Hello, I was traying to make a traffic policing over a Cisco ASA 5505. The problem that i had is that i can´t find the way to apply that over 2 different interfaces. This is the scenario: I have 20 Mbps from my ISP Cisco ASA Interfaces: Interface Vlan1 = inside = network 172.22.0.0/16 Interface Vlan2 = outside Interface Vlan3 = inside2 = network 192.168.100.0/24 I want to assign 10 Mbps internet BW for each inside interfaces This is what i was trating to do: access-list QOS-VLAN3 extended permit tcp 192.168.100.0 255.255.255.0 eq www any access-list QOS-VLAN1 extended permit tcp 172.22.0.0 255.255.0.0 eq www any class-map CM-QOS-VLAN3 match access-list QOS-VLAN3 class-map CM-QOS-VLAN1 match access-list QOS-VLAN1 policy-map PM-QOS-VLAN3 class CM-QOS-VLAN3   police input 10000000 10000000 policy-map PM-QOS-VLAN1 class CM-QOS-VLAN1   police input 10000000 10000000 service-policy PM-QOS-VLAN3 interface outside and then if i tried to apply the service policy to VLAN1 its said that there is already a policy. Need help on that. Justo want to assign 10Mbps BW for each interface. Thanks ! ... View more

Hello, Today i was creating a read only user on my cisco asa 5510. Before that i only had my enable password My problem now is that after i created the read only user im not able to access to the cisco asa with my enable password but im able to do that with the read only user. Following is the image of my user account. Can anybody help me. I need to access with the enable in order to make some changes. ... View more

I was traying to make a site to site VPN between a cisco 1800 router and cisco asa 5510. But it was impossible to get it. I get: asa# Nov 30 08:07:00 [IKEv1]: Group = 187.xxx.xxx.xxx, IP = 187.xxx.xxx.xxx, QM FSM error (P2 struct &0xd6bf7d10, mess id 0x39286aa1)! Nov 30 08:07:00 [IKEv1]: Group = 187.xxx.xxx.xxx, IP = 187.xxx.xxx.xxx, construct_ipsec_delete(): No SPI to identify Phase 2 SA! Nov 30 08:07:00 [IKEv1]: Group = 187.xxx.xxx.xxx, IP = 187.xxx.xxx.xxx, Removing peer from correlator table failed, no match! And i can´t find out where is the problem. Here is my config Cisco 1800 crypto isakmp policy 2 authentication pre-share crypto isakmp key ABCDE address 200.xxx.xxx.xxx crypto ipsec security-association lifetime seconds 28800 crypto ipsec transform-set IOS-IPSEC esp-3des esp-sha-hmac crypto map CMAP_1 1 ipsec-isakmp description Tunnel to 200.xxx.xxx.xxx set peer 200.xxx.xxx.xxx match address VPN_SANTANA interface FastEthernet0 description $ES_WAN$$FW_OUTSIDE$$ETH-WAN$ ip address 187.xxx.xxx.xxx 255.255.255.248 ip nat outside ip virtual-reassembly ip route-cache flow duplex auto speed auto crypto map CMAP_1 ip access-list extended VPN_SANTANA permit ip 172.18.1.0 0.0.0.255 172.17.0.0 0.0.255.255 route-map nonat permit 10 match ip address VPN_SANTANA Cisco ASA access-list ACL-VPN-SANTANA extended permit ip 172.17.0.0 255.255.0.0 172.18.1.0 255.255.255.0 crypto ipsec transform-set 3ESP-DES-SHA esp-des esp-sha-hmac crypto map outside_map 120 match address ACL-VPN-SANTANA crypto map outside_map 120 set peer 187.9.57.10 crypto map outside_map 120 set transform-set 3ESP-DES-SHA crypto map outside_map 120 set security-association lifetime seconds 28800 crypto map outside_map 120 set security-association lifetime kilobytes 4608000 crypto isakmp policy 120 authentication pre-share encryption des hash sha group 1 lifetime 86400 tunnel-group 187.9.57.10 type ipsec-l2l tunnel-group 187.9.57.10 ipsec-attributes pre-shared-key * Any idea why this error ? ... View more

