551 lines
22 KiB
Text
551 lines
22 KiB
Text
ENSBPASA1# show run
|
|
: Saved
|
|
:
|
|
ASA Version 7.0(6)
|
|
!
|
|
hostname ENSBPASA1
|
|
domain-name sag
|
|
enable password PVSASRJovmamnVkD encrypted
|
|
names
|
|
name 192.168.202.25 sag-srv1
|
|
name 192.168.202.20 sag-srv2
|
|
name 192.168.246.7 vpn1-2-nsrp
|
|
name 192.168.246.6 vpn2-int
|
|
name 192.168.246.5 vpn1-int
|
|
name 192.168.246.10 vpn3-mgmt
|
|
name 192.168.246.9 vpn3-int
|
|
name 149.134.0.0 swiftnet-nw
|
|
name 192.168.247.1 isdn-router
|
|
name 192.168.202.22 sag-test
|
|
name 192.168.206.0 ensb-dxb-nw
|
|
name 10.100.200.0 ensb-mgmt-nw
|
|
name 10.100.201.0 ensb-support-nw
|
|
name 192.168.202.10 mgmt-srv1
|
|
name 192.168.219.28 swp-srvr1
|
|
name 192.168.219.30 swp-srvr-cluster
|
|
dns-guard
|
|
!
|
|
interface Ethernet0/0
|
|
nameif sag
|
|
security-level 80
|
|
ip address 192.168.202.1 255.255.255.0 standby 192.168.202.2
|
|
!
|
|
interface Ethernet0/1
|
|
nameif clients
|
|
security-level 10
|
|
ip address 192.168.246.1 255.255.255.0 standby 192.168.246.2
|
|
!
|
|
interface Ethernet0/2
|
|
nameif swift
|
|
security-level 60
|
|
ip address 192.168.244.1 255.255.255.0 standby 192.168.244.2
|
|
!
|
|
interface Ethernet0/3
|
|
description LAN Failover Interface
|
|
!
|
|
interface Management0/0
|
|
nameif dmz
|
|
security-level 20
|
|
ip address 192.168.219.1 255.255.255.0
|
|
!
|
|
passwd PVSASRJovmamnVkD encrypted
|
|
ftp mode passive
|
|
clock timezone PKT 5
|
|
object-group network sag-servers-prod
|
|
network-object sag-srv1 255.255.255.255
|
|
network-object sag-srv2 255.255.255.255
|
|
object-group network ensb-vpns-group
|
|
network-object vpn1-int 255.255.255.255
|
|
network-object vpn2-int 255.255.255.255
|
|
network-object vpn1-2-nsrp 255.255.255.255
|
|
network-object vpn3-int 255.255.255.255
|
|
network-object vpn3-mgmt 255.255.255.255
|
|
object-group network swift-switch-in
|
|
network-object 149.134.244.129 255.255.255.255
|
|
network-object 149.134.244.130 255.255.255.255
|
|
network-object 149.134.252.4 255.255.255.255
|
|
network-object 149.134.252.6 255.255.255.255
|
|
network-object 149.134.252.128 255.255.255.255
|
|
network-object 149.134.252.129 255.255.255.255
|
|
object-group network swift-dns
|
|
network-object 149.134.244.133 255.255.255.255
|
|
network-object 149.134.252.7 255.255.255.255
|
|
object-group network swift-directory
|
|
network-object 149.134.244.129 255.255.255.255
|
|
network-object 149.134.244.130 255.255.255.255
|
|
network-object 149.134.252.4 255.255.255.255
|
|
network-object 149.134.252.6 255.255.255.255
|
|
network-object 149.134.252.128 255.255.255.255
|
|
network-object 149.134.252.129 255.255.255.255
|
|
network-object 149.134.252.132 255.255.255.255
|
|
object-group network swift-ca-ra
|
|
network-object 149.134.244.131 255.255.255.255
|
|
network-object 149.134.252.2 255.255.255.255
|
|
network-object 149.134.252.130 255.255.255.255
|
|
object-group network swift-rvs
|
|
network-object 149.134.244.133 255.255.255.255
|
|
network-object 149.134.244.134 255.255.255.255
|
|
network-object 149.134.252.7 255.255.255.255
|
|
network-object 149.134.252.8 255.255.255.255
|
|
network-object 149.134.252.133 255.255.255.255
|
|
object-group network swift-web-connector
|
|
network-object 149.134.244.133 255.255.255.255
|
|
network-object 149.134.244.134 255.255.255.255
