show run

: Saved

:

ASA Version 8.2(1) 

!

hostname ASA-Internet

domain-name cisco.com

enable password 7EllqfVRsR7BBsUO encrypted

passwd 2KFQnbNIdI.2KYOU encrypted

names

!

interface Ethernet0/0

 nameif outside

 security-level 0

 ip address 61.148.8.230 255.255.255.252 

!

interface Ethernet0/1

 nameif inside

 security-level 100

 ip address 172.32.3.178 255.255.255.240 

!

interface Ethernet0/2

 nameif dmz

 security-level 50

 ip address 192.168.100.1 255.255.255.0 

!

interface Ethernet0/3

shutdown

 no nameif

 no security-level

 no ip address

!

interface Management0/0

 nameif management

 security-level 100

 ip address 192.168.1.1 255.255.255.0 

 management-only

!

ftp mode passive

dns server-group DefaultDNS

 domain-name cisco.com

object-group network nat-internet

 network-object 10.18.46.0 255.255.255.128

 network-object 10.18.48.0 255.255.255.0

object-group network BJ_Servers

 network-object host 10.18.46.30

 network-object host 10.18.16.173

 network-object host 10.18.16.43

 network-object host 10.18.19.17

 network-object host 10.18.16.37

object-group network BJ_Users_Group

 network-object host 10.18.16.155

 network-object host 10.18.16.176

 network-object host 10.18.16.169

 network-object host 10.18.16.171

 network-object host 10.18.18.87

 network-object host 10.18.16.163

 network-object host 10.18.16.198

 network-object host 10.18.16.154

 network-object host 10.18.16.190

object-group network HQ_Users_Group

 network-object host 10.18.19.8

 network-object host 10.18.19.77

 network-object host 10.18.19.55

 network-object host 10.18.19.19

 network-object host 10.18.19.37

 network-object host 10.18.19.50

 network-object host 10.18.19.83

 network-object host 10.18.19.85

 network-object host 10.18.19.81

 network-object host 10.18.19.87

 network-object host 10.18.19.20

 network-object host 10.18.19.118

 network-object host 10.18.19.115

 network-object host 10.18.19.103

 network-object host 10.18.19.44

 network-object host 10.18.19.119

 network-object host 10.18.19.88

object-group network ING_Users

 network-object host 10.18.18.143

 network-object host 10.18.18.138

 network-object host 10.18.18.139

 network-object host 10.18.18.135

 network-object host 10.18.18.144

 network-object host 10.18.18.148

 network-object host 10.18.18.145

 network-object host 10.18.48.100

access-list 100 extended permit ip object-group nat-internet any 

access-list TO_internet extended permit ip object-group BJ_Servers any 

access-list TO_internet extended permit ip object-group BJ_Users_Group any 

access-list TO_internet extended permit ip object-group HQ_Users_Group any 

access-list TO_internet extended permit ip object-group ING_Users any 

access-list 120 extended permit icmp any any 

access-list 120 extended permit tcp any host 61.148.8.230 eq telnet 

access-list 110 extended permit icmp any any 

access-list 110 extended permit ip any any 

pager lines 24

logging asdm informational

mtu management 1500

< 

mtu outside 1500

mtu inside 1500

mtu dmz 1500

icmp unreachable rate-limit 1 burst-size 1

no asdm history enable

arp timeout 14400

global (outside) 1 interface

nat (inside) 1 access-list TO_internet

nat (dmz) 1 0.0.0.0 0.0.0.0

static (inside,outside) tcp interface telnet 172.32.3.179 telnet netmask 255.255.255.255 

access-group 120 in interface outside

access-group 110 in interface dmz

route outside 0.0.0.0 0.0.0.0 61.148.8.229 1

route inside 10.0.0.0 255.0.0.0 172.32.3.179 1

route inside 10.18.18.128 255.255.255.224 172.32.3.179 1

route inside 10.18.48.0 255.255.255.0 172.32.3.179 1

timeout xlate 3:00:00

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00

timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00

timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute

timeout tcp-proxy-reassembly 0:01:00

dynamic-access-policy-record DfltAccessPolicy

aaa authentication telnet console LOCAL 

<--- More --->

              

http server enable

http 192.168.1.0 255.255.255.0 management

no snmp-server location

no snmp-server contact

snmp-server enable traps snmp authentication linkup linkdown coldstart

crypto ipsec security-association lifetime seconds 28800

crypto ipsec security-association lifetime kilobytes 4608000

telnet 0.0.0.0 0.0.0.0 inside

telnet timeout 5

ssh 0.0.0.0 0.0.0.0 outside

ssh timeout 60

console timeout 0

dhcpd dns 202.106.0.20 202.106.46.151

!

dhcpd address 192.168.1.2-192.168.1.254 management

dhcpd enable management

!

dhcpd address 192.168.100.2-192.168.100.200 dmz

dhcpd enable dmz

!

threat-detection basic-threat

threat-detection statistics access-list

no threat-detection statistics tcp-intercept

webvpn

<--- More --->

              

username admin password eY/fQXw7Ure8Qrz7 encrypted privilege 15

username cisco password UQg9IVidGAAqZJzH encrypted

!

class-map inspection_default

 match default-inspection-traffic

!

!

policy-map type inspect dns preset_dns_map

 parameters

  message-length maximum 512

policy-map global_policy

 class inspection_default

  inspect dns preset_dns_map 

  inspect ftp 

  inspect h323 h225 

  inspect h323 ras 

  inspect rsh 

  inspect rtsp 

  inspect esmtp 

  inspect sqlnet 

  inspect skinny  

  inspect sunrpc 

  inspect xdmcp 

  inspect sip  

<--- More --->

              

  inspect netbios 

  inspect tftp 

!

service-policy global_policy global

prompt hostname context 

Cryptochecksum:2ad0003b45347154b753e45475ab3d9d

: end

ASA-Internet(config)#  

里边好多没用的但是没删的配置··· 必须声明不是我干的 哈哈····