то КириллBuilding configuration...
Current configuration : 14901 bytes
!
! Last configuration change at 10:55:34 MSK Wed Jan 17 2007
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname firma
!
boot-start-marker
boot-end-marker
!
no logging buffered
enable secret 5 $1111111111/
!
aaa new-model
!
!
!
aaa session-id common
!
resource policy
!
clock timezone MSK 3
clock calendar-valid
ip subnet-zero
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.1.10.1 10.1.10.10
ip dhcp excluded-address 192.168.15.1 192.168.15.40
!
ip dhcp pool voice
network 10.1.10.0 255.255.255.0
default-router 10.1.10.1
option 150 ip 10.1.10.1
!
ip dhcp pool data
network 192.168.15.0 255.255.255.0
default-router 192.168.15.1
dns-server 192.168.15.3 192.168.15.2
!
!
ip name-server 89.207.94.34
ip inspect name Firewall appfw Firewall
ip inspect name Firewall tcp
ip inspect name Firewall udp
ip inspect name Firewall icmp
ip inspect name Firewall http urlfilter
ip inspect name Firewall https
ip inspect name Firewall pop3
ip inspect name Firewall esmtp
ip inspect name Firewall imap
ip inspect name Firewall ssh
ip inspect name Firewall dns
ip inspect name Firewall h323
ip inspect name Firewall fragment maximum 256 timeout 1
ip inspect name Firewall snmp
ip inspect name Firewall snmptrap
ip inspect name Firewall syslog
ip inspect name Firewall syslog-conn
ip ips notify SDEE
!
appfw policy-name Firewall
application http
!
!
voice-card 0
no dspfarm
!
!
!
voice service voip
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
supplementary-service h450.12
h323
crypto pki trustpoint tti
revocation-check crl
rsakeypair tti
!
!
username admin password 7 1111111117
username administrator password 7 1111111
username test15 privilege 15 password 7 11111111
!
!
class-map match-all L3-to-L2_VoIP-Cntrl
match ip dscp af31
class-map match-all L3-to-L2_VoIP-RTP
match ip dscp ef
!
!
policy-map output-L3-to-L2
class L3-to-L2_VoIP-RTP
set cos 5
class L3-to-L2_VoIP-Cntrl
set cos 3
!
!
!
!
!
!
!
interface GigabitEthernet0/0
no ip address
no ip mroute-cache
duplex auto
speed auto
!
interface GigabitEthernet0/0.100
description $ETH-LAN$
encapsulation dot1Q 100
ip address 10.1.10.1 255.255.255.0
ip nbar protocol-discovery
ip virtual-reassembly
no snmp trap link-status
service-policy output output-L3-to-L2
!
interface GigabitEthernet0/0.110
encapsulation dot1Q 110
ip address 192.168.15.1 255.255.255.0
ip nat inside
ip virtual-reassembly
no snmp trap link-status
!
interface GigabitEthernet0/0.200
description $ETH-LAN$
encapsulation dot1Q 200
ip address 89.207.89.xx 255.255.255.248
ip flow ingress
ip flow egress
ip virtual-reassembly
no snmp trap link-status
!
interface Service-Engine0/0
ip unnumbered GigabitEthernet0/0.100
ip virtual-reassembly
service-module ip address 10.1.10.2 255.255.255.0
service-module ip default-gateway 10.1.10.1
!
interface GigabitEthernet0/1
description $ETH-LAN$
ip address 89.207.95.yy 255.255.255.252
ip flow ingress
ip flow egress
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
ip classless
ip route 0.0.0.0 0.0.0.0 89.207.95.yy
ip route 10.1.10.2 255.255.255.255 Service-Engine0/0
!
ip dns server
ip dns spoofing 89.207.94.34
!
ip http server
ip http authentication local
no ip http secure-server
ip http path flash:
ip nat inside source list NAT interface GigabitEthernet0/1 overload
ip nat inside source static tcp 192.168.15.3 25 89.207.89.xx 25 extendable
ip nat inside source static tcp 192.168.15.3 80 89.207.89.xx 80 extendable
ip nat inside source static tcp 192.168.15.3 443 89.207.89.xx 443 extendable
ip nat inside source static tcp 192.168.15.3 3389 89.207.89.xx 3389 extendable
ip nat inside source static tcp 192.168.15.4 3389 89.207.89.yy 3389 extendable
ip nat inside source static tcp 192.168.15.31 80 89.207.95.yy 80 extendable
ip nat inside source static tcp 192.168.15.15 3389 89.207.95.yy 3389 extendable
ip nat inside source static tcp 192.168.15.2 6501 89.207.95.yy 6502 extendable
!
ip access-list standard NAT
permit 192.168.15.0 0.0.0.255
!
no logging trap
snmp-server community 1111111 RW
!
!
!
!
!
tftp-server flash:ATA030100SCCP040211A.zup
tftp-server flash:CP7902040000SCCP040701A.sbin
tftp-server flash:CP7905040000SCCP040701A.sbin
tftp-server flash:P00403020214.bin
tftp-server flash:CP7912040000SCCP040701A.sbin
tftp-server flash:S00103020002.bin
tftp-server flash:P00503010100.bin
tftp-server flash:cmterm_7936.3-3-5-0.bin
tftp-server flash:P00305000301.sbn
tftp-server flash:cmterm_7920.3.3-01-08.bin
tftp-server flash:TERM70.6-0-3SR1S.LOADS
tftp-server flash:TERM70.DEFAULT.loads
tftp-server flash:TERM71.DEFAULT.loads
tftp-server flash:cnu70.63-0-1-4.sbn
tftp-server flash:Jar70.63-0-1-4.sbn
tftp-server flash:jvm70.603ES1R4.sbn
tftp-server flash:S00103020003.bin
tftp-server flash:P00305000600.bin
tftp-server flash:P00305000600.sbn
tftp-server flash:CP7912080001SCCP051117A.sbin
tftp-server flash:P00307020300.bin
tftp-server flash:P00307020300.sbn
tftp-server flash:P00307020300.sb2
tftp-server flash:P00307020300.loads
tftp-server flash:S00105000200.SBN
tftp-server flash:P00307020200.bin
tftp-server flash:P00307020200.sbn
tftp-server flash:P00307020200.sb2
tftp-server flash:P00307020200.loads
tftp-server SERVER=192.168.15.4
!
control-plane
!
!
!
voice-port 0/0/0
cptone RU
connection plar opx 500
caller-id enable
!
voice-port 0/0/1
cptone RU
connection plar opx 500
caller-id enable
!
....................проскипана телефония...................................
!
!
!
line con 0
line aux 0
line 194
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
line vty 0 4
password 7 011202095205
!
scheduler allocate 20000 1000
ntp clock-period 17180070
ntp update-calendar
ntp server 192.168.15.2 source GigabitEthernet0/0.110 prefer
!
end
при telnet citkit.ru 21
C:\Documents and Settings\111111>telnet citkit.ru 21
Connecting To citkit.ru...Could not open connection to the host, on port 21: Connect failed