|
|
network-object 149.134.252.7 255.255.255.255
|
|
network-object 149.134.252.8 255.255.255.255
|
|
network-object 149.134.252.133 255.255.255.255
|
|
object-group network swift-secrets-webserver
|
|
network-object 149.134.252.8 255.255.255.255
|
|
network-object 149.134.244.134 255.255.255.255
|
|
network-object 149.134.252.133 255.255.255.255
|
|
object-group network swift-myswift-webserver
|
|
network-object 149.134.244.134 255.255.255.255
|
|
network-object 149.134.252.8 255.255.255.255
|
|
network-object 149.134.252.133 255.255.255.255
|
|
network-object 149.134.128.254 255.255.255.255
|
|
network-object 149.134.129.254 255.255.255.255
|
|
object-group network swift-switch-out
|
|
network-object 149.134.244.129 255.255.255.255
|
|
network-object 149.134.244.130 255.255.255.255
|
|
network-object 149.134.252.4 255.255.255.255
|
|
network-object 149.134.252.6 255.255.255.255
|
|
network-object 149.134.252.128 255.255.255.255
|
|
network-object 149.134.252.129 255.255.255.255
|
|
object-group network swift-dialup
|
|
network-object 149.134.255.254 255.255.255.255
|
|
object-group service msih-ports-udp udp
|
|
port-object range 9000 9059
|
|
port-object range 48200 48200
|
|
port-object range 48100 48105
|
|
port-object range 135 135
|
|
port-object range 48002 48009
|
|
port-object range 6500 6501
|
|
port-object range 1029 1029
|
|
object-group service msih-ports-udp-casmf udp
|
|
port-object range 5101 5105
|
|
port-object range 5206 5207
|
|
object-group service swift-dns-port udp
|
|
port-object range domain domain
|
|
object-group service symantec-av udp
|
|
port-object range 38293 38293
|
|
port-object range 2967 2967
|
|
object-group service FMSIH-OUT-TCP tcp
|
|
port-object range 9100 9106
|
|
port-object range 6500 6501
|
|
object-group service FMSIH-OUT-TCP-CASMF tcp
|
|
group-object FMSIH-OUT-TCP
|
|
port-object range 5206 5207
|
|
port-object range 5101 5105
|
|
object-group service FMSIH-PRINT-TCP tcp
|
|
port-object range 9100 9100
|
|
object-group service msih-ports-tcp tcp
|
|
port-object range 9000 9059
|
|
port-object range 48200 48200
|
|
port-object range 48100 48105
|
|
port-object range 135 135
|
|
port-object range 48009 48009
|
|
port-object range 6500 6501
|
|
port-object range 1029 1029
|
|
object-group service msih-ports-tcp-casmf tcp
|
|
group-object msih-ports-tcp
|
|
port-object range 5206 5207
|
|
port-object range 5101 5105
|
|
object-group service snmp tcp-udp
|
|
port-object range 161 162
|
|
object-group service doubletake tcp-udp
|
|
port-object range 1105 1106
|
|
port-object range 1100 1100
|
|
object-group service msih-ports tcp-udp
|
|
port-object range 48200 48200
|
|
port-object range 48100 48105
|
|
port-object range 135 135
|
|
port-object range 48009 48009
|
|
port-object range 6500 6501
|
|
port-object range 9000 9049
|
|
port-object range 1029 1029
|
|
object-group service shared-ports tcp
|
|
port-object range 445 445
|
|
port-object range netbios-ssn netbios-ssn
|
|
port-object range 137 137
|
|
object-group service swift-49168-9 tcp
|
|
port-object range 49168 49169
|
|
object-group service swift-cara-port tcp
|
|
port-object range 709 709
|
|
object-group service swift-dialup-port tcp
|
|
port-object eq www
|
|
object-group service swift-direcotry-ports tcp
|
|
port-object range 1400 1409
|
|
port-object range 1600 1609
|
|
