En

Conf t



firewall transparent




hostname ASAv3
enable password 8Ry2YjIyt7RRXU24 encrypted
names

!
interface GigabitEthernet0/0
 nameif inside
 bridge-group 1
 security-level 100
 No shut
!
interface GigabitEthernet0/1
 nameif outside
 bridge-group 1
 security-level 0
 No shut
!
interface GigabitEthernet0/2
 shutdown
 no nameif
 no security-level
!
interface Management0/0
 management-only
 shutdown
 no nameif
 no security-level
!
interface BVI1
 ip address 155.1.139.50 255.255.255.0 
!
ftp mode passive
access-list INOUT extended permit ip any any 
access-list OUTIN extended permit ospf any any 
access-list OUTIN extended permit tcp host 150.11.11.1 host 150.5.5.1 eq bgp 
access-list OUTIN extended permit tcp host 150.11.11.1 host 150.5.5.1 eq telnet 
access-list OUTIN extended permit udp any any eq domain 
access-list OUTIN extended permit udp any any eq ntp 
access-list OUTIN extended permit icmp any any echo 
access-list OUTIN extended permit tcp any any eq www 
access-list OUTIN extended permit tcp host 155.1.143.250 any eq telnet 


!
pager lines 23
logging enable
logging buffered debugging
mtu inside 1500
mtu outside 1500
no failover
no monitor-interface service-module 
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable

access-group INOUT in interface inside
access-group OUTIN in interface outside
route outside 150.11.11.1 255.255.255.255 155.1.139.11 1


telnet timeout 5
ssh stricthostkeycheck
ssh timeout 5
ssh key-exchange group dh-group1-sha1
console timeout 0

ntp authentication-key 1 md5 Cisco
ntp authenticate
ntp trusted-key 1
ntp server 150.11.11.1 key 1


class-map inspection_default
 match default-inspection-traffic
c
!
!
policy-map type inspect dns preset_dns_map
 parameters
  message-length maximum client auto
  message-length maximum 512

policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map 
  inspect ftp 
  inspect h323 h225 
  inspect h323 ras 
  inspect rsh 
  inspect rtsp 
  inspect esmtp 
  inspect sqlnet 
  inspect skinny  
  inspect sunrpc 
  inspect xdmcp 
  inspect sip  
  inspect netbios 
  inspect tftp 
  inspect ip-options 
 
!
