1898 lines
112 KiB
Text
1898 lines
112 KiB
Text
# saved_cfg_timestamp:523370083 ##############################################################################################
|
|
unset key protection enable
|
|
set clock dst-off
|
|
set clock timezone 4
|
|
set clock dst recurring start-weekday 2 0 3 02:00 end-weekday 1 0 11 02:00
|
|
set vrouter trust-vr sharable
|
|
set vrouter "untrust-vr"
|
|
set protocol pim
|
|
exit
|
|
exit
|
|
set vrouter "trust-vr"
|
|
unset auto-route-export
|
|
exit
|
|
set service "EN_SAG_FIN" protocol tcp src-port 0-65535 dst-port 48002-48002
|
|
set service "EN_Alliance-SWA-Boot" protocol tcp src-port 0-65535 dst-port 48009-48009
|
|
set service "EN_Server-SAA" protocol tcp src-port 0-65535 dst-port 48100-48105
|
|
set service "EN_Messanger-SAA" protocol tcp src-port 0-65535 dst-port 48200-48200
|
|
set service "EN_RTGS" protocol tcp src-port 0-65535 dst-port 1980-1980
|
|
set service "EN_SAG_FACT" protocol tcp src-port 0-65535 dst-port 48003-48003
|
|
set service "EN_EPMAP_135" protocol tcp src-port 0-65535 dst-port 135-135
|
|
set service "EN_EPMAP_135" + udp src-port 0-65535 dst-port 135-135
|
|
set service "EN_Solid-Mux-Server_1029" protocol tcp src-port 0-65535 dst-port 1029-1029
|
|
set service "EN_Swa_rpcd" protocol tcp src-port 0-65535 dst-port 6500-6501
|
|
set service "EN_Swa_rpcd" + udp src-port 0-65535 dst-port 6500-6501
|
|
set service "EN_SAA-Server-Ports" protocol tcp src-port 0-65535 dst-port 9000-9049
|
|
set service "EN_SAA-Server-Ports" + udp src-port 0-65535 dst-port 9000-9049
|
|
set service "EN_SA-Interactive" protocol tcp src-port 0-65535 dst-port 5101-5105
|
|
set service "RDP" protocol tcp src-port 0-65535 dst-port 3389-3389
|
|
set service "EN_Side_Safewatch" protocol tcp src-port 0-65535 dst-port 8401-8401
|
|
set service "EN_Side_Safewatch" + udp src-port 0-65535 dst-port 8400-8400
|
|
set service "UNIRISX_KEYSRV" protocol tcp src-port 0-65535 dst-port 18201-18201
|
|
set service "en.MORE-www" protocol tcp src-port 0-65535 dst-port 8089-8089
|
|
set service "en.MORE-https" protocol tcp src-port 0-65535 dst-port 8090-8090
|
|
set service "Proxy_48600" protocol tcp src-port 0-65535 dst-port 48600-48600
|
|
set service "en.More-HTTPS-5443" protocol tcp src-port 0-65535 dst-port 5443-5443
|
|
set service "HTTP-8080" protocol tcp src-port 0-65535 dst-port 8080-8080
|
|
set service "HTTPS-1443" protocol tcp src-port 0-65535 dst-port 1443-1443
|
|
set service "Safewatch-8330" protocol tcp src-port 0-65535 dst-port 8330-8330
|
|
set service "Safewatch-8336" protocol tcp src-port 0-65535 dst-port 8336-8336
|
|
set service "SMS_Global_Ports" protocol tcp src-port 0-65535 dst-port 1775-1776
|
|
set alg appleichat enable
|
|
unset alg appleichat re-assembly enable
|
|
set alg sctp enable
|
|
set auth-server "Local" id 0
|
|
set auth-server "Local" server-name "Local"
|
|
set auth-server "RSA_Server" id 1
|
|
set auth-server "RSA_Server" server-name "192.168.206.100"
|
|
set auth-server "RSA_Server" backup1 "192.168.206.101"
|
|
set auth-server "RSA_Server" account-type xauth
|
|
set auth-server "RSA_Server" type securid
|
|
set auth default auth server "Local"
|
|
set auth radius accounting port 27911
|
|
set admin name "ENSBadmin"
|
|
set admin password "nBd5PIrLLusBciHPhs0PBnMtk5Dm5n"
|
|
set admin user "juy" password "nG5aE+reBeQIcQYK4sPHRuHtGdG0Kn" privilege "all"
|
|
set admin user "adesear" password "nLtbNIrRDSPEcrMDFs7MT5Htz8Cifn" privilege "all"
|
|
set admin user "msaeed" password "nF3dKrrkHDHCckxALsfARkBtenLoAn" privilege "all"
|
|
set admin user "kbaluyot" password "nMSQP4rHLyxHcWqBmsqP9pMtnMGPYn" privilege "all"
|
|
set admin user "mserhan" password "nBJrKhrpLP9NcPSI/sKEcXItRoJYvn" privilege "read-only"
|
|
set admin user "rmahmoud" password "nGZ/NkraDv/LcjwPns7OcDAtBdOu0n" privilege "read-only"
|
|
set admin user "rmahmoud" role audit
|
|
set admin user "mzaidi" password "nHY/IzrANpGPcfYHAsRM5oFtx5Py9n" privilege "read-only"
|
|
set admin ssh port 2194
|
|
set admin scs password disable username juy
|
|
set admin http redirect
|
|
set admin auth web timeout 10
|
|
set admin auth server "Local"
|
|
set admin auth banner secondary "NOTICE TO USERS... This computer is a property of EastNets (R). Any or all use of this system is governed by the Security Policies of EastNets Service Bureau (ENSB). Any or all uses of this system, and all files on this system may be monitored, recorded, audited, or inspected at the discretion of EastNets Management. Unauthorized or improper use of this system may result in administrative disciplinary action and civil and criminal penalties. By continuing to use this system you indicate your awareness of and consent to these terms and conditions of use. LOG OFF IMMEDIATELY if you do not agree to the conditions stated in this warning. Please contact ENSB Infrastructure Team to obtain a copy of the Security Policy or visit ENSB portal at http://entranet.eastnets.com/sites/ENSB/."