Hello, Im having problems to load a VPN site to site between Cisco Asa 5510 and 5505. In the 5510 i already have 2 VPNs up and running to others sites (both with Asa 5510). But this one dont even start the phase 1. Of course i have internet access in both sites, but i can´t find or troubleshoot anything. Nothings comes to my mind. I think that something from the new 5505 is wrong or miss, but i dont know what Sh ver of the asa 5505 ASA-TA up 58 mins 4 secs Hardware:   ASA5505, 512 MB RAM, CPU Geode 500 MHz Internal ATA Compact Flash, 128MB BIOS Flash Firmware Hub @ 0xffe00000, 1024KB Encryption hardware device : Cisco ASA-5505 on-board accelerator (revision 0x0)                              Boot microcode   : CN1000-MC-BOOT-2.00                              SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03                              IPSec microcode  : CNlite-MC-IPSECm-MAIN-2.04 0: Int: Internal-Data0/0    : address is 4055.39ee.d9b3, irq 11 1: Ext: Ethernet0/0         : address is 4055.39ee.d9ab, irq 255 2: Ext: Ethernet0/1         : address is 4055.39ee.d9ac, irq 255 3: Ext: Ethernet0/2         : address is 4055.39ee.d9ad, irq 255 4: Ext: Ethernet0/3         : address is 4055.39ee.d9ae, irq 255 5: Ext: Ethernet0/4         : address is 4055.39ee.d9af, irq 255 6: Ext: Ethernet0/5         : address is 4055.39ee.d9b0, irq 255 7: Ext: Ethernet0/6         : address is 4055.39ee.d9b1, irq 255 8: Ext: Ethernet0/7         : address is 4055.39ee.d9b2, irq 255 9: Int: Internal-Data0/1    : address is 0000.0003.0002, irq 255 10: Int: Not used            : irq 255 11: Int: Not used            : irq 255 Licensed features for this platform: Maximum Physical Interfaces  : 8 VLANs                        : 3, DMZ Restricted Inside Hosts                 : Unlimited Failover                     : Disabled VPN-DES                      : Enabled VPN-3DES-AES                 : Enabled SSL VPN Peers                : 2 Total VPN Peers              : 10 Dual ISPs                    : Disabled VLAN Trunk Ports             : 0 Shared License               : Disabled AnyConnect for Mobile        : Disabled AnyConnect for Linksys phone : Disabled AnyConnect Essentials        : Disabled Advanced Endpoint Assessment : Disabled UC Phone Proxy Sessions      : 2 Total UC Proxy Sessions      : 2 Botnet Traffic Filter        : Disabled This platform has a Base license. Serial Number: JMX152140Z8 Running Activation Key: 0x5f2ef375 0x78131da1 0x4070b5d8 0xba5c08f8 0x080800b2 Configuration register is 0x1 Configuration last modified by enable_15 at 09:10:55.809 UTC Wed Oct 12 2011 Here is the configs ASA 5505 access-list vpnassa extended permit ip 192.168.24.0 255.255.255.0 172.16.0.0 255.255.0.0 access-list ACL-VPN-LIMATAND extended permit ip 192.168.24.0 255.255.255.0 172.16.0.0 255.255.0.0 nat (inside) 0 access-list vpnassa route outside 172.16.0.0 255.255.0.0 200.x.x.x 1 route outside 200.x.x.x 255.255.255.255 200.x.x.x 1 crypto ipsec transform-set myset1 esp-3des esp-sha-hmac crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac crypto ipsec transform-set ESP-AES-SHA esp-aes esp-sha-hmac crypto ipsec transform-set 3ESP-DES-SHA esp-3des esp-sha-hmac crypto ipsec security-association lifetime seconds 28800 crypto ipsec security-association lifetime kilobytes 4608000 crypto map outside_map 10 match address ACL-VPN-LIMATAND crypto map outside_map 10 set peer 200.1.x.x crypto map outside_map 10 set transform-set ESP-3DES-SHA crypto map outside_map 10 set security-association lifetime seconds 28800 crypto map outside_map 10 set security-association lifetime kilobytes 4608000 crypto isakmp identity address crypto isakmp enable outside crypto isakmp policy 30 authentication pre-share encryption 3des hash sha group 2 lifetime 86400 crypto isakmp policy 40 authentication pre-share encryption aes hash sha group 2 lifetime 28800 crypto isakmp policy 70 authentication pre-share encryption des hash sha group 1 lifetime 86400 tunnel-group 200.1.x.x type ipsec-l2l tunnel-group 200.1.x.x ipsec-attributes pre-shared-key * ASA 5510 access-list vpnassa extended permit ip 172.16.0.0 255.255.0.0 192.168.24.0 255.255.255.0 access-list ACL-VPN-LIMATAND extended permit ip 172.16.0.0 