port-object range 1100 1109
|
|
port-object range ldap ldap
|
|
port-object range 1300 1309
|
|
port-object range 1500 1509
|
|
port-object range 1200 1209
|
|
object-group service swift-myswift-webserver-port tcp
|
|
port-object range https https
|
|
object-group service swift-rvs-port tcp
|
|
port-object range 49170 49170
|
|
object-group service swift-secrets-webserver-port tcp
|
|
port-object range 49172 49172
|
|
object-group service swift-switch-ports tcp
|
|
port-object range 50153 50190
|
|
port-object range 52100 52399
|
|
port-object range 49500 49510
|
|
port-object range 50200 50806
|
|
object-group service swift-web-connector-ports tcp
|
|
port-object eq www
|
|
port-object range 49171 49171
|
|
object-group service vnc-port tcp
|
|
port-object range 5800 5800
|
|
port-object range 5900 5900
|
|
object-group network sag-srv-test
|
|
network-object sag-test 255.255.255.255
|
|
object-group network sag-servers-prod_ref
|
|
network-object 192.168.246.25 255.255.255.255
|
|
network-object 192.168.246.20 255.255.255.255
|
|
object-group network ensb-dxb-nw
|
|
network-object ensb-dxb-nw 255.255.255.0
|
|
object-group service web-ports tcp
|
|
port-object eq www
|
|
port-object eq https
|
|
object-group network mgmt-srv-group
|
|
network-object mgmt-srv1 255.255.255.255
|
|
object-group network mgmt-srv-group_ref
|
|
network-object 192.168.246.110 255.255.255.255
|
|
object-group network swp-srvrs
|
|
network-object swp-srvr-cluster 255.255.255.255
|
|
object-group service swp-tcp-ports tcp
|
|
port-object range 48600 48600
|
|
port-object eq https
|
|
object-group network swp-srvrs_ref
|
|
network-object 192.168.246.30 255.255.255.255
|
|
object-group network mgmt-srv-group_ref_1
|
|
network-object 192.168.219.10 255.255.255.255
|
|
object-group network sag-servers-prod_ref_1
|
|
network-object 192.168.219.25 255.255.255.255
|
|
network-object 192.168.219.20 255.255.255.255
|
|
access-list clients_access_in extended permit ip any any inactive
|
|
access-list clients_access_in extended permit icmp any any
|
|
access-list clients_access_in extended permit tcp any object-group sag-servers-p
|
|
rod_ref eq 48002
|
|
access-list clients_access_in extended permit tcp any object-group sag-servers-p
|
|
rod_ref eq 48003
|
|
access-list clients_access_in remark ADD MSAEED 18JUL@)11
|
|
access-list clients_access_in extended permit tcp any object-group swp-srvrs_ref
|
|
object-group swp-tcp-ports
|
|
access-list clients_access_in extended permit tcp object-group ensb-dxb-nw objec
|
|
t-group sag-servers-prod_ref eq 3389
|
|
access-list clients_access_in extended permit tcp ensb-mgmt-nw 255.255.255.0 obj
|
|
ect-group sag-servers-prod_ref eq 3389
|
|
access-list clients_access_in extended permit tcp ensb-mgmt-nw 255.255.255.0 obj
|
|
ect-group swp-srvrs_ref eq 3389
|
|
access-list clients_access_in extended permit tcp ensb-mgmt-nw 255.255.255.0 obj
|
|
ect-group mgmt-srv-group_ref eq 3389
|
|
access-list clients_access_in extended permit tcp ensb-support-nw 255.255.255.0
|
|
object-group sag-servers-prod_ref eq 3389
|
|
access-list clients_access_in extended permit tcp ensb-support-nw 255.255.255.0
|
|
object-group mgmt-srv-group_ref eq 3389
|
|
access-list clients_access_in extended permit tcp object-group ensb-dxb-nw any e
|
|
q 3389
|
|
access-list clients_access_in remark ADD MSAEED 18JUL@)11