|
|
set admin auth banner telnet login "EastNets Service Bureau"
|
|
set admin auth banner console login "EastNets Service Bureau"
|
|
set admin auth banner ack-secondary
|
|
set admin format dos
|
|
set zone "Trust" vrouter "trust-vr"
|
|
set zone "Untrust" vrouter "trust-vr"
|
|
set zone "DMZ" vrouter "trust-vr"
|
|
set zone "VLAN" vrouter "trust-vr"
|
|
set zone id 100 "Trust_US"
|
|
set zone "Untrust-Tun" vrouter "trust-vr"
|
|
set zone "Trust" tcp-rst
|
|
unset zone "Untrust" block
|
|
unset zone "Untrust" tcp-rst
|
|
set zone "MGT" block
|
|
unset zone "V1-Trust" tcp-rst
|
|
unset zone "V1-Untrust" tcp-rst
|
|
set zone "DMZ" tcp-rst
|
|
unset zone "V1-DMZ" tcp-rst
|
|
set zone "VLAN" tcp-rst
|
|
set zone "Trust_US" tcp-rst
|
|
set zone "Untrust" screen icmp-flood
|
|
set zone "Untrust" screen udp-flood
|
|
set zone "Untrust" screen port-scan
|
|
set zone "Untrust" screen ip-sweep
|
|
set zone "Untrust" screen tear-drop
|
|
set zone "Untrust" screen syn-flood
|
|
set zone "Untrust" screen ping-death
|
|
set zone "Untrust" screen ip-filter-src
|
|
set zone "Untrust" screen land
|
|
set zone "Untrust" screen syn-frag
|
|
set zone "Untrust" screen tcp-no-flag
|
|
set zone "Untrust" screen ip-bad-option
|
|
set zone "Untrust" screen icmp-fragment
|
|
set zone "Untrust" screen syn-fin
|
|
set zone "Untrust" screen fin-no-ack
|
|
set zone "Untrust" screen syn-ack-ack-proxy
|
|
set zone "Untrust" screen tcp-sweep
|
|
set zone "Untrust" screen udp-sweep
|
|
set zone "V1-Untrust" screen tear-drop
|
|
set zone "V1-Untrust" screen syn-flood
|
|
set zone "V1-Untrust" screen ping-death
|
|
set zone "V1-Untrust" screen ip-filter-src
|
|
set zone "V1-Untrust" screen land
|
|
set interface "ethernet0/0" zone "Trust"
|
|
set interface "ethernet0/1" zone "Untrust"
|
|
set interface "ethernet0/2" zone "Untrust"
|
|
set interface "ethernet3/0" zone "Trust_US"
|
|
set interface "ethernet3/3" zone "Untrust"
|
|
set interface "tunnel.1" zone "Untrust"
|
|
set interface "tunnel.2" zone "Untrust"
|
|
set interface "tunnel.3" zone "Untrust"
|
|
set interface "tunnel.4" zone "Untrust"
|
|
set interface "tunnel.7" zone "Trust"
|
|
set interface "tunnel.10" zone "Untrust"
|
|
set interface "tunnel.11" zone "Untrust"
|
|
set interface "tunnel.12" zone "Untrust"
|
|
set interface "tunnel.13" zone "Untrust"
|
|
set interface "tunnel.14" zone "Untrust"
|
|
set interface "tunnel.15" zone "Untrust"
|
|
set interface "tunnel.16" zone "Untrust"
|
|
set interface "tunnel.17" zone "Untrust"
|
|
set interface "tunnel.18" zone "Untrust"
|
|
set interface "tunnel.19" zone "Untrust"
|
|
set interface "tunnel.20" zone "Untrust"
|
|
set interface "tunnel.21" zone "Untrust"
|
|
set interface "tunnel.22" zone "Untrust"
|
|
set interface ethernet0/0 ip 192.168.206.17/24
|
|
set interface ethernet0/0 nat
|
|
unset interface vlan1 ip
|
|
set interface ethernet0/1 ip 192.168.207.17/24
|
|
set interface ethernet0/1 route
|
|
set interface ethernet0/2 ip 80.227.254.205/27
|
|
set interface ethernet0/2 route
|
|
set interface ethernet3/0 ip 192.168.211.17/24
|
|
set interface ethernet3/0 nat
|
|
set interface ethernet3/3 ip 80.227.254.237/27
|
|
set interface ethernet3/3 route
|
|
set interface tunnel.1 ip 10.10.0.10/16
|
|
set interface tunnel.2 ip 10.20.0.10/16
|
|
set interface tunnel.3 ip 10.30.0.10/25
|
|
set interface tunnel.4 ip 10.30.0.139/25
|
|
set interface tunnel.7 ip 10.70.0.55/16
|
|
set interface tunnel.10 ip 10.100.0.10/16
|
|
set interface tunnel.11 ip 10.40.0.10/16
|
|
set interface tunnel.12 ip 10.50.0.10/16
|
|
set interface tunnel.13 ip 10.60.0.10/25
|
|
set interface tunnel.14 ip 10.60.0.139/25
|
|
set interface tunnel.15 ip unnumbered interface ethernet3/3
|
|
set interface tunnel.16 ip unnumbered interface ethernet3/3
|
|
set interface tunnel.17 ip unnumbered interface ethernet3/3
|
|
set interface tunnel.18 ip unnumbered interface ethernet0/2
|
|
set interface tunnel.19 ip unnumbered interface ethernet3/3
|
|
set interface tunnel.20 ip unnumbered interface ethernet3/3
|
|
set interface tunnel.21 ip unnumbered interface ethernet3/3
|
|
set interface tunnel.22 ip unnumbered interface ethernet3/3
|
|
set interface tunnel.7 mtu 1500
|
|
set interface tunnel.10 mtu 1500
|
|
set interface tunnel.11 mtu 1500
|
|
set interface tunnel.15 mtu 1500
|
|
set interface tunnel.16 mtu 1500
|
|
set interface tunnel.17 mtu 1500
|
|
set interface tunnel.18 mtu 1500
|
|
set interface tunnel.19 mtu 1500
|
|
set interface tunnel.20 mtu 1500
|
|
set interface "ethernet3/0" pmtu ipv4
|
|
unset interface vlan1 bypass-others-ipsec
|
|
unset interface vlan1 bypass-non-ip
|
|
set interface ethernet0/0 manage-ip 192.168.206.15
|
|
set interface ethernet0/1 manage-ip 192.168.207.15
|
|
set interface ethernet0/2 manage-ip 80.227.254.206
|
|
set interface ethernet3/0 manage-ip 192.168.211.15
|
|
set interface ethernet3/3 manage-ip 80.227.254.238
|
|
set interface ethernet0/0 ip manageable
|
|
set interface ethernet0/1 ip manageable
|
|
unset interface ethernet0/2 ip manageable
|
|
set interface ethernet3/0 ip manageable
|
|
unset interface ethernet3/3 ip manageable
|
|
set interface ethernet0/1 manage ping
|
|
set interface ethernet0/1 manage ssh
|
|
set interface ethernet0/1 manage telnet
|
|
set interface ethernet0/1 manage snmp
|
|
set interface ethernet0/1 manage ssl
|
|
set interface ethernet0/1 manage web
|
|