255.255.0.0 192.168.24.0 255.255.255.0 nat (inside) 0 access-list vpnassa route outside 192.168.24.0 255.255.255.0 200.x.x.x 1 route outside 200.x.x.x 255.255.255.255 200.x.x.x 1 crypto ipsec transform-set myset1 esp-3des esp-sha-hmac crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac crypto ipsec transform-set ESP-AES-SHA esp-aes esp-sha-hmac crypto ipsec transform-set 3ESP-DES-SHA esp-3des esp-sha-hmac crypto map outside_map 10 match address ACL-VPN-LIMATAND crypto map outside_map 10 set peer 200.2.x.x crypto map outside_map 10 set transform-set ESP-3DES-SHA crypto map outside_map 10 set security-association lifetime seconds 28800 crypto map outside_map 10 set security-association lifetime kilobytes 4608000 crypto isakmp identity address crypto isakmp enable outside crypto isakmp policy 30 authentication pre-share encryption 3des hash sha group 2 lifetime 86400 crypto isakmp policy 40 authentication pre-share encryption aes hash sha group 2 lifetime 28800 crypto isakmp policy 70 authentication pre-share encryption des hash sha group 1 lifetime 86400 tunnel-group 200.2.x.x type ipsec-l2l tunnel-group 200.2.x.x ipsec-attributes pre-shared-key * Thanks in advanced ... View more

Hi, I would like to know if there is a way to apply in the Cisco asa 5510 traffic shaping not for a interface but a single IP address. For example i would like to limit the bandwith for the IP address of my FTP server. Can someone help me ?. Thanks ! ... View more

Hello, Im traying to fix a problem that im getting from a long time ago. Here is the scenario: I setup RA-VPN under local asa 5510 IP pool (192.168.127.0/24) and all was working fine. I got internet and local network access. Then i have 5 site to site VPN working fine but when im traying to access to those L2L VPNs from the remote acces client im not able to do that. So after that i decided to obtain IP addresses from my DHCP server so i can obtain IPs from my local network (172.17.16.0/16) and then access normally to the VPN site to site. But the surprise was that the VPN cisco client is getting local IP address (172.17.16.222) perfectly but im not able to access even to my local network. note: i have the same-security-traffic permit inter-interface same-security-traffic permit intra-interface enable. Any idea ? ... View more

Hi, I have a printer in my local network and it has a external smtp server for scanner propose. Yesterday i enable the firewall with the SDM cause i wanted to block URLs. But now im not able to connect to port 25 to the smtp. I tried to clear some config but im not finding where the firewall is blocking the port 25. Can someone help me My config service tcp-keepalives-in service tcp-keepalives-out service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone service password-encryption service sequence-numbers ! hostname xxxx ! boot-start-marker boot-end-marker ! security authentication failure rate 3 log security passwords min-length 6 logging buffered 100200 logging console critical ! aaa new-model ! ! aaa authentication login default local aaa authorization exec default local ! ! aaa session-id common clock timezone PCTime -3 ! crypto pki trustpoint TP-self-signed-910902666 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-910902666 revocation-check none rsakeypair TP-self-signed-910902666 ! ! no ip cef no ip dhcp use vrf connected ip dhcp excluded-address 192.xxx.xxx.1 ip dhcp excluded-address 192.xxx.xxx.2 ip dhcp excluded-address 192.xxx.xxx.3 ip dhcp excluded-address 192.xxx.xxx.4 ip dhcp excluded-address 192.xxx.xxx.5 ip dhcp excluded-address 192.xxx.xxx.6 ip dhcp excluded-address 192.xxx.xxx.7 ip dhcp excluded-address 192.xxx.xxx.8 ip dhcp excluded-address 192.xxx.xxx.9 ip dhcp excluded-address 192.xxx.xxx.10 ! ip dhcp pool inetjj    network 192.xxx.xxx.0 255.255.255.0    dns-server xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx    