I do not get asked for a username and password.
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
service sequence-numbers
!
hostname testroute
!
boot-start-marker
boot system flash:c180x-advipservicesk9-mz.124-24.T4.bin
boot-end-marker
!
security authentication failure rate 3 log
security passwords min-length 6
logging message-counter syslog
logging buffered 1000000
enable secret 5
!
aaa new-model
!
!
aaa authentication login default group radius local
aaa authentication login sdm_vpn_xauth_ml_1 local
aaa authentication login userauthen group radius
aaa authorization exec default group radius if-authenticated
aaa authorization network sdm_vpn_group_ml_1 local
aaa authorization network groupauthor group radius
aaa accounting exec default
action-type start-stop
group radius
!
aaa accounting system default
action-type start-stop
group radius
!
!
!
aaa session-id common
clock timezone GMT 1
clock summer-time PCTime date Mar 27 2011 1:00 Oct 31 2011 2:00
!
crypto pki trustpoint TP-self-signed-
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-
revocation-check none
rsakeypair TP-self-signed-
!
!
crypto pki certificate chain TP-self-signed-
certificate self-signed 01
quit
dot11 syslog
no ip source-route
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address
!
ip dhcp pool test
network
default-router
dns-server
!
!
ip cef
ip domain name test.co.uk
ip name-server
ip name-server
ip name-server
ip ips notify SDEE
ip ips name sdm_ips_rule
ip inspect log drop-pkt
ip inspect one-minute high 3000
ip inspect one-minute low 2250
ip inspect name SDM_LOW cuseeme
ip inspect name SDM_LOW dns
ip inspect name SDM_LOW ftp
ip inspect name SDM_LOW h323
ip inspect name SDM_LOW icmp
ip inspect name SDM_LOW imap
ip inspect name SDM_LOW pop3
ip inspect name SDM_LOW netshow
ip inspect name SDM_LOW rcmd
ip inspect name SDM_LOW realaudio
ip inspect name SDM_LOW rtsp
ip inspect name SDM_LOW sqlnet
ip inspect name SDM_LOW streamworks
ip inspect name SDM_LOW tftp
ip inspect name SDM_LOW vdolive
ip inspect name SDM_LOW tcp
ip inspect name SDM_LOW esmtp max-data 30000000 timeout 3600
ip inspect name SDM_LOW http timeout 3600
ip inspect name SDM_HIGH appfw SDM_HIGH
ip inspect name SDM_HIGH icmp
ip inspect name SDM_HIGH dns
ip inspect name SDM_HIGH https timeout 3600
ip inspect name SDM_HIGH imap reset
ip inspect name SDM_HIGH pop3 reset
ip inspect name SDM_HIGH ftp
ip inspect name SDM_HIGH ntp
ip inspect name SDM_HIGH esmtp max-data 30000000 timeout 3600
ip inspect name SDM_HIGH http timeout 3600
ip inspect name test_DMZ http
ip inspect name test_DMZ bootpc
ip inspect name test_DMZ bootps
ip inspect name test_DMZ smtp
ip inspect name test_DMZ pop3
ip inspect name test_DMZ https
ip inspect name test-DMZ dns
ip urlfilter max-request 5000
ip urlfilter max-resp-pak 1000
ip urlfilter cache 50000
no ipv6 cef
!
appfw policy-name SDM_LOW
application http
port-misuse p2p action reset alarm
!
appfw policy-name SDM_HIGH
application im aol
service default action reset alarm
service text-chat action reset alarm
server deny name login.oscar.aol.com
server deny name toc.oscar.aol.com
server deny name oam-d09a.blue.aol.com
audit-trail on
application im msn
service default action reset alarm
service text-chat action reset alarm
server deny name messenger.hotmail.com
server deny name gateway.messenger.hotmail.com
server deny name webmessenger.msn.com
audit-trail on
application http
port-misuse im action reset alarm
port-misuse p2p action reset alarm
application im yahoo
service default action reset alarm
service text-chat action reset alarm
server deny name scs.msg.yahoo.com
server deny name scsa.msg.yahoo.com
server deny name scsb.msg.yahoo.com
server deny name scsc.msg.yahoo.com
server deny name scsd.msg.yahoo.com
server deny name cs16.msg.dcn.yahoo.com
server deny name cs19.msg.dcn.yahoo.com
server deny name cs42.msg.dcn.yahoo.com
server deny name cs53.msg.dcn.yahoo.com
server deny name cs54.msg.dcn.yahoo.com
server deny name ads1.vip.scd.yahoo.com
server deny name radio1.launch.vip.dal.yahoo.com
server deny name in1.msg.vip.re2.yahoo.com
server deny name data1.my.vip.sc5.yahoo.com
server deny name address1.pim.vip.mud.yahoo.com
server deny name edit.messenger.yahoo.com
server deny name messenger.yahoo.com
server deny name http.pager.yahoo.com
server deny name privacy.yahoo.com
server deny name csa.yahoo.com
server deny name csb.yahoo.com
server deny name csc.yahoo.com
audit-trail on
!
multilink bundle-name authenticated
!
password encryption aes
!