set interface ethernet0/2 manage ping
|
|
set interface ethernet0/2 manage ssh
|
|
set interface ethernet0/2 manage ssl
|
|
set interface ethernet3/0 manage ping
|
|
set interface ethernet3/0 manage ssh
|
|
set interface ethernet3/0 manage telnet
|
|
set interface ethernet3/0 manage snmp
|
|
set interface ethernet3/0 manage ssl
|
|
set interface ethernet3/0 manage web
|
|
set interface ethernet3/0 manage ident-reset
|
|
set interface ethernet3/3 manage ping
|
|
set interface ethernet3/3 manage ssh
|
|
set interface ethernet3/3 manage ssl
|
|
set auth-server "RSA_Server" src-interface "ethernet0/0"
|
|
set interface ethernet0/2 vip 80.227.254.208 21 "FTP" 192.168.211.201 manual
|
|
set interface ethernet0/2 vip 80.227.254.208 + 443 "HTTPS" 192.168.211.201 manual
|
|
set interface ethernet0/2 vip 80.227.254.208 + 80 "HTTP" 192.168.211.201 manual
|
|
set interface ethernet0/2 vip 80.227.254.209 21 "FTP" 192.168.211.202 manual
|
|
set interface ethernet0/2 vip 80.227.254.209 + 443 "HTTPS" 192.168.211.202 manual
|
|
set interface ethernet0/2 vip 80.227.254.209 + 80 "HTTP" 192.168.211.202 manual
|
|
set interface ethernet0/2 vip 80.227.254.210 443 "HTTPS" 192.168.211.203 manual
|
|
set interface ethernet0/2 vip 80.227.254.210 + 80 "HTTP" 192.168.211.203 manual
|
|
set interface ethernet0/2 vip 80.227.254.211 443 "HTTPS" 192.168.211.100 manual
|
|
set interface ethernet0/2 vip 80.227.254.211 + 80 "HTTP" 192.168.211.100 manual
|
|
set interface ethernet0/2 vip 80.227.254.217 80 "HTTP" 192.168.211.105 manual
|
|
set interface ethernet0/2 vip 80.227.254.217 + 443 "en.MORE-https" 192.168.211.105 manual
|
|
set interface ethernet0/2 vip 80.227.254.217 + 21 "FTP" 192.168.211.105 manual
|
|
set interface ethernet3/3 vip interface-ip 5443 "HTTPS" 192.168.214.108 manual
|
|
set interface "ethernet0/2" mip 91.75.72.13 host 192.168.214.100 netmask 255.255.255.255 vr "trust-vr"
|
|
set interface "tunnel.15" mip 10.246.89.14 host 192.168.211.105 netmask 255.255.255.255 vr "trust-vr"
|
|
set interface "tunnel.15" mip 10.246.89.13 host 192.168.211.106 netmask 255.255.255.255 vr "trust-vr"
|
|
set interface "tunnel.15" mip 10.246.89.12 host 192.168.214.107 netmask 255.255.255.255 vr "trust-vr"
|
|
set interface "tunnel.15" mip 10.246.89.15 host 192.168.214.108 netmask 255.255.255.255 vr "trust-vr"
|
|
set interface "tunnel.21" mip 172.24.211.230 host 192.168.211.230 netmask 255.255.255.255 vr "trust-vr"
|
|
set interface "tunnel.22" mip 172.25.211.230 host 192.168.211.230 netmask 255.255.255.255 vr "trust-vr"
|
|
unset flow no-tcp-seq-check
|
|
unset flow tcp-syn-check
|
|
unset flow tcp-syn-bit-check
|
|
set flow reverse-route clear-text prefer
|
|
set flow reverse-route tunnel always
|
|
set console page 15
|
|
set hostname ENSBDVPN5
|
|
set pki authority default scep mode "auto"
|
|
set pki x509 default cert-path partial
|
|
set nsrp cluster id 1
|
|
set nsrp rto-mirror sync
|
|
set nsrp rto-mirror route
|
|
set nsrp rto-mirror session ageout-ack
|
|
set nsrp rto-mirror session non-vsi
|
|
set nsrp vsd-group id 0 priority 50
|
|
set nsrp vsd-group id 0 preempt
|
|
set nsrp monitor interface ethernet0/0
|
|
set nsrp monitor interface ethernet0/2
|
|
set dns host dns1 80.227.2.4 src-interface ethernet0/2
|
|
set dns host dns2 80.227.2.3 src-interface ethernet0/2
|
|
set dns host dns3 0.0.0.0
|
|
set address "Trust" "192.168.206.0/23" 192.168.206.0 255.255.254.0
|
|
set address "Trust" "ENSBD_NW" 192.168.206.0 255.255.255.0
|
|
set address "Trust" "ENSBD_NW_US" 192.168.211.0 255.255.255.0 "US Network in Dubai Site"
|
|
set address "Trust" "ENSBDXB_SAG1" 192.168.206.25 255.255.255.255 "Primary SAG - DXB"
|
|
set address "Trust" "ENSBDXB_SAG2" 192.168.206.20 255.255.255.255 "Secondary SAG - DXB"
|
|
set address "Trust" "ENSBDXB_SAG3" 192.168.206.22 255.255.255.255
|
|
set address "Trust" "ENSBDXB_SAG4" 192.168.206.23 255.255.255.255
|
|
set address "Trust" "ENSBDXB_SAG5" 192.168.206.26 255.255.255.255
|
|
set address "Trust" "SWP-NLB" 192.168.206.30 255.255.255.255
|
|
set address "Trust" "SWP-SRV1" 192.168.206.28 255.255.255.255
|
|
set address "Trust" "SWP-SRV2" 192.168.206.29 255.255.255.255
|
|
set address "Untrust" "10.100.200.0/24" 10.100.200.0 255.255.255.0
|
|
set address "Untrust" "10.153.0.0/16" 10.153.0.0 255.255.0.0
|
|
set address "Untrust" "213.132.40.99/32" 213.132.40.99 255.255.255.255
|
|
set address "Untrust" "213.132.58.173/32" 213.132.58.173 255.255.255.255
|
|
set address "Untrust" "BICS-HOMESEND-PROD-SVR-01" 193.43.238.249 255.255.255.255
|
|
set address "Untrust" "BICS-HOMESEND-TEST-SVR-01" 193.43.238.250 255.255.255.255
|
|
set address "Untrust" "EEC-WSs" 172.22.7.64 255.255.255.192
|
|
set address "Untrust" "EN-IT-MAIL-SRV" 192.168.2.13 255.255.255.255
|
|
set address "Untrust" "ENSB-JO-NW" 192.168.216.0 255.255.254.0
|
|
set address "Untrust" "ENSB-NOC-NW" 192.168.196.0 255.255.255.0
|
|
set address "Untrust" "ENSBPK_NW" 192.168.246.0 255.255.255.0 "ENSB Pakistan Network"
|
|
set address "Untrust" "ENSBPK_SAG1" 192.168.246.25 255.255.255.255 "Primary SAG - Pakistan"
|
|
set address "Untrust" "ENSBPK_SAG2" 192.168.246.20 255.255.255.255 "Secondary SAG - Pakistan"
|
|
set address "Untrust" "ENSBUS_NW" 192.168.111.0 255.255.255.0 "ENSB USA Network"
|
|
set address "Untrust" "IT-MAIL-SERVER" 10.151.33.129 255.255.255.255
|
|
set address "Untrust" "MEA-WSs" 172.22.7.128 255.255.255.192