default-router 192.xxx.xxx.1    lease 2 ! ! ip domain name yourdomain.com ip name-server 200.xxx.xxx.xxx ip name-server 200.xxx.xxx.xxx ! multilink bundle-name authenticated parameter-map type urlfilter bloqueourl alert off source-interface FastEthernet0 allow-mode on exclusive-domain deny www.youtube.com exclusive-domain deny www.facebook.com exclusive-domain deny www.twitter.com exclusive-domain deny .taringa.net exclusive-domain deny .rapidshare.com exclusive-domain deny .megaupload.com exclusive-domain deny .rojadirecta.com exclusive-domain deny .justin.tv exclusive-domain deny .rojadirecta.org ! ! archive log config   hidekeys ! ! ip tcp synwait-time 10 ip ssh time-out 60 ip ssh authentication-retries 2 ! class-map type inspect match-any sdm-cls-insp-traffic match protocol cuseeme match protocol dns match protocol ftp match protocol h323 match protocol https match protocol icmp match protocol netshow match protocol shell match protocol realmedia match protocol rtsp match protocol sql-net match protocol streamworks match protocol tftp match protocol vdolive match protocol tcp match protocol udp class-map type inspect match-all sdm-insp-traffic match class-map sdm-cls-insp-traffic class-map type inspect match-any SDM-Voice-permit match protocol h323 match protocol skinny match protocol sip match protocol smtp match protocol pop3 class-map type inspect match-any sdm-cls-icmp-access match protocol icmp match protocol tcp match protocol udp class-map type inspect match-all sdm-invalid-src match access-group 106 class-map type inspect match-all sdm-icmp-access match class-map sdm-cls-icmp-access class-map type inspect match-all sdm-protocol-http match protocol http match access-group name Bloqueos ! ! policy-map type inspect sdm-permit-icmpreply class type inspect sdm-icmp-access   inspect class class-default   pass policy-map type inspect sdm-inspect class type inspect sdm-protocol-http   inspect   urlfilter bloqueourl class type inspect sdm-invalid-src   inspect class type inspect sdm-insp-traffic   inspect class type inspect SDM-Voice-permit   inspect class class-default   pass policy-map type inspect sdm-permit class class-default   drop ! zone security out-zone zone security in-zone zone-pair security sdm-zp-self-out source self destination out-zone service-policy type inspect sdm-permit-icmpreply zone-pair security sdm-zp-out-self source out-zone destination self service-policy type inspect sdm-permit zone-pair security sdm-zp-in-out source in-zone destination out-zone service-policy type inspect sdm-inspect ! ! ! interface FastEthernet0 description $ES_WAN$$ETH-WAN$$FW_OUTSIDE$ ip address xxx.xxx.xxx.xxx 255.255.255.248 ip nat outside no ip virtual-reassembly zone-member security out-zone ip route-cache flow duplex auto speed auto ! interface BRI0 no ip address encapsulation hdlc ip route-cache flow shutdown ! interface FastEthernet1 ! interface FastEthernet2 ! interface FastEthernet3 ! interface FastEthernet4 ! interface FastEthernet5 switchport access vlan 100 ! interface FastEthernet6 switchport access vlan 100 ! interface FastEthernet7 switchport access vlan 100 switchport mode trunk ! interface FastEthernet8 switchport access vlan 100 ! interface ATM0 no ip address shutdown no atm ilmi-keepalive dsl operating-mode auto ! interface Vlan1 description $FW_INSIDE$ ip address 1xxx.xxx.xxx.xxx 255.255.254.0 ip nat inside ip virtual-reassembly zone-member security in-zone ip route-cache flow ip tcp adjust-mss 1452 ! interface Vlan100 description JJINET$FW_INSIDE$ ip address 1xxx.xxx.xxx.xxx 255.255.255.0 ip nat inside ip virtual-reassembly zone-member security in-zone ip route-cache flow ip tcp adjust-mss 1452 ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 1xxx.xxx.xxx.xxx ! ! ip http server ip http access-class 23 ip http authentication local ip http secure-server ip http