ICG3000

# version 5.20, Release 2311, Standard # sysname GDZHn-ICG3000 # domain default enable system # telnet server enable # dar p2p signature-file cfa0:/p2p_default.mtd # port-security enable # ip http port 8700 # acl number 2000 rule 10 permit # acl number 3999 rule 0 permit ip source 192.168.0.0 0.0.0.255 destination 192.168.0.42 0 # vlan 1 # domain system access-limit disable state active idle-cut disable self-service-url disable # traffic classifier urllimit-1 operator or # traffic behavior behaviorforfilter filter deny # user-group system group-attribute allow-guest # local-user admin password cipher $c$3$D5bZqDKQ0taiMLRJlNPGraOiZ+peTMERRUsv4Ao= authorization-attribute level 3 service-type telnet service-type web # cwmp undo cwmp enable # attack-defense policy 1 signature-detect action drop-packet signature-detect fraggle enable signature-detect land enable signature-detect winnuke enable signature-detect tcp-flag enable signature-detect icmp-unreachable enable signature-detect icmp-redirect enable signature-detect tracert enable signature-detect smurf enable signature-detect source-route enable signature-detect route-record enable signature-detect large-icmp enable defense scan enable defense scan add-to-blacklist defense syn-flood enable defense syn-flood action drop-packet defense udp-flood enable defense udp-flood action drop-packet defense icmp-flood enable defense icmp-flood action drop-packet # interface Aux0 async mode flow link-protocol ppp # interface Cellular0/0 async mode protocol link-protocol ppp nat server protocol tcp global 221.4.209.86 9000 inside 192.168.0.43 9000 nat server protocol tcp global 221.4.209.86 9100 inside 192.168.0.42 9100 nat server protocol tcp global 221.4.209.86 www inside 192.168.0.43 www nat server protocol tcp global 221.4.209.86 8888 inside 192.168.0.42 8888 attack-defense apply policy 1 # interface Ethernet0/0 port link-mode route nat outbound 3999 nat server protocol tcp global 221.4.209.86 12558 inside 192.168.0.250 12558 nat server protocol udp global 221.4.209.86 12558 inside 192.168.0.250 12558 nat server protocol tcp global 221.4.209.86 9100 inside 192.168.0.42 9100 nat server protocol tcp global 221.4.209.86 www inside 192.168.0.43 www nat server protocol tcp global 221.4.209.86 9001 inside 192.168.0.42 9001 ip address 192.168.1.1 255.255.255.0 attack-defense apply policy 1 # interface Ethernet0/1 port link-mode route nat outbound 2000 nat server protocol tcp global 221.4.209.86 12558 inside 192.168.0.250 12558 nat server protocol tcp global 221.4.209.86 9000 inside 192.168.0.43 9000 nat server protocol tcp global 221.4.209.86 9100 inside 192.168.0.42 9100 nat server protocol tcp global 221.4.209.86 www inside 192.168.0.43 www nat server protocol tcp global 221.4.209.86 9001 inside 192.168.0.42 9001 ip address 221.4.209.86 255.255.255.252 attack-defense apply policy 1 # interface NULL0 # # voice-setup # sip # sip-server # call-rule-set # call-route # dial-program # aaa-client # gk-client # ip route-static 0.0.0.0 0.0.0.0 221.4.209.85 ip route-static 192.168.0.0 255.255.255.0 192.168.1.254 ip route-static 192.168.2.0 255.255.255.0 192.168.1.254 ip route-static 192.168.3.0 255.255.255.0 192.168.1.254 ip route-static 192.168.4.0 255.255.255.0 192.168.1.254 ip route-static 192.168.5.0 255.255.255.0 192.168.1.254 ip route-static 192.168.6.0 255.255.255.0 192.168.1.254 ip route-static 192.168.7.0 255.255.255.0 192.168.1.254 ip route-static 192.168.8.0 255.255.255.0 192.168.1.254 ip route-static 192.168.9.0 255.255.255.0 192.168.1.254 ip route-static 192.168.10.0 255.255.255.0 192.168.1.254 ip route-static 192.168.12.0 255.255.255.0 192.168.1.254 ip route-static 192.168.13.0 255.255.255.0 192.168.1.254 ip route-static 192.168.14.0 255.255.255.0 192.168.1.254 # undo info-center enable # snmp-agent snmp-agent local-engineid 800063A2030CDA4194D805 snmp-agent community read techno-vision snmp-agent sys-info version all undo snmp-agent trap enable voice dial # dhcp server forbidden-ip 192.168.0.1 192.168.0.10 dhcp server forbidden-ip 192.168.2.1 192.168.2.10 # dhcp enable # load xml-configuration # load tr069-configuration # user-interface con 0 user-interface tty 13 user-interface aux 0 user-interface vty 0 4 authentication-mode scheme # return