|
|
set address "Untrust" "MoneyExpress-Server" 10.10.10.187 255.255.255.255
|
|
set address "Untrust" "PK_CUS_NW_DRCP" 172.23.0.0 255.255.0.0 "PK DRCP Client GNAT"
|
|
set address "Untrust" "PK_CUS_NW_GWCP" 172.22.0.0 255.255.0.0 "PK GWCP Client GNAT"
|
|
set address "Untrust" "RemitONE-SRVR1" 84.45.85.251 255.255.255.255
|
|
set address "Untrust" "RemitONE-SRVR2" 84.45.85.253 255.255.255.255
|
|
set address "Untrust" "RemitONE-SRVR3" 84.45.85.195 255.255.255.255
|
|
set address "Untrust" "RemitONE-SRVR4" 84.45.85.199 255.255.255.255
|
|
set address "Untrust" "RemitONE-Test_SRVR1" 84.45.85.222 255.255.255.255
|
|
set address "Untrust" "SMS_Global_DR_SRVR1" 59.167.123.105 255.255.255.255
|
|
set address "Untrust" "SMS_Global_Production_SRVR1" 203.89.193.162 255.255.255.255
|
|
set address "Untrust" "TELEPIN TEST NW" 10.254.240.0 255.255.255.0
|
|
set address "Untrust" "TELEPIN-FTP" 202.40.237.153 255.255.255.255
|
|
set address "Untrust" "TELEPIN-FTP-TEMP" 202.40.237.145 255.255.255.255
|
|
set address "Untrust" "TELEPIN-SINGTEL NW" 10.254.240.128 255.255.255.240
|
|
set address "Untrust" "TELEPIN-SINGTEL-SRV-TEMP" 202.40.237.148 255.255.255.255
|
|
set address "Untrust" "TELEPIN-SINGTEL-SRV1" 202.40.237.146 255.255.255.255
|
|
set address "Untrust" "TELEPIN-SINGTEL-SRV2" 202.40.237.147 255.255.255.255
|
|
set address "Untrust" "TELEPIN-SINGTEL-SRV3" 202.40.237.148 255.255.255.255
|
|
set address "Untrust" "TELEPIN-SINGTEL-SRV4" 10.254.240.135 255.255.255.255
|
|
set address "Untrust" "TIDCKWKW_GWCP_NW" 192.168.59.0 255.255.255.0
|
|
set address "Untrust" "UNIRISX_KEYSRV" 206.201.131.9 255.255.255.255 "keyserver.hostidp.com "
|
|
set address "Untrust" "UNIRISX_MGMT_PUBLIC" 213.86.143.14 255.255.255.255
|
|
set address "Untrust" "US_ACBBUS6L_NW" 172.28.2.64 255.255.255.192
|
|
set address "Untrust" "US_CAGPBMHM_NW" 172.28.2.128 255.255.255.192 "CAGPBMHM NETWORK"
|
|
set address "Untrust" "US_CAGPBMHM_NW-DR" 172.28.2.192 255.255.255.192
|
|
set address "Untrust" "US_FEBKUS6LIRV_NW" 172.28.0.192 255.255.255.192
|
|
set address "Untrust" "US_FEBKUS6LLA1_NW" 172.28.0.64 255.255.255.192
|
|
set address "Untrust" "US_FEBKUS6LLA2_NW" 172.28.0.128 255.255.255.192
|
|
set address "Untrust" "US_GPSXUS55_NW" 172.28.1.192 255.255.255.192
|
|
set address "Untrust" "US_GPSXUS55DR_NW" 172.28.2.0 255.255.255.192
|
|
set address "Untrust" "US_IDXDUS033_NW" 172.28.1.64 255.255.255.192
|
|
set address "Untrust" "US_RBBCUS6L_NW" 172.28.1.128 255.255.255.192
|
|
set address "Untrust" "USA_CUS_NW" 172.28.0.0 255.255.0.0
|
|
set address "Trust_US" "10.246.89.5/32" 10.246.89.5 255.255.255.255
|
|
set address "Trust_US" "192.168.211.104/29" 192.168.211.104 255.255.255.248
|
|
set address "Trust_US" "192.168.211.237/32" 192.168.211.237 255.255.255.255
|
|
set address "Trust_US" "192.168.214.104/29" 192.168.214.104 255.255.255.248
|
|
set address "Trust_US" "en.More Web Server 1" 192.168.211.230 255.255.255.255
|
|
set address "Trust_US" "en.More-SRV1" 192.168.211.105 255.255.255.255
|
|
set address "Trust_US" "en.More-SRV2" 192.168.211.106 255.255.255.255
|
|
set address "Trust_US" "ENMOREDAPP1" 192.168.214.107 255.255.255.255
|
|
set address "Trust_US" "ENMOREDAPP2" 192.168.214.108 255.255.255.255
|
|
set address "Trust_US" "ENSB-BICS-NW" 10.246.89.0 255.255.255.248
|
|
set address "Trust_US" "ENSB-BICS-TEST-SRV1" 10.246.89.5 255.255.255.255
|
|
set address "Trust_US" "ENSB_DXB_US_NW" 192.168.211.0 255.255.255.0
|
|
set address "Trust_US" "ENSBDFTP1" 192.168.211.115 255.255.255.255
|
|
set address "Trust_US" "ENSWDAPP-CLUSTER" 192.168.211.237 255.255.255.255
|
|
set address "Trust_US" "ENSWDAPP1" 192.168.211.238 255.255.255.255
|
|
set address "Trust_US" "ENSWDAPP2" 192.168.211.239 255.255.255.255
|
|
set address "Trust_US" "ENUS_AML1" 192.168.211.60 255.255.255.255
|
|
set address "Trust_US" "ENUS_AML2" 192.168.211.61 255.255.255.255
|
|
set address "Trust_US" "ENUS_SAA1" 1.1.1.1 255.255.255.255
|
|
set address "Trust_US" "ENUS_SAA2" 1.1.1.2 255.255.255.255
|
|
set address "Trust_US" "ENUS_SAAS1" 192.168.211.50 255.255.255.255
|
|
set address "Trust_US" "ENUS_SAAS2" 192.168.211.51 255.255.255.255
|
|
set address "Trust_US" "ENUS_SAG1" 192.168.211.25 255.255.255.255
|
|
set address "Trust_US" "ENUS_SAG2" 192.168.211.20 255.255.255.255
|
|
set address "Trust_US" "ENUS_SAG3" 192.168.211.22 255.255.255.255
|
|
set address "Trust_US" "ENUS_SAG4" 192.168.211.23 255.255.255.255
|
|
set address "Trust_US" "ENUS_SAG5" 192.168.211.26 255.255.255.255
|
|
set address "Trust_US" "ENUS_SWP-NLB" 192.168.211.30 255.255.255.255
|
|
set address "Trust_US" "ENUS_SWP1" 192.168.211.28 255.255.255.255
|
|
set address "Trust_US" "ENUS_SWP2" 192.168.211.29 255.255.255.255
|
|
set address "Trust_US" "FINMEX-SRV1" 192.168.211.100 255.255.255.255 "FINMEX PORTAL SERVER"
|
|
set address "Trust_US" "UNIRISX-HOST" 192.168.211.201 255.255.255.255 "UNIRISX Host Server"
|
|
set address "Trust_US" "UNIRISX-SRV03" 192.168.211.203 255.255.255.255 "Unirisx Pharos Server"
|
|
set address "Trust_US" "USA_SL1" 192.168.211.51 255.255.255.255 "Primary Shared License Server"
|
|
set address "Trust_US" "USA_SL2" 192.168.211.52 255.255.255.255 "Backup Shared License Server"
|
|
set group address "Untrust" "BICS-SVR-GROUP"
|
|
set group address "Untrust" "BICS-SVR-GROUP" add "BICS-HOMESEND-PROD-SVR-01"
|
|
