观夏Note

Building configuration...

Current configuration : 3602 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!

hostname 2514
!
logging queue-limit 100
enable secret 5 XXXXXXXXX
!
username XXXXXXXX password 7 XXXXXXXX
ip subnet-zero
no ip source-route
no ip domain lookup
ip name-server *.*.*.*
ip name-server *.*.*.*
no ip dhcp conflict logging
ip dhcp excluded-address 192.168.0.1 192.168.0.200
!
ip dhcp pool home
network 192.168.0.0 255.255.255.0
default-router 192.168.0.200
dns-server 192.168.0.200
netbios-node-type h-node
lease 30
!
no ip bootp server
vpdn enable
!
vpdn-group PPPoe
request-dialin
protocol pppoe
!
vpdn-group vpn
! Default PPTP VPDN group
accept-dialin
protocol pptp
virtual-template 1
!
!
!
!
interface Ethernet0
ip address 192.168.0.200 255.255.255.0
ip access-group 101 in
ip nat inside
no ip route-cache
ip tcp adjust-mss 1452
no ip mroute-cache
no cdp enable
!
interface Ethernet1
no ip address
ip access-group 101 in
no ip route-cache
no ip mroute-cache
pppoe enable
pppoe-client dial-pool-number 1
no cdp enable
!
interface Virtual-Template1
ip address 192.168.254.254 255.255.255.0
peer default ip address pool pptp
ppp authentication ms-chap ms-chap-v2
!
interface Serial0
no ip address
no ip route-cache
no ip mroute-cache
shutdown
no cdp enable
!
interface Serial1
no ip address
no ip route-cache
no ip mroute-cache
shutdown
no cdp enable
!
interface Dialer1
ip address negotiated
ip mtu 1492
ip nat outside
encapsulation ppp
no ip route-cache
no ip mroute-cache
dialer pool 1
ppp authentication pap callin
ppp pap sent-username XXXXXXX password 7 XXXXXX
!
ip local pool pptp 192.168.254.1 192.168.254.253
ip nat inside source list 1 interface Dialer1 overload
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
!
!
access-list 1 permit 192.168.0.0 0.0.0.255
access-list 101 deny tcp any any eq echo
access-list 101 deny tcp any any eq chargen
access-list 101 deny tcp any any eq 135
access-list 101 deny tcp any any eq 136
access-list 101 deny tcp any any eq 137
access-list 101 deny tcp any any eq 138
access-list 101 deny tcp any any eq 139
access-list 101 deny tcp any any eq 389
access-list 101 deny tcp any any eq 445
access-list 101 deny tcp any any eq 4444
access-list 101 deny udp any any eq tftp
access-list 101 deny udp any any eq 135
access-list 101 deny udp any any eq 136
access-list 101 deny udp any any eq netbios-ns
access-list 101 deny udp any any eq 389
access-list 101 deny udp any any eq 445
access-list 101 deny udp any any eq 1434
access-list 101 deny udp any any eq 1433
access-list 101 permit ip any any
access-list 101 permit tcp any any
access-list 101 permit udp any any
no cdp run
snmp-server community readonly RO
snmp-server community readwrite RW
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps hsrp
snmp-server enable traps config
snmp-server enable traps entity
snmp-server enable traps pim neighbor-change rp-mapping-change invalid-im-message
snmp-server enable traps ipmulticast
snmp-server enable traps msdp
snmp-server enable traps frame-relay
snmp-server enable traps frame-relay subif
snmp-server enable traps pppoe
banner motd ^C
This is the Cisco Routes
WARNING!
^C
!
line con 0
password 7 XXXXX
login
line aux 0
no exec
line vty 0 4
password 7 XXXXXX
login
transport input lat pad telnet rlogin mop udptn
!
end