|
|
access-list clients_access_in extended permit icmp any object-group swp-srvrs_re
|
|
f
|
|
access-list sag_access_in extended permit icmp any any
|
|
access-list sag_access_in extended permit ip any any
|
|
access-list sag_access_in remark ADD MSAEED 18JUL2011
|
|
access-list sag_access_in extended permit ip object-group sag-servers-prod objec
|
|
t-group swp-srvrs
|
|
access-list sag_access_in remark ADD MSAEED 18JUL2011
|
|
access-list sag_access_in extended permit icmp object-group sag-servers-prod obj
|
|
ect-group swp-srvrs
|
|
access-list sag_access_in remark ADD MSAEED 18JUL2011
|
|
access-list sag_access_in extended permit ip object-group mgmt-srv-group object-
|
|
group swp-srvrs
|
|
access-list sag_access_in remark ADD MSAEED 18JUL2011
|
|
access-list sag_access_in extended permit icmp object-group mgmt-srv-group objec
|
|
t-group swp-srvrs
|
|
access-list swift_access_in extended permit ip any any
|
|
access-list swift_access_in remark ADD MSAEED 18JUL2011
|
|
access-list swift_access_in extended permit ip swiftnet-nw 255.255.0.0 object-gr
|
|
oup swp-srvrs
|
|
access-list swift_access_in remark ADD MSAEED 18JUL2011
|
|
access-list swift_access_in extended permit icmp swiftnet-nw 255.255.0.0 object-
|
|
group swp-srvrs
|
|
access-list dmz_access_in remark ADD by MSAEED 18JUL2011
|
|
access-list dmz_access_in extended permit ip object-group swp-srvrs object-group
|
|
sag-servers-prod
|
|
access-list dmz_access_in remark ADD by MSAEED 18JUL2011
|
|
access-list dmz_access_in extended permit icmp object-group swp-srvrs object-gro
|
|
up sag-servers-prod_ref_1
|
|
access-list dmz_access_in remark ADD by MSAEED 18JUL2011
|
|
access-list dmz_access_in extended permit ip object-group swp-srvrs object-group
|
|
mgmt-srv-group_ref_1
|
|
access-list dmz_access_in remark ADD by MSAEED 18JUL2011
|
|
access-list dmz_access_in extended permit icmp object-group swp-srvrs object-gro
|
|
up mgmt-srv-group_ref_1
|
|
access-list dmz_access_in remark ADD by MSAEED 18JUL2011
|
|
access-list dmz_access_in extended permit ip object-group swp-srvrs swiftnet-nw
|
|
255.255.0.0
|
|
access-list dmz_access_in remark ADD by MSAEED 18JUL2011
|
|
access-list dmz_access_in extended permit icmp object-group swp-srvrs swiftnet-n
|
|
w 255.255.0.0
|
|
access-list dmz_access_in remark ADD by MSAEED 18JUL2011
|
|
access-list dmz_access_in extended permit ip object-group swp-srvrs any
|
|
access-list dmz_access_in remark ADD by MSAEED 18JUL2011
|
|
access-list dmz_access_in extended permit icmp object-group swp-srvrs any
|
|
access-list dmz_pnat_inbound extended permit ip host swp-srvr-cluster swiftnet-n
|
|
w 255.255.0.0
|
|
access-list sag_pnat_outbound_V3 extended permit ip host sag-srv2 swiftnet-nw 25
|
|
5.255.0.0
|
|
pager lines 24
|
|
logging enable
|
|
logging standby
|
|
logging asdm warnings
|
|
mtu sag 1500
|
|
mtu clients 1500
|
|
mtu swift 1500
|
|
mtu dmz 1500
|
|
failover
|
|
failover lan unit primary
|
|
failover lan interface failover Ethernet0/3
|
|
failover interface ip failover 10.20.0.1 255.255.255.0 standby 10.20.0.2
|
|
asdm image disk0:/asdm506.bin
|
|
no asdm history enable
|
|
arp timeout 14400
|
|
global (swift) 1 sag-srv2
|
|
nat (dmz) 1 access-list dmz_pnat_inbound outside
|
|
static (sag,swift) sag-srv1 sag-srv1 netmask 255.255.255.255
|
|