set group address "Untrust" "BICS-SVR-GROUP" add "BICS-HOMESEND-TEST-SVR-01"
|
|
set group address "Untrust" "RemitONE-Servers"
|
|
set group address "Untrust" "RemitONE-Servers" add "RemitONE-SRVR1"
|
|
set group address "Untrust" "RemitONE-Servers" add "RemitONE-SRVR2"
|
|
set group address "Untrust" "RemitONE-Servers" add "RemitONE-SRVR3"
|
|
set group address "Untrust" "RemitONE-Servers" add "RemitONE-SRVR4"
|
|
set group address "Trust_US" "en.More Web Servers"
|
|
set group address "Trust_US" "en.More Web Servers" add "en.More Web Server 1"
|
|
set group address "Trust_US" "en.More-APP-Servers"
|
|
set group address "Trust_US" "en.More-APP-Servers" add "ENMOREDAPP1"
|
|
set group address "Trust_US" "en.More-APP-Servers" add "ENMOREDAPP2"
|
|
set group address "Trust_US" "enMORE"
|
|
set group address "Trust_US" "enMORE" add "en.More-SRV1"
|
|
set group address "Trust_US" "enMORE" add "en.More-SRV2"
|
|
set group address "Trust_US" "ENSW-SRVS"
|
|
set group address "Trust_US" "ENSW-SRVS" add "ENSWDAPP-CLUSTER"
|
|
set group address "Trust_US" "ENSW-SRVS" add "ENSWDAPP1"
|
|
set group address "Trust_US" "ENSW-SRVS" add "ENSWDAPP2"
|
|
set group address "Trust_US" "ENUS_AML_NW"
|
|
set group address "Trust_US" "ENUS_AML_NW" add "ENUS_AML1"
|
|
set group address "Trust_US" "ENUS_AML_NW" add "ENUS_AML2"
|
|
set group address "Trust_US" "ENUS_FMHS_NW"
|
|
set group address "Trust_US" "ENUS_FMHS_NW" add "ENUS_SAA1"
|
|
set group address "Trust_US" "ENUS_FMHS_NW" add "ENUS_SAA2"
|
|
set group address "Trust_US" "ENUS_SAAS_NW"
|
|
set group address "Trust_US" "ENUS_SAAS_NW" add "ENUS_SAAS1"
|
|
set group address "Trust_US" "ENUS_SAAS_NW" add "ENUS_SAAS2"
|
|
set group address "Trust_US" "ENUS_SAG_NW"
|
|
set group address "Trust_US" "ENUS_SAG_NW" add "ENUS_SAG1"
|
|
set group address "Trust_US" "ENUS_SAG_NW" add "ENUS_SAG2"
|
|
set group address "Trust_US" "ENUS_SAG_NW" add "ENUS_SAG3"
|
|
set group address "Trust_US" "ENUS_SAG_NW" add "ENUS_SAG4"
|
|
set group address "Trust_US" "ENUS_SAG_NW" add "ENUS_SAG5"
|
|
set group address "Trust_US" "ENUS_SAG_NW" add "ENUS_SWP-NLB"
|
|
set group address "Trust_US" "ENUS_SAG_NW" add "ENUS_SWP1"
|
|
set group address "Trust_US" "ENUS_SAG_NW" add "ENUS_SWP2"
|
|
set group address "Trust_US" "UNIRISX"
|
|
set group address "Trust_US" "UNIRISX" add "UNIRISX-HOST"
|
|
set group address "Trust_US" "UNIRISX" add "UNIRISX-SRV03"
|
|
set group address "Trust_US" "USA_SL_Group" comment "Shared License Servers Group"
|
|
set group address "Trust_US" "USA_SL_Group" add "USA_SL1"
|
|
set group address "Trust_US" "USA_SL_Group" add "USA_SL2"
|
|
set group service "EN_ICMP"
|
|
set group service "EN_ICMP" add "ICMP-ANY"
|
|
set group service "EN_MSIH" comment "FMHS/SAAS Ports"
|
|
set group service "EN_MSIH" add "EN_Alliance-SWA-Boot"
|
|
set group service "EN_MSIH" add "EN_EPMAP_135"
|
|
set group service "EN_MSIH" add "EN_Messanger-SAA"
|
|
set group service "EN_MSIH" add "EN_SA-Interactive"
|
|
set group service "EN_MSIH" add "EN_SAA-Server-Ports"
|
|
set group service "EN_MSIH" add "EN_Server-SAA"
|
|
set group service "EN_MSIH" add "EN_Solid-Mux-Server_1029"
|
|
set group service "EN_MSIH" add "EN_Swa_rpcd"
|
|
set group service "EN_SAG" comment "GWCP Service"
|
|
set group service "EN_SAG" add "EN_SAG_FACT"
|
|
set group service "EN_SAG" add "EN_SAG_FIN"
|
|
set group service "EN_SAG" add "Proxy_48600"
|
|
set group service "MoneyExpress_Ports"
|
|
set group service "MoneyExpress_Ports" add "FTP"
|
|
set group service "MoneyExpress_Ports" add "HTTP"
|
|
set group service "TELEPIN-SINGTEL"
|
|
set group service "TELEPIN-SINGTEL" add "EN_Side_Safewatch"
|
|
set group service "TELEPIN-SINGTEL" add "HTTP-8080"
|
|
set group service "TELEPIN-SINGTEL" add "HTTPS-1443"
|
|
set group service "TELEPIN-SINGTEL" add "Safewatch-8330"
|
|
set group service "TELEPIN-SINGTEL" add "Safewatch-8336"
|
|
set ippool "Default_Pool" 10.100.5.1 10.100.5.254
|
|
set ippool "ensb_mgmt_pool" 10.100.200.11 10.100.200.20
|
|
set ippool "unirisx_mgmt_pool" 10.100.205.1 10.100.205.10
|
|
set ippool "unirisx_pharos_pool" 10.100.210.11 10.100.210.20
|
|
set ippool "finmex_mgmt_pool" 10.100.215.11 10.100.215.20
|
|
set ippool "cs_support_pool" 10.100.220.10 10.100.220.20
|
|
set ippool "Singtel-Users-Pool" 10.159.9.136 10.159.9.145
|
|
set ippool "sw-support-pool" 10.100.225.11 10.100.225.20
|
|
set ippool "en.More-LVL3-Pool" 10.100.150.1 10.100.150.14
|
|
set user "ARousan" uid 25
|
|
set user "ARousan" ike-id u-fqdn "ARousan@eastnets.com" share-limit 1
|
|
set user "ARousan" type ike xauth
|
|
set user "ARousan" remote ippool "finmex_mgmt_pool"
|
|
set user "ARousan" password "qqlIj6g6NZo4kBsXFNCM6tU+c2nr1PdWPw=="
|
|
unset user "ARousan" type auth
|
|
set user "ARousan" "enable"
|
|
set user "EMagsombol" uid 68
|
|
set user "EMagsombol" ike-id u-fqdn "EMagsombol@eastnets.com" share-limit 1
|
|
set user "EMagsombol" type ike xauth
|
|
set user "EMagsombol" remote ippool "en.More-LVL3-Pool"
|
|
set user "EMagsombol" password "EMjYQYgONdecCfs6NdCAbDO2ghnqmKoxog=="
|
|
unset user "EMagsombol" type auth
|
|
set user "EMagsombol" "enable"
|
|
set user "KShahzad" uid 65
|
|
set user "KShahzad" ike-id u-fqdn "KShahzad@eastnets.com" share-limit 1
|
|
set user "KShahzad" type ike xauth
|
|
set user "KShahzad" remote ippool "en.More-LVL3-Pool"
|
|
set user "KShahzad" password "fxSoe9zHNTTGCdszoFCSil8D6xnUByH1SQ=="