timeout-policy idle 60 life 86400 requests 10000 ip nat pool rdesktop 172.xxx.xxx.57 172.xxx.xxx.57 netmask 255.255.255.0 type rotary ip nat inside source route-map SDM_RMAP_1 interface FastEthernet0 overload ip nat inside destination list 100 pool rdesktop ip access-list extended Bloqueos remark SDM_ACL Category=128 permit ip 192.0.0.0 0.255.255.255 any permit ip 10.xxx.xxx0 0.0.255.255 any ip access-list extended SDM_HTTPS remark SDM_ACL Category=1 permit tcp any any eq 443 ip access-list extended SDM_SHELL remark SDM_ACL Category=1 permit tcp any any eq cmd ip access-list extended SDM_SSH remark SDM_ACL Category=1 permit tcp any any eq 22 ! access-list 1 remark INSIDE_IF=Vlan1 access-list 1 remark SDM_ACL Category=2 access-list 1 permit 172.18.1.0 0.0.0.255 access-list 100 permit tcp any any eq 3389 access-list 101 remark SDM_ACL Category=4 access-list 101 remark IPSec Rule access-list 101 permit ip 172.18.1.0 0.0.0.255 172.18.2.0 0.0.0.255 access-list 106 remark SDM_ACL Category=128 access-list 106 permit ip host 255.255.255.255 any access-list 106 permit ip 127.0.0.0 0.255.255.255 any access-list 106 permit ip 190.xxx.xxx.56 0.0.0.7 any access-list 106 permit ip 192.0.0.0 0.255.255.255 any access-list 106 permit ip 10.xxx.xxx.0 0.0.255.255 any access-list 106 permit ip host 200.xxx.xxx.149 any    (PRINTER HOST) access-list 106 permit ip any host 200.xxx.xxx.149    (PRINTER HOST) snmp-server community asaro RO no cdp run ! ! ! route-map SDM_RMAP_1 permit 1 match ip address 102 ! ! ! ! control-plane ! banner login ^CCAuthorized access only! Disconnect IMMEDIATELY if you are not an authorized user!^C ! line con 0 transport output telnet line aux 0 transport output telnet line vty 0 4 ! end ... View more

Hello, I was looking to put on my Cisco 1801 router local content filtering. I made the configuration but after i put the zone-member secutrity outside in my wan interface all the internet conection drop. Someone can give me an idea of what is happening here is my config Current configuration : 7679 bytes ! version 12.4 service tcp-keepalives-in service tcp-keepalives-out service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone service password-encryption service sequence-numbers ! hostname jjinet ! boot-start-marker boot-end-marker ! security authentication failure rate 3 log security passwords min-length 6 logging buffered 100200 logging console critical enable secret 5 $1$unp8$i8mCJA/lI5E5qeqY3q8oc/ ! aaa new-model ! ! aaa authentication login default local aaa authorization exec default local ! ! aaa session-id common clock timezone PCTime -3 ! ! no ip cef no ip dhcp use vrf connected ip dhcp excluded-address 192.168.100.1 ip dhcp excluded-address 192.168.100.2 ip dhcp excluded-address 192.168.100.3 ip dhcp excluded-address 192.168.100.4 ip dhcp excluded-address 192.168.100.5 ip dhcp excluded-address 192.168.100.6 ip dhcp excluded-address 192.168.100.7 ip dhcp excluded-address 192.168.100.8 ip dhcp excluded-address 192.168.100.9 ip dhcp excluded-address 192.168.100.10 ! ip dhcp pool ine    network 192.168.100.0 255.255.255.0    dns-server 208.67.220.220 208.67.222.222    default-router 192.168.100.1    lease 2 ! ! ip domain name yourdomain.com ip name-server xxx.xxx.48.233 ip name-server xxx.xxx.191.35 ! multilink bundle-name authenticated parameter-map type urlfilter bloqueourl alert off source-interface FastEthernet0 allow-mode on exclusive-domain deny www.youtube.com exclusive-domain deny www.facebook.com exclusive-domain deny www.twitter.com exclusive-domain deny .taringa.net exclusive-domain deny .rapidshare.com exclusive-domain deny .megaupload.com exclusive-domain deny .rojadirecta.com exclusive-domain deny .justin.tv exclusive-domain deny .rojadirecta.org ! ! archive log config   hidekeys ! ! ip tcp synwait-time 10 ip ssh time-out 60 ip ssh authentication-retries 2 ! class-map type