static (sag,swift) sag-test sag-test netmask 255.255.255.255
|
|
static (sag,clients) 192.168.246.22 sag-test netmask 255.255.255.255
|
|
static (sag,clients) 192.168.246.25 sag-srv1 netmask 255.255.255.255
|
|
static (sag,clients) 192.168.246.20 sag-srv2 netmask 255.255.255.255
|
|
static (sag,clients) 192.168.246.110 mgmt-srv1 netmask 255.255.255.255
|
|
static (dmz,clients) 192.168.246.30 swp-srvr-cluster netmask 255.255.255.255
|
|
static (dmz,clients) 192.168.246.28 swp-srvr1 netmask 255.255.255.255
|
|
static (sag,dmz) 192.168.219.25 sag-srv1 netmask 255.255.255.255
|
|
static (sag,dmz) 192.168.219.22 sag-test netmask 255.255.255.255
|
|
static (sag,dmz) 192.168.219.20 sag-srv2 netmask 255.255.255.255
|
|
static (sag,dmz) 192.168.219.110 mgmt-srv1 netmask 255.255.255.255
|
|
static (sag,swift) sag-srv2 access-list sag_pnat_outbound_V3
|
|
access-group sag_access_in in interface sag
|
|
access-group clients_access_in in interface clients
|
|
access-group swift_access_in in interface swift
|
|
access-group dmz_access_in in interface dmz
|
|
route clients 10.82.0.0 255.255.0.0 vpn3-int 1
|
|
route clients 0.0.0.0 0.0.0.0 vpn1-2-nsrp 1
|
|
route swift swiftnet-nw 255.255.0.0 192.168.244.30 1
|
|
timeout xlate 3:00:00
|
|
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
|
|
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00
|
|
timeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00
|
|
timeout uauth 0:05:00 absolute
|
|
http server enable
|
|
http 192.168.202.0 255.255.255.0 sag
|
|
http 192.168.1.0 255.255.255.0 dmz
|
|
no snmp-server location
|
|
no snmp-server contact
|
|
snmp-server enable traps snmp authentication linkup linkdown coldstart
|
|
telnet 192.168.202.0 255.255.255.0 sag
|
|
telnet timeout 5
|
|
ssh timeout 5
|
|
console timeout 0
|
|
dhcpd lease 3600
|
|
dhcpd ping_timeout 50
|
|
tftp-server sag mgmt-srv1 /
|
|
Cryptochecksum:a6442190bc37addd95fdde00719002ee
|
|
: end
|
|
ENSBPASA1#
|
|
|
|
|
|
|
|
|
|
ENSBPASA1# show int
|
|
Interface Ethernet0/0 "sag", is up, line protocol is up
|
|
Hardware is i82546GB rev03, BW 100 Mbps
|
|
Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps)
|
|
MAC address 001b.0ce2.4698, MTU 1500
|
|
IP address 192.168.202.1, subnet mask 255.255.255.0
|
|
97790164 packets input, 13420314935 bytes, 0 no buffer
|
|
Received 775045 broadcasts, 0 runts, 0 giants
|
|
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
|
|
0 L2 decode drops
|
|
105536624 packets output, 43453902145 bytes, 0 underruns
|
|
0 output errors, 0 collisions
|
|
0 late collisions, 0 deferred
|
|
input queue (curr/max blocks): hardware (0/0) software (0/0)
|
|
output queue (curr/max blocks): hardware (0/10) software (0/0)
|
|
Traffic Statistics for "sag":
|
|
97790164 packets input, 11474995521 bytes
|
|
105536624 packets output, 41423614565 bytes
|
|
296167 packets dropped
|
|
1 minute input rate 9 pkts/sec, 1091 bytes/sec
|
|
1 minute output rate 11 pkts/sec, 1084 bytes/sec
|
|
1 minute drop rate, 0 pkts/sec
|
|
5 minute input rate 10 pkts/sec, 2011 bytes/sec
|
|
5 minute output rate 12 pkts/sec, 1499 bytes/sec
|
|
5 minute drop rate, 0 pkts/sec
|
|
Interface Ethernet0/1 "clients", is up, line protocol is up
|
|
Hardware is i82546GB rev03, BW 100 Mbps
|
|
Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps)
|
|
MAC address 001b.0ce2.4699, MTU 1500
|
|