|
|
unset user "KShahzad" type auth
|
|
set user "KShahzad" "disable"
|
|
set user "LAbuezz" uid 70
|
|
set user "LAbuezz" ike-id u-fqdn "LAbuezz@eastnets.com" share-limit 1
|
|
set user "LAbuezz" type ike xauth
|
|
set user "LAbuezz" remote ippool "en.More-LVL3-Pool"
|
|
set user "LAbuezz" password "4hcS1T1rN4WjSGsfNwCfPp3cpfn3g1v2Qw=="
|
|
unset user "LAbuezz" type auth
|
|
set user "LAbuezz" "enable"
|
|
set user "PPU" uid 69
|
|
set user "PPU" ike-id u-fqdn "PPU@eastnets.com" share-limit 1
|
|
set user "PPU" type ike xauth
|
|
set user "PPU" remote ippool "en.More-LVL3-Pool"
|
|
set user "PPU" password "x8pz0PSkNMjFHJs2o3Cmb0SPpKnknb7lfA=="
|
|
unset user "PPU" type auth
|
|
set user "PPU" "enable"
|
|
set user "SJaber" uid 74
|
|
set user "SJaber" ike-id u-fqdn "SJaber@eastnets.com" share-limit 1
|
|
set user "SJaber" type ike xauth
|
|
set user "SJaber" remote ippool "en.More-LVL3-Pool"
|
|
set user "SJaber" password "RHNlQnF5NRMEhvsEn5CC/9xAumnJ0Qu1WQ=="
|
|
unset user "SJaber" type auth
|
|
set user "SJaber" "enable"
|
|
set user "SQasim" uid 27
|
|
set user "SQasim" ike-id u-fqdn "SQasim@eastnets.com" share-limit 1
|
|
set user "SQasim" type ike xauth
|
|
set user "SQasim" remote ippool "finmex_mgmt_pool"
|
|
set user "SQasim" password "UKRAu9YiNmDZKZslNNC2VEP+mHnESXTP1Q=="
|
|
unset user "SQasim" type auth
|
|
set user "SQasim" "enable"
|
|
set user "SW-AAbuhijleh" uid 49
|
|
set user "SW-AAbuhijleh" ike-id u-fqdn "SW-AAbuhijleh@eastnets.com" share-limit 1
|
|
set user "SW-AAbuhijleh" type ike xauth
|
|
set user "SW-AAbuhijleh" remote ippool "sw-support-pool"
|
|
set user "SW-AAbuhijleh" password "qKfUkzuqNZBt/0sfsDCK7AHwPtnkBCNCRA=="
|
|
unset user "SW-AAbuhijleh" type auth
|
|
set user "SW-AAbuhijleh" "enable"
|
|
set user "SW-AEdwan" uid 52
|
|
set user "SW-AEdwan" ike-id u-fqdn "SW-AEdwan@eastnets.com" share-limit 1
|
|
set user "SW-AEdwan" type ike xauth
|
|
set user "SW-AEdwan" remote ippool "sw-support-pool"
|
|
set user "SW-AEdwan" password "gR4lQlpNNZMxZ4sOk2CFWJgKgRnh13PouQ=="
|
|
unset user "SW-AEdwan" type auth
|
|
set user "SW-AEdwan" "enable"
|
|
set user "SW-AEdwan2" uid 54
|
|
set user "SW-AEdwan2" ike-id u-fqdn "SW-AEdwan2@eastnets.com" share-limit 1
|
|
set user "SW-AEdwan2" type ike xauth
|
|
set user "SW-AEdwan2" remote ippool "sw-support-pool"
|
|
set user "SW-AEdwan2" password "nSQ7RJeJN1XMWQsgvgCjfHL2SlnJvYGBIw=="
|
|
unset user "SW-AEdwan2" type auth
|
|
set user "SW-AEdwan2" "enable"
|
|
set user "SW-FTawaha" uid 50
|
|
set user "SW-FTawaha" ike-id u-fqdn "SW-FTawaha@eastnets.com" share-limit 1
|
|
set user "SW-FTawaha" type ike xauth
|
|
set user "SW-FTawaha" remote ippool "sw-support-pool"
|
|
set user "SW-FTawaha" password "eVKkeYk/NyTDj7semDCzaihREmnBIZyVpQ=="
|
|
unset user "SW-FTawaha" type auth
|
|
set user "SW-FTawaha" "enable"
|
|
set user "SW-MAQatanany" uid 48
|
|
set user "SW-MAQatanany" ike-id u-fqdn "SW-MAQatanany@eastnets.com" share-limit 1
|
|
set user "SW-MAQatanany" type ike xauth
|
|
set user "SW-MAQatanany" remote ippool "sw-support-pool"
|
|
set user "SW-MAQatanany" password "6T/2m1DQNlMm0EswalCf2RFyisn+YSxYyQ=="
|
|
unset user "SW-MAQatanany" type auth
|
|
set user "SW-MAQatanany" "enable"
|
|
set user "SW-MSalameh" uid 51
|
|
set user "SW-MSalameh" ike-id u-fqdn "SW-MSalameh@eastnets.com" share-limit 1
|
|
set user "SW-MSalameh" type ike xauth
|
|
set user "SW-MSalameh" remote ippool "sw-support-pool"
|
|
set user "SW-MSalameh" password "F7rnvu3BN/yG1Rs6zECTSyPj1HnUizwJ9A=="
|
|
unset user "SW-MSalameh" type auth
|
|
set user "SW-MSalameh" "disable"
|
|
set user "SW-RDevilla" uid 55
|
|
set user "SW-RDevilla" ike-id u-fqdn "SW-RDevilla@eastnets.com" share-limit 1
|
|
set user "SW-RDevilla" type ike xauth
|
|
set user "SW-RDevilla" remote ippool "sw-support-pool"
|
|
set user "SW-RDevilla" password "ksb9nIPqNB3X18smbHCKV+Z/gDndFsFDJw=="
|
|
unset user "SW-RDevilla" type auth
|
|
set user "SW-RDevilla" "disable"
|
|
set user "SW-SBKalahaf" uid 46
|
|
set user "SW-SBKalahaf" ike-id u-fqdn "SW-SBKalahaf@eastnets.com" share-limit 1
|
|
set user "SW-SBKalahaf" type ike xauth
|
|
set user "SW-SBKalahaf" remote ippool "sw-support-pool"
|
|
set user "SW-SBKalahaf" password "cFfFf4EaN+WrswsN2ZCqTJstVKnC7WcD6Q=="
|
|
unset user "SW-SBKalahaf" type auth
|
|
set user "SW-SBKalahaf" "enable"
|
|
set user "SW-SQasim" uid 47
|
|
set user "SW-SQasim" ike-id u-fqdn "SW-SQasim@eastnets.com" share-limit 1
|
|
set user "SW-SQasim" type ike xauth
|
|
set user "SW-SQasim" remote ippool "sw-support-pool"
|
|
set user "SW-SQasim" password "UbacajCoNXAOBhsi3ICMUfZSdmnnaxJIuw=="
|
|
unset user "SW-SQasim" type auth
|
|
set user "SW-SQasim" "enable"
|
|
set user "Singprod1" uid 41
|
|
set user "Singprod1" ike-id u-fqdn "Singprod1@eastnets.com" share-limit 1
|
|
set user "Singprod1" type ike xauth
|
|
set user "Singprod1" remote ippool "Singtel-Users-Pool"
|
|
set user "Singprod1" password "xJB2HUcCNaJkJPsZb2CIa38zwZn+GkO1Lw=="
|
|
unset user "Singprod1" type auth
|
|
set user "Singprod1" "enable"
|
|
set user "Singprod2" uid 42
|
|
set user "Singprod2" ike-id u-fqdn "Singprod2@eastnets.com" share-limit 1
|
|
set user "Singprod2" type ike xauth
|
|
set user "Singprod2" remote ippool "Singtel-Users-Pool"
|
|
set user "Singprod2" password "j8suFekhN6N9usskgzCoxPBtEHn42azSJw=="
|
|
unset user "Singprod2" type auth
|
|
