Configuration Cisco ASA 5510
ASA Version 7.0(6)
!
hostname ciscoasa
domain-name AS1
enable password 2KFQnbNIdI.2KYOU encrypted
names
dns-guard
!
interface Ethernet0/0
nameif outside
security-level 0
ip address 10.10.0.2 255.255.255.0
ipv6 address 2001:db8:8001:2000::2/64
ipv6 enable
!
interface Ethernet0/1
nameif inside
security-level 100
ip address 10.10.1.254 255.255.255.0
ipv6 address 2001:db8:8001:1::ffff/64
ipv6 enable
!
interface Ethernet0/2
nameif DMZ
security-level 50
ip address 10.10.2.254 255.255.255.0
ipv6 address 2001:db8:8001:2::ffff/64
ipv6 enable
!
interface Management0/0
nameif management
security-level 100
ip address 10.10.130.10 255.255.255.0
management-only
!
passwd 2KFQnbNIdI.2KYOU encrypted
ftp mode passive
clock timezone CEST 1
clock summer-time CEDT recurring last Sun Mar 2:00 last Sun Oct 3:00
object-group protocol all
protocol-object 22
protocol-object 23
protocol-object 80
protocol-object ip
protocol-object icmp
protocol-object igmp
protocol-object ipinip
protocol-object tcp
protocol-object udp
protocol-object esp
protocol-object ah
protocol-object icmp6
protocol-object ospf
protocol-object pim
access-list tcp_permit extended permit tcp any any
access-list udp_permit extended permit udp any any
access-list icmp_permit extended permit icmp any any
access-list http_permit extended permit 80 any any
access-list telnet extended permit 23 any any
access-list all extended permit object-group all any any
pager lines 24
logging asdm informational
mtu outside 1500
mtu inside 1500
mtu DMZ 1500
mtu management 1500
icmp permit any outside
icmp permit any inside
icmp permit any DMZ
icmp permit any management
asdm image disk0:/asdm506.bin
no asdm history enable
arp timeout 14400
access-group all in interface outside
access-group all out interface outside
access-group all in interface inside
access-group all out interface inside
access-group all in interface DMZ
access-group all out interface DMZ
rip outside default version 2
route outside 10.20.0.0 255.255.0.0 10.10.0.1 1
route outside 10.30.0.0 255.255.0.0 10.10.0.1 1
route outside 10.40.0.0 255.255.0.0 10.10.0.1 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00
timeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
username david password z0WkhcbGz1/5UmkS encrypted privilege 15
http server enable
http 10.10.130.0 255.255.255.0 management
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet 10.10.130.0 255.255.255.0 management
telnet timeout 5
ssh scopy enable
ssh 10.10.130.0 255.255.255.0 management
ssh 10.10.130.2 255.255.255.255 management
ssh timeout 5
ssh version 2
console timeout 0
tftp-server management 10.10.2.1 ciscoASA5510