IP address 192.168.246.1, subnet mask 255.255.255.0
|
|
87317478 packets input, 38968875541 bytes, 0 no buffer
|
|
Received 58983 broadcasts, 0 runts, 0 giants
|
|
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
|
|
0 L2 decode drops
|
|
79673272 packets output, 9601731613 bytes, 0 underruns
|
|
0 output errors, 0 collisions
|
|
0 late collisions, 0 deferred
|
|
input queue (curr/max blocks): hardware (1/0) software (0/0)
|
|
output queue (curr/max blocks): hardware (0/13) software (0/0)
|
|
Traffic Statistics for "clients":
|
|
87317478 packets input, 37326932936 bytes
|
|
79673272 packets output, 8037363465 bytes
|
|
529966 packets dropped
|
|
1 minute input rate 8 pkts/sec, 689 bytes/sec
|
|
1 minute output rate 7 pkts/sec, 861 bytes/sec
|
|
1 minute drop rate, 0 pkts/sec
|
|
5 minute input rate 9 pkts/sec, 894 bytes/sec
|
|
5 minute output rate 8 pkts/sec, 1542 bytes/sec
|
|
5 minute drop rate, 0 pkts/sec
|
|
Interface Ethernet0/2 "swift", is up, line protocol is up
|
|
Hardware is i82546GB rev03, BW 100 Mbps
|
|
Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps)
|
|
MAC address 001b.0ce2.469a, MTU 1500
|
|
IP address 192.168.244.1, subnet mask 255.255.255.0
|
|
14326554 packets input, 2914757876 bytes, 0 no buffer
|
|
Received 12037 broadcasts, 0 runts, 0 giants
|
|
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
|
|
0 L2 decode drops
|
|
14890989 packets output, 2987826809 bytes, 0 underruns
|
|
0 output errors, 0 collisions
|
|
0 late collisions, 0 deferred
|
|
input queue (curr/max blocks): hardware (1/0) software (0/0)
|
|
output queue (curr/max blocks): hardware (0/6) software (0/0)
|
|
Traffic Statistics for "swift":
|
|
14326554 packets input, 2611084577 bytes
|
|
14890989 packets output, 2679368480 bytes
|
|
12130 packets dropped
|
|
1 minute input rate 0 pkts/sec, 189 bytes/sec
|
|
1 minute output rate 0 pkts/sec, 149 bytes/sec
|
|
1 minute drop rate, 0 pkts/sec
|
|
5 minute input rate 1 pkts/sec, 359 bytes/sec
|
|
5 minute output rate 1 pkts/sec, 397 bytes/sec
|
|
5 minute drop rate, 0 pkts/sec
|
|
Interface Ethernet0/3 "failover", is up, line protocol is up
|
|
Hardware is i82546GB rev03, BW 100 Mbps
|
|
Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps)
|
|
Description: LAN Failover Interface
|
|
MAC address 001b.0ce2.469b, MTU 1500
|
|
IP address 10.20.0.1, subnet mask 255.255.255.0
|
|
16705866 packets input, 1542463032 bytes, 0 no buffer
|
|
Received 985 broadcasts, 0 runts, 0 giants
|
|
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
|
|
0 L2 decode drops
|
|
16705900 packets output, 1587027436 bytes, 0 underruns
|
|
0 output errors, 0 collisions
|
|
0 late collisions, 0 deferred
|
|
input queue (curr/max blocks): hardware (0/0) software (0/0)
|
|
output queue (curr/max blocks): hardware (0/3) software (0/0)
|
|
Traffic Statistics for "failover":
|
|
16705866 packets input, 1241757412 bytes
|
|
16705900 packets output, 1286292326 bytes
|
|
0 packets dropped
|
|
1 minute input rate 1 pkts/sec, 89 bytes/sec
|
|
1 minute output rate 1 pkts/sec, 92 bytes/sec
|
|
1 minute drop rate, 0 pkts/sec
|
|
5 minute input rate 1 pkts/sec, 89 bytes/sec
|
|
5 minute output rate 1 pkts/sec, 92 bytes/sec
|
|
5 minute drop rate, 0 pkts/sec
|
|
Interface Management0/0 "dmz", is up, line protocol is up
|
|
Hardware is i82557, BW 100 Mbps
|
|
Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps)