set user "Singprod2" "enable"
|
|
set user "Singprod3" uid 43
|
|
set user "Singprod3" ike-id u-fqdn "Singprod3@eastnets.com" share-limit 1
|
|
set user "Singprod3" type ike xauth
|
|
set user "Singprod3" remote ippool "Singtel-Users-Pool"
|
|
set user "Singprod3" password "pg8AXQUGNMzFJwsb95CEeu0QU8n2HFe7ng=="
|
|
unset user "Singprod3" type auth
|
|
set user "Singprod3" "enable"
|
|
set user "Singprod4" uid 44
|
|
set user "Singprod4" ike-id u-fqdn "Singprod4@eastnets.com" share-limit 1
|
|
set user "Singprod4" type ike xauth
|
|
set user "Singprod4" remote ippool "Singtel-Users-Pool"
|
|
set user "Singprod4" password "AKoOTQjvNb5o1LseQWCyS1Oa7NnJLMEkCA=="
|
|
unset user "Singprod4" type auth
|
|
set user "Singprod4" "enable"
|
|
set user "Singprod5" uid 45
|
|
set user "Singprod5" ike-id u-fqdn "Singprod5@eastnets.com" share-limit 1
|
|
set user "Singprod5" type ike xauth
|
|
set user "Singprod5" remote ippool "Singtel-Users-Pool"
|
|
set user "Singprod5" password "cCWzK+IzNCCcgmsAbICpeWeUJinL7rjqEQ=="
|
|
unset user "Singprod5" type auth
|
|
set user "Singprod5" "enable"
|
|
set user "VAntonio" uid 67
|
|
set user "VAntonio" ike-id u-fqdn "VAntonio@eastnets.com" share-limit 1
|
|
set user "VAntonio" type ike xauth
|
|
set user "VAntonio" remote ippool "en.More-LVL3-Pool"
|
|
set user "VAntonio" password "Nv4HYtSTNGLLjwsCgLCCdGsELAnxu6Zpeg=="
|
|
unset user "VAntonio" type auth
|
|
set user "VAntonio" "enable"
|
|
set user "ZNassif" uid 71
|
|
set user "ZNassif" ike-id u-fqdn "ZNassif@eastnets.com" share-limit 1
|
|
set user "ZNassif" type ike xauth
|
|
set user "ZNassif" remote ippool "en.More-LVL3-Pool"
|
|
set user "ZNassif" password "E0/5H3PfNxr4MesyjhC59qdYI5ngFcFzXw=="
|
|
unset user "ZNassif" type auth
|
|
set user "ZNassif" "enable"
|
|
set user "aataedwan" uid 17
|
|
set user "aataedwan" ike-id u-fqdn "aataedwan@eastnets.com" share-limit 1
|
|
set user "aataedwan" type ike xauth
|
|
set user "aataedwan" remote ippool "ensb_mgmt_pool"
|
|
set user "aataedwan" password "wdzMMaaVNsrD6csbgOCaAWgKbsn76XpakQ=="
|
|
unset user "aataedwan" type auth
|
|
set user "aataedwan" "enable"
|
|
set user "adesear" uid 9
|
|
set user "adesear" ike-id u-fqdn "adesear@eastnets.com" share-limit 1
|
|
set user "adesear" type ike xauth
|
|
set user "adesear" remote ippool "ensb_mgmt_pool"
|
|
set user "adesear" password "ncmSPFS2NFED/usSAcC20nxNz1nHj15qzA=="
|
|
unset user "adesear" type auth
|
|
set user "adesear" "enable"
|
|
set user "aibrahim" uid 1
|
|
set user "aibrahim" ike-id u-fqdn "aibrahim@eastnets.com" share-limit 1
|
|
set user "aibrahim" type ike xauth
|
|
set user "aibrahim" password "v/+gad1dNno9Ros+HmCsUeoBF1nDSv8Aew=="
|
|
unset user "aibrahim" type auth
|
|
set user "aibrahim" "enable"
|
|
set user "ajaber" uid 35
|
|
set user "ajaber" ike-id u-fqdn "ajaber@eastnets.com" share-limit 1
|
|
set user "ajaber" type ike xauth
|
|
set user "ajaber" remote ippool "finmex_mgmt_pool"
|
|
set user "ajaber" password "iscut//ZNwITwDsfXQCpUAkNKsn4oEeJtA=="
|
|
unset user "ajaber" type auth
|
|
set user "ajaber" "enable"
|
|
set user "asalameh" uid 34
|
|
set user "asalameh" ike-id u-fqdn "asalameh@eastnets.com" share-limit 1
|
|
set user "asalameh" type ike xauth
|
|
set user "asalameh" remote ippool "ensb_mgmt_pool"
|
|
set user "asalameh" password "fdH9+KorNuSOuGsFSJC/s7PNhHnt+e0rdw=="
|
|
unset user "asalameh" type auth
|
|
set user "asalameh" "enable"
|
|
set user "bics-test" uid 26
|
|
set user "bics-test" ike-id u-fqdn "bics@eastnets.com" share-limit 1
|
|
set user "bics-test" type ike xauth
|
|
set user "bics-test" remote ippool "ensb_mgmt_pool"
|
|
set user "bics-test" password "cNdhQobnN8063msQbDCQQQOMpjnCEWLLbg=="
|
|
unset user "bics-test" type auth
|
|
set user "bics-test" "enable"
|
|
set user "dgradinarov" uid 5
|
|
set user "dgradinarov" ike-id u-fqdn "dgradinarov@eastnets.com" share-limit 1
|
|
set user "dgradinarov" type ike xauth
|
|
set user "dgradinarov" remote ippool "ensb_mgmt_pool"
|
|
set user "dgradinarov" password "vvDEinpgNT9CXssBSNCnOkOaFyncE256TQ=="
|
|
unset user "dgradinarov" type auth
|
|
set user "dgradinarov" "enable"
|
|
set user "emagsombol" uid 32
|
|
set user "emagsombol" ike-id u-fqdn "emagsombol@eastnets.com" share-limit 1
|
|
set user "emagsombol" type ike xauth
|
|
set user "emagsombol" remote ippool "cs_support_pool"
|
|
set user "emagsombol" password "1Jg7ZdNlNAeNVMsrDVCfdNArsgnPu+Ur1g=="
|
|
unset user "emagsombol" type auth
|
|
set user "emagsombol" "enable"
|
|
set user "finmex" uid 18
|
|
set user "finmex" ike-id u-fqdn "finmex@eastnets.com" share-limit 1
|
|
set user "finmex" type ike xauth
|
|
set user "finmex" remote ippool "finmex_mgmt_pool"
|
|
set user "finmex" password "c7q/STW4NeRmIfs5E5Ca2wAHLin0rgjufg=="
|
|
unset user "finmex" type auth
|
|
set user "finmex" "enable"
|
|
set user "finmex_mgmt" uid 19
|
|
set user "finmex_mgmt" type xauth
|
|
set user "finmex_mgmt" remote ippool "finmex_mgmt_pool"
|
|
set user "finmex_mgmt" password "bV7HhEhyNPukAzskjkCIk6m/vOntqHqMEg=="
|
|
unset user "finmex_mgmt" type auth
|
|
set user "finmex_mgmt" "enable"
|
|
set user "gruiz" uid 13
|
|
set user "gruiz" ike-id u-fqdn "gruiz@eastnets.com" share-limit 1
|
|
set user "gruiz" type ike xauth
|
|
set user "gruiz" remote ippool "ensb_mgmt_pool"
|
|
set user "gruiz" password "2VU35rbuN1kRbosdHeCMUhjQNonobo8Rjg=="
|
|
unset user "gruiz" type auth
