ciscoasa# sh run

: Saved

:

ASA Version 8.3(2) 

!

hostname ciscoasa

enable password qM2/Rr9J2rEGCCSH encrypted

passwd qM2/Rr9J2rEGCCSH encrypted

names

!

interface Ethernet0/0

 nameif outside

 security-level 0

 ip address 219.143.38.131 255.255.255.224 

!

interface Ethernet0/1

 nameif inside

 security-level 100

 ip address 192.168.10.1 255.255.255.252 

!

interface Ethernet0/2

 shutdown

 no nameif

 no security-level

 no ip address

!

interface Ethernet0/3

 shutdown     

 no nameif    

 no security-level

 no ip address

!             

interface Management0/0

 nameif management

 security-level 100

 ip address 192.168.1.1 255.255.255.0 

 management-only

!             

ftp mode passive

object network insidenat 

 subnet 172.17.0.0 255.255.0.0

object network obj-172.17.0.0 

 subnet 172.17.0.0 255.255.0.0

object network obj-10.12.1.0 

 subnet 10.12.1.0 255.255.255.0

object service 8066 

 service tcp destination eq 8066 

object service 6001 

 service tcp destination eq 6001 

object network server_200_8099 

 host 172.17.10.200

object service 8080 

 service tcp destination eq 8080 

object network outside_128 

 subnet 219.143.38.128 255.255.255.224

object network outside_131 

 host 219.143.38.131

object network server_200_8080 

 host 172.17.10.200

object network server_200_8066 

 host 172.17.10.200

object network satatic_ip 

object network server_200_5985 

 host 172.17.10.200

object network server_200_6001 

 host 172.17.10.200

object network server_200_8172 

 host 172.17.10.200

access-list vpnclient_splitTunnelAcl standard permit 172.17.0.0 255.255.0.0 

access-list vpnclient_splitTunnelAcl standard permit 192.168.1.0 255.255.255.0 

access-list outside_access_in extended permit icmp any any 

access-list outside_access_in extended permit tcp any host 172.17.10.200 eq 8066 

access-list outside_access_in extended permit tcp any host 172.17.10.200 eq 8080 

access-list outside_access_in extended permit tcp any host 172.17.10.200 eq 8099 

access-list outside_access_in extended permit tcp any host 172.17.10.200 eq 8172 

access-list outside_access_in extended permit tcp any host 172.17.10.200 eq 6001 

access-list outside_access_in extended permit tcp any host 172.17.10.200 eq 5985 

access-list inside_access_in extended permit ip any any 

pager lines 24

logging enable

logging asdm informational

mtu outside 1500

mtu inside 1500

mtu management 1500

ip local pool remotevpn 10.12.1.10-10.12.1.100 mask 255.255.255.0

icmp unreachable rate-limit 1 burst-size 1

no asdm history enable

arp timeout 14400

nat (inside,outside) source dynamic any interface

!             

object network server_200_8099

 nat (inside,outside) static 219.143.38.130 service tcp 8099 8099 

object network server_200_8080

 nat (inside,outside) static 219.143.38.130 service tcp 8080 8080 

object network server_200_8066

 nat (inside,outside) static 219.143.38.130 service tcp 8066 8066 

object network server_200_5985

 nat (inside,outside) static 219.143.38.130 service tcp 5985 5985 

object network server_200_6001

 nat (inside,outside) static 219.143.38.130 service tcp 6001 6001 

object network server_200_8172

 nat (inside,outside) static 219.143.38.130 service tcp 8172 8172 

access-group outside_access_in in interface outside

access-group inside_access_in in interface inside

route outside 0.0.0.0 0.0.0.0 219.143.38.129 1

route inside 172.17.0.0 255.255.0.0 192.168.10.2 1

route inside 192.168.1.0 255.255.255.0 192.168.10.2 1

timeout xlate 3:00:00

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00

timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00

timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute

timeout tcp-proxy-reassembly 0:01:00

dynamic-access-policy-record DfltAccessPolicy

aaa authentication ssh console LOCAL 

http server enable

http 192.168.1.0 255.255.255.0 management

http 172.17.0.0 255.255.0.0 inside

http 0.0.0.0 0.0.0.0 inside

no snmp-server location

no snmp-server contact

snmp-server enable traps snmp authentication linkup linkdown coldstart

crypto ipsec transform-set vpnset esp-3des esp-sha-hmac 

crypto ipsec security-association lifetime seconds 28800

crypto ipsec security-association lifetime kilobytes 4608000

crypto dynamic-map outside-dyn-map 10 set transform-set vpnset

crypto dynamic-map outside-dyn-map 10 set security-association lifetime seconds 288000

crypto dynamic-map outside-dyn-map 10 set reverse-route

crypto map outside-map 10 ipsec-isakmp dynamic outside-dyn-map

crypto map outside-map interface outside

crypto isakmp enable outside

crypto isakmp policy 1

 authentication pre-share

 encryption 3des

 hash sha     

 group 2      

 lifetime 43200

telnet 0.0.0.0 0.0.0.0 inside

telnet timeout 5

ssh 0.0.0.0 0.0.0.0 outside

ssh 0.0.0.0 0.0.0.0 inside

ssh timeout 5 

console timeout 0

dhcpd address 192.168.1.2-192.168.1.254 management

dhcpd enable management

!             

threat-detection basic-threat

threat-detection statistics access-list

no threat-detection statistics tcp-intercept

webvpn        

group-policy vpnclient internal

group-policy vpnclient attributes

 vpn-tunnel-protocol IPSec 

 split-tunnel-policy tunnelspecified

 split-tunnel-network-list value vpnclient_splitTunnelAcl

username cwba password 4JtuzIbMUlctm9e2 encrypted privilege 15

username cisco password QQ8zESqxdmvOsCwt encrypted privilege 15

tunnel-group vpnclient type remote-access

tunnel-group vpnclient general-attributes

 address-pool remotevpn

 default-group-policy vpnclient

tunnel-group vpnclient ipsec-attributes

 pre-shared-key *****

!             

class-map inspection_default

 match default-inspection-traffic

!             

!             

policy-map type inspect dns preset_dns_map

 parameters   

  message-length maximum client auto

  message-length maximum 512

policy-map global_policy

 class inspection_default

  inspect dns preset_dns_map 

  inspect ftp 

  inspect h323 h225 

  inspect h323 ras 

  inspect rsh 

  inspect rtsp 

  inspect esmtp 

  inspect sqlnet 

  inspect skinny  

  inspect sunrpc 

  inspect xdmcp 

  inspect sip  

  inspect netbios 

  inspect tftp 

  inspect ip-options 

!             

service-policy global_policy global

prompt hostname context 

Cryptochecksum:ff8f4dca916eda14e3399d7f3def66cd

: end