 allow

<--- More --->

filter url except 0.0.0.0 0.0.0.0 x.x.250.0 255.255.255.0 allow

filter url 443 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 allow

filter url http 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 allow

http server enable

http 172.24.114.0 255.255.255.0 inside

http 192.168.1.0 255.255.255.0 management

snmp-server host inside 172.24.27.11 community dl-cnad

no snmp-server location

no snmp-server contact

snmp-server community *****

snmp-server enable traps snmp authentication linkup linkdown coldstart

crypto ipsec security-association lifetime seconds 28800

crypto ipsec security-association lifetime kilobytes 4608000

telnet x.y.32.0 255.255.255.0 inside

telnet x.y.34.0 255.255.255.0 inside

telnet timeout 180

ssh 172.24.20.0 255.255.255.0 inside

ssh timeout 60

ssh version 2

console timeout 15

dhcpd address 192.168.1.2-192.168.1.254 management

dhcpd enable management

!

threat-detection basic-threat

threat-detection statistics access-list

no threat-detection statistics tcp-intercept

url-block url-mempool 1500

url-block url-size 4

ntp server 172.24.20.70 source inside

webvpn

username xxx password xxxxx encrypted privilege 15

!

class-map inspection_default

match default-inspection-traffic

!

policy-map type inspect dns migrated_dns_map_1

parameters

message-length maximum 512

policy-map global_policy

class inspection_default

inspect dns migrated_dns_map_1

inspect h323 h225

inspect h323 ras

inspect rsh

inspect rtsp

inspect sqlnet

inspect skinny

inspect sunrpc

inspect xdmcp

inspect netbios

inspect tftp

inspect ftp

inspect icmp

!

service-policy global_policy global

prompt hostname context

Cryptochecksum:5c78698c1a7f5cdd0a7ac1db60ee5ba3

: end

FW1(config)#

Jouni Forss · ‎02-13-2013

Hi,

Well thats a lot of routes and NAT configurations. Might be able to sqeeze that into smaller size probably.

I guess the 2 route-lookups are because of your configurations of "ip verify reverse-path interface" command. It check both the source and destination routing on the ASA.

What confuses me still with the output of the "packet-tracer" is the fact that it states the source and destination interface as the same.

How exactly did you check that the DMZ server was getting PATed according to the "global" rule? Shouldnt you at that moment then see another translation for it?

If you browse to http://www.ripe.net/ with the server what does it show as your public IP address?

Do you perhaps have some HTTP proxy that forwards all traffic through another device which then gets PATed to the "global" address?

- Jouni