: Saved
:
ASA Version 8.3(2) 
!
hostname asa5505
enable password XXXXXXXXXXXXXXXX encrypted
passwd YYYYYYYYYYYYYYYY encrypted
names
name 1.2.3.4 gw
name 192.168.3.0 fake_network
name 192.168.4.1 inside_ip
name 2001:0db8:85a3:0000:0000:8a2e:0370:7334 some_ipv6_address
!
interface Vlan1
 description inside interface
 nameif inside
 security-level 100
 ip address dhcp setroute 
!
interface Vlan2
 description outside interface
 nameif outside
 security-level 0
 ip address 192.168.2.1 255.255.255.0 
!
interface Ethernet0/0
 description Switch port 0/0
 switchport access vlan 2
!
interface Vlan2020
 no nameif
 no security-level
 no ip address
!         
interface Ethernet0/1
!
interface Ethernet0/2
!             
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
boot system disk0:/asa832-k8.bin
ftp mode passive
!

object network internal_subnet_1 
 subnet 192.168.1.0 255.255.255.192
 description Internal Subnet 1
object network internal_subnet_2 
 subnet 192.168.1.64 255.255.255.192
 description Internal Subnet 2
object network Internal_net 
 subnet 192.168.1.0 255.255.255.0
object network hostA:eth0 
 host 192.168.1.10


access-list outside_acl_in extended deny ip any any log 
pager lines 24
logging enable
logging buffered errors
logging asdm informational
mtu inside 1500
mtu outside 1500
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
dynamic-access-policy-record DfltAccessPolicy
aaa authentication ssh console LOCAL 
http server enable
http 192.168.1.0 255.255.255.0 inside
http 10.0.0.0 255.255.255.0 inside
http 10.1.1.1 255.255.255.255 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
service resetinbound interface outside
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
telnet timeout 5
ssh scopy enable
ssh 10.10.10.0 255.255.255.0 inside
ssh 10.1.1.0 255.255.255.0 inside
ssh timeout 30
ssh version 2
console timeout 0

threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
webvpn
username foo password AAAAAAAAAAAAAAAA encrypted privilege 15
!
class-map inspection_default
 match default-inspection-traffic
!
!
policy-map global_policy
 class inspection_default
  inspect ctiqbe
  inspect dns
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect http
  inspect icmp
  inspect ils
  inspect mgcp
  inspect rsh
  inspect rtsp
  inspect sip
  inspect skinny
  inspect esmtp
  inspect sqlnet
  inspect tftp
policy-map type inspect ip-options ip-options-map
 parameters
  eool action allow
  nop action allow
  router-alert action allow
!
service-policy global_policy global
prompt hostname context 
call-home
 profile CiscoTAC-1
  no active
  destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
  destination address email callhome@cisco.com
  destination transport-method http
  subscribe-to-alert-group diagnostic
  subscribe-to-alert-group environment
  subscribe-to-alert-group inventory periodic monthly
  subscribe-to-alert-group configuration periodic monthly
  subscribe-to-alert-group telemetry periodic daily
Cryptochecksum:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
: end