|
|
MAC address 001b.0ce2.469c, MTU 1500
|
|
IP address 192.168.219.1, subnet mask 255.255.255.0
|
|
35626045 packets input, 5253746628 bytes, 0 no buffer
|
|
Received 17285787 broadcasts, 0 runts, 0 giants
|
|
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
|
|
0 L2 decode drops
|
|
16394577 packets output, 3156794667 bytes, 0 underruns
|
|
0 output errors, 0 collisions, 0 interface resets
|
|
0 babbles, 0 late collisions, 0 deferred
|
|
0 lost carrier, 0 no carrier
|
|
input queue (curr/max blocks): hardware (128/128) software (0/30)
|
|
output queue (curr/max blocks): hardware (0/11) software (0/1)
|
|
Traffic Statistics for "dmz":
|
|
35531013 packets input, 4726805937 bytes
|
|
16426219 packets output, 2866498891 bytes
|
|
4265107 packets dropped
|
|
1 minute input rate 1 pkts/sec, 293 bytes/sec
|
|
1 minute output rate 1 pkts/sec, 226 bytes/sec
|
|
1 minute drop rate, 0 pkts/sec
|
|
5 minute input rate 1 pkts/sec, 222 bytes/sec
|
|
5 minute output rate 0 pkts/sec, 177 bytes/sec
|
|
5 minute drop rate, 0 pkts/sec
|
|
ENSBPASA1#
|
|
|
|
|
|
|
|
ENSBPASA1# show route
|
|
|
|
S 0.0.0.0 0.0.0.0 [1/0] via vpn1-2-nsrp, clients
|
|
C 10.20.0.0 255.255.255.0 is directly connected, failover
|
|
S 10.82.0.0 255.255.0.0 [1/0] via vpn3-int, clients
|
|
S swiftnet-nw 255.255.0.0 [1/0] via 192.168.244.30, swift
|
|
C 192.168.202.0 255.255.255.0 is directly connected, sag
|
|
C 192.168.219.0 255.255.255.0 is directly connected, dmz
|
|
C 192.168.244.0 255.255.255.0 is directly connected, swift
|
|
C 192.168.246.0 255.255.255.0 is directly connected, clients
|
|
ENSBPASA1#
|
|
|
|
ENSBPASA1# show xlat
|
|
13 in use, 34 most used
|
|
Global 192.168.219.25 Local sag-srv1
|
|
Global 192.168.219.22 Local sag-test
|
|
Global 192.168.219.20 Local sag-srv2
|
|
Global 192.168.219.110 Local mgmt-srv1
|
|
Global sag-srv1 Local sag-srv1
|
|
Global sag-test Local sag-test
|
|
Global sag-srv2 Local sag-srv2
|
|
Global 192.168.246.22 Local sag-test
|
|
Global 192.168.246.25 Local sag-srv1
|
|
Global 192.168.246.20 Local sag-srv2
|
|
Global 192.168.246.110 Local mgmt-srv1
|
|
Global 192.168.246.30 Local swp-srvr-cluster
|
|
Global 192.168.246.28 Local swp-srvr1
|
|
ENSBPASA1#
|
|
|
|
ENSBPASA1# show failover
|
|
Failover On
|
|
Failover unit Primary
|
|
Failover LAN Interface: failover Ethernet0/3 (up)
|
|
Unit Poll frequency 1 seconds, holdtime 15 seconds
|
|
Interface Poll frequency 15 seconds
|
|
Interface Policy 1
|
|
Monitored Interfaces 4 of 250 maximum
|
|
Version: Ours 7.0(6), Mate 7.0(6)
|
|
Last Failover at: 12:15:33 PKT Jun 6 2012
|
|
This host: Primary - Active
|
|
Active time: 13920273 (sec)
|
|
slot 0: ASA5510 hw/sw rev (2.0/7.0(6)) status (Up Sys)
|
|
slot 1: empty
|
|
Interface sag (192.168.202.1): Normal
|
|
Interface clients (192.168.246.1): Normal
|
|
Interface swift (192.168.244.1): Normal
|
|
Interface dmz (192.168.219.1): Normal (Waiting)
|
|
Other host: Secondary - Failed
|
|
Active time: 0 (sec)
|
|
slot 0: ASA5510 hw/sw rev (2.0/7.0(6)) status (Up Sys)
|
|
slot 1: empty
|
|
Interface sag (192.168.202.2): Normal
|
|
Interface clients (192.168.246.2): Normal
|
|
Interface swift (192.168.244.2): Normal
|
|
Interface dmz (0.0.0.0): No Link (Waiting)
|
|
|
|
Stateful Failover Logical Update Statistics
|
|
Link : Unconfigured.
|
|
|
|
ENSBPASA1#
|
|
|
|
|
|
|