inspect match-any Control match protocol dns match protocol icmp class-map type inspect match-any Web match protocol http class-map match-all SecureWeb match protocol secure-http class-map type inspect match-all WebSecure match protocol https ! ! policy-map type inspect http bloqueourl policy-map type inspect InsideToOutside class type inspect Web   inspect class type inspect Control   inspect class type inspect WebSecure   inspect class class-default   drop ! zone security Inside zone security Outside zone-pair security Inside_to_Outside source Inside destination Outside service-policy type inspect InsideToOutside ! ! interface FastEthernet0 description $ES_WAN$$ETH-WAN$$FW_OUTSIDE$ ip address xxx.xxx.xxx.xxx 255.255.255.248 ip nat outside no ip virtual-reassembly ip route-cache flow duplex auto speed auto ! interface BRI0 no ip address encapsulation hdlc ip route-cache flow shutdown ! interface FastEthernet1 ! interface FastEthernet2 ! interface FastEthernet3 ! interface FastEthernet4 ! interface FastEthernet5 switchport access vlan 100 ! interface FastEthernet6 switchport access vlan 100 ! interface FastEthernet7 switchport access vlan 100 switchport mode trunk ! interface FastEthernet8 switchport access vlan 100 ! interface ATM0 no ip address shutdown no atm ilmi-keepalive dsl operating-mode auto ! interface Vlan1 description FW_INSIDE ip address 10.96.50.3 255.255.254.0 ip nat inside ip virtual-reassembly zone-member security Inside ip route-cache flow ip tcp adjust-mss 1452 ! interface Vlan100 description JJJJJ ip address 192.168.100.1 255.255.255.0 ip nat inside ip virtual-reassembly ip route-cache flow ip tcp adjust-mss 1452 ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 xxx.xxx.xxx.xxx ! ! ip http server ip http access-class 23 ip http authentication local ip http secure-server ip http timeout-policy idle 60 life 86400 requests 10000 ip nat pool rdesktop 172.18.1.57 172.18.1.57 netmask 255.255.255.0 type rotary ip nat inside source route-map SDM_RMAP_1 interface FastEthernet0 overload ip nat inside destination list 100 pool rdesktop ! ip access-list extended SDM_HTTPS remark SDM_ACL Category=1 permit tcp any any eq 443 ip access-list extended SDM_SHELL remark SDM_ACL Category=1 permit tcp any any eq cmd ip access-list extended SDM_SSH remark SDM_ACL Category=1 permit tcp any any eq 22 ! logging trap debugging logging xxx.xxx.xxx.100 access-list 1 remark INSIDE_IF=Vlan1 access-list 1 remark SDM_ACL Category=2 access-list 1 permit 172.18.1.0 0.0.0.255 access-list 100 permit tcp any any eq 3389 access-list 101 remark SDM_ACL Category=4 access-list 101 remark IPSec Rule access-list 101 permit ip 172.18.1.0 0.0.0.255 172.18.2.0 0.0.0.255 access-list 102 remark SDM_ACL Category=2 access-list 102 remark IPSec Rule access-list 102 deny   ip 172.18.1.0 0.0.0.255 172.18.2.0 0.0.0.255 access-list 102 permit ip 172.18.1.0 0.0.0.255 any access-list 102 permit ip 10.96.0.0 0.0.255.255 any access-list 102 permit ip 192.168.100.0 0.0.0.255 any access-list 102 permit icmp 192.168.100.0 0.0.0.255 any access-list 103 remark SDM_ACL Category=128 access-list 103 permit ip host 255.255.255.255 any access-list 103 permit ip 127.0.0.0 0.255.255.255 any access-list 103 permit ip 190.226.229.56 0.0.0.7 any access-list 103 permit ip 192.0.0.0 0.255.255.255 any access-list 103 permit ip 10.96.0.0 0.0.255.255 any access-list 104 remark SDM_ACL Category=128 access-list 104 permit ip 10.96.50.0 0.0.1.255 any access-list 105 permit ip 192.168.100.0 0.0.0.255 any access-list 105 permit icmp any any snmp-server community as RO no cdp run ! ! ! route-map SDM_RMAP_1 permit 1 match ip address 102 ! ! ! ! control-plane ! banner login ^CCAuthorized access only! Disconnect IMMEDIATELY if you are not an authorized user!^C ! line con 0 transport output telnet line aux 0 transport output telnet line vty 0 4 ! end ... View more