!
username privilege 15 secret 5
username secret 5
username secret 5
username secret 5
username secret 5
username secret 5
username secret 5
username secret 5
username privilege 15 secret 5
username privilege 7 secret 5
username secret 5
!
!
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp keepalive 60 30 periodic
!
crypto isakmp client configuration group test
key 6
dns
domain testtest
pool SDM_POOL_test
acl 103
save-password
crypto isakmp profile sdm-ike-profile-1
match identity group test
client authentication list userauthen
isakmp authorization list groupauthor
client configuration address respond
virtual-template 1
!
crypto ipsec security-association lifetime seconds 120
!
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
!
crypto ipsec profile SDM_Profile1
set security-association lifetime seconds 3600
set transform-set ESP-3DES-SHA
set isakmp-profile sdm-ike-profile-1
!
!
archive
log config
hidekeys
!
!
ip tcp synwait-time 10
!
class-map match-any sdm_p2p_kazaa
match protocol fasttrack
match protocol kazaa2
class-map match-any sdm_p2p_edonkey
match protocol edonkey
class-map match-any sdm_p2p_gnutella
match protocol gnutella
class-map match-any sdm_p2p_bittorrent
match protocol bittorrent
!
!
policy-map sdmappfwp2p_SDM_LOW
class sdm_p2p_bittorrent
policy-map sdmappfwp2p_SDM_HIGH
class sdm_p2p_edonkey
drop
class sdm_p2p_gnutella
drop
class sdm_p2p_kazaa
drop
!
!
!
!
interface ATM0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
no atm ilmi-keepalive
!
interface ATM0.1 point-to-point
description $ES_WAN$
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1200
pvc 0/38
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface BRI0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
encapsulation hdlc
shutdown
!
interface FastEthernet0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
shutdown
duplex auto
speed auto
!
interface FastEthernet1
switchport access vlan 2
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
!
interface FastEthernet5
!
interface FastEthernet6
!
interface FastEthernet7
!
interface FastEthernet8
!
interface Virtual-Template1 type tunnel
ip unnumbered Dialer0
no ip redirects
no ip unreachables
no ip proxy-arp
tunnel mode ipsec ipv4
tunnel protection ipsec profile SDM_Profile1
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-FE 1$$ES_LAN$$FW_INSIDE$
ip address
ip access-group 102 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip inspect SDM_HIGH in
ip virtual-reassembly
ip tcp adjust-mss 1200
!
interface Vlan2
description $FW_INSIDE$
ip address
ip access-group 105 in
ip access-group 106 out
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip inspect test_DMZ in
ip virtual-reassembly
!
interface Dialer0
description $FW_OUTSIDE$
ip address
ip access-group 101 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip nbar protocol-discovery
ip nat outside
ip ips sdm_ips_rule in
ip ips sdm_ips_rule out
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
fair-queue 64 16 256
no cdp enable
ppp authentication chap callin
ppp chap hostname
ppp chap password 7
service-policy output sdmappfwp2p_SDM_HIGH
!
ip local pool SDM_POOL_1
ip local pool SDM_POOL_test
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer0
ip http server
ip http access-class 2
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
ip nat pool test_DMZ netmask
ip nat inside source list 3 pool test_DMZ overload
ip nat inside source list 150 interface Dialer0 overload
ip nat inside source static tcp 3101 interface Dialer0 3101
ip nat inside source static tcp 22 22 extendable
ip nat inside source static
!
logging trap notifications
logging 172.16.100.1
dialer-list 1 protocol ip permit
no cdp run
!
!
!
!
!
snmp-server community testsnmp RO 10
snmp-server enable traps snmp authentication linkdown linkup coldstart
snmp-server enable traps syslog
snmp-server host testsnmp
radius-server host auth-port 1645 acct-port 1646 key 7
!
control-plane
!
banner login ^CCC
-----------------------------------------------------------------------
Authorized access only
This system is the property of test test.
Your IP address has been logged.
Disconnect IMMEDIATELY as you are not an authorized user!
Contact the test test administrator if you need access to this or other systems belonging to test test.
------------------------------------------------------------------------
^C
!
line con 0
transport output telnet
line aux 0
transport output telnet
line vty 0 4
logging synchronous
transport input telnet ssh
line vty 5 15
transport input telnet ssh
!
scheduler interval 500
ntp update-calendar
ntp server 172.16.100.10
!
webvpn context Default_context
ssl authenticate verify all
!
no inservice
!
end