|
|
set user "gruiz" "enable"
|
|
set user "hkharbat" uid 33
|
|
set user "hkharbat" ike-id u-fqdn "hkharbat@eastnets.com" share-limit 1
|
|
set user "hkharbat" type ike xauth
|
|
set user "hkharbat" remote ippool "ensb_mgmt_pool"
|
|
set user "hkharbat" password "jkZsfUMqNw3yCTsY0tCn4yh/ubnLaYThlQ=="
|
|
unset user "hkharbat" type auth
|
|
set user "hkharbat" "enable"
|
|
set user "juy" uid 6
|
|
set user "juy" ike-id u-fqdn "juy@eastnets.com" share-limit 1
|
|
set user "juy" type ike xauth
|
|
set user "juy" remote ippool "ensb_mgmt_pool"
|
|
set user "juy" password "0a7W6+VaNXRvUvsD00CcXT+ZP+n5VIjnfQ=="
|
|
unset user "juy" type auth
|
|
set user "juy" "enable"
|
|
set user "juy_dxb" uid 10
|
|
set user "juy_dxb" ike-id u-fqdn "juy_dxb@eastnets.com" share-limit 1
|
|
set user "juy_dxb" type auth ike
|
|
set user "juy_dxb" password "gj2vh2QENJ91+tsbPACj4lUeibnv57s5CQ=="
|
|
set user "juy_dxb" "enable"
|
|
set user "kbaluyot" uid 12
|
|
set user "kbaluyot" ike-id u-fqdn "kbaluyot@eastnets.com" share-limit 1
|
|
set user "kbaluyot" type ike xauth
|
|
set user "kbaluyot" remote ippool "ensb_mgmt_pool"
|
|
set user "kbaluyot" password "AxvooJ3KNjxY59sZ4JCL0/yHs9n3slcAnA=="
|
|
unset user "kbaluyot" type auth
|
|
set user "kbaluyot" "enable"
|
|
set user "kpurswani" uid 36
|
|
set user "kpurswani" ike-id u-fqdn "kpurswani@eastnets.com" share-limit 1
|
|
set user "kpurswani" type ike xauth
|
|
set user "kpurswani" remote ippool "finmex_mgmt_pool"
|
|
set user "kpurswani" password "9ePQfiUhNXkNynsNq8C7/zWhCJn0o+XMoQ=="
|
|
unset user "kpurswani" type auth
|
|
set user "kpurswani" "enable"
|
|
set user "msaeed" uid 20
|
|
set user "msaeed" ike-id u-fqdn "msaeed@eastnets.com" share-limit 1
|
|
set user "msaeed" type ike xauth
|
|
set user "msaeed" remote ippool "ensb_mgmt_pool"
|
|
set user "msaeed" password "LmIQJQ8eNIwoC7sUSrCLFFuOwSn1zhebww=="
|
|
unset user "msaeed" type auth
|
|
set user "msaeed" "enable"
|
|
set user "mserhan" uid 16
|
|
set user "mserhan" ike-id u-fqdn "mserhan@eastnets.com" share-limit 1
|
|
set user "mserhan" type ike xauth
|
|
set user "mserhan" remote ippool "unirisx_mgmt_pool"
|
|
set user "mserhan" password "mx3gKAfgN/cmDQsWtWCwCPYHaynhJbjLuA=="
|
|
unset user "mserhan" type auth
|
|
set user "mserhan" "enable"
|
|
set user "pharos" uid 14
|
|
set user "pharos" ike-id u-fqdn "pharos@eastnets.com" share-limit 1
|
|
set user "pharos" type ike xauth
|
|
set user "pharos" remote ippool "unirisx_pharos_pool"
|
|
set user "pharos" password "uSxCyKEeNAfoVcseZiCWVcoBWPnzz/7vuw=="
|
|
unset user "pharos" type auth
|
|
set user "pharos" "enable"
|
|
set user "pharos01" uid 15
|
|
set user "pharos01" ike-id u-fqdn "pharos01@eastnets.com" share-limit 1
|
|
set user "pharos01" type ike xauth
|
|
set user "pharos01" remote ippool "unirisx_pharos_pool"
|
|
set user "pharos01" password "pfWhtcayNTlBVEs0FhCm3+AOGznmkJPZmg=="
|
|
unset user "pharos01" type auth
|
|
set user "pharos01" "enable"
|
|
set user "preethypu" uid 31
|
|
set user "preethypu" ike-id u-fqdn "preethypu@eastnets.com" share-limit 1
|
|
set user "preethypu" type ike xauth
|
|
set user "preethypu" remote ippool "cs_support_pool"
|
|
set user "preethypu" password "ZI1so/6bNAFIDXs6F/CTV/ruSFn+hXAefA=="
|
|
unset user "preethypu" type auth
|
|
set user "preethypu" "enable"
|
|
set user "sw-test" uid 53
|
|
set user "sw-test" ike-id u-fqdn "sw-test@eastnets.com" share-limit 1
|
|
set user "sw-test" type ike xauth
|
|
set user "sw-test" remote ippool "sw-support-pool"
|
|
set user "sw-test" password "yMFERGviN1mewUsvNiCKb0jHlBnS3qpQ7w=="
|
|
unset user "sw-test" type auth
|
|
set user "sw-test" "enable"
|
|
set user "temp" uid 7
|
|
set user "temp" ike-id u-fqdn "temp@eastnets.com" share-limit 1
|
|
set user "temp" type ike xauth
|
|
set user "temp" password "PO/tTJj4NU7NRGsUtVC7NpZIgHnO6odOFw=="
|
|
unset user "temp" type auth
|
|
set user "temp" "enable"
|
|
set user "test" uid 29
|
|
set user "test" ike-id u-fqdn "test@eastnets.com" share-limit 1
|
|
set user "test" type ike xauth
|
|
set user "test" remote ippool "finmex_mgmt_pool"
|
|
set user "test" password "j/KW4ZUhNmPymvsrLLCqgDNkYrnfb1NY/A=="
|
|
unset user "test" type auth
|
|
set user "test" "enable"
|
|
set user "tswaity" uid 64
|
|
set user "tswaity" ike-id u-fqdn "tswaity@eastnets.com" share-limit 1
|
|
set user "tswaity" type ike xauth
|
|
set user "tswaity" remote ippool "finmex_mgmt_pool"
|
|
set user "tswaity" password "OYGrIzauN7rcNWss8MCRs/fUkCnwEDuTfw=="
|
|
unset user "tswaity" type auth
|
|
set user "tswaity" "enable"
|
|
set user "unirisx" uid 8
|
|
set user "unirisx" ike-id u-fqdn "unirisx@eastnets.com" share-limit 1
|
|
set user "unirisx" type ike xauth
|
|
set user "unirisx" remote ippool "unirisx_mgmt_pool"
|
|
set user "unirisx" password "vkHJY2ldNwwnXWsfc7C6CEZ2fmnKI21dcA=="
|
|
unset user "unirisx" type auth
|
|
set user "unirisx" "enable"
|
|
set user "vfolloso" uid 30
|
|
set user "vfolloso" ike-id u-fqdn "vfolloso@eastnets.com" share-limit 1
|
|
set user "vfolloso" type ike xauth
|
|
set user "vfolloso" remote ippool "cs_support_pool"
|
|
set user "vfolloso" password "C6CbB8cHNMqpHIs7cUCCcuOPkknlavem1Q=="
|
|
unset user "vfolloso" type auth
|
|
set user "vfolloso" "enable"
|
|
set user-group "Dialup_group" id 3
|
|
set user-group "Dialup_group" location external
|
|
set user-group "Dialup_group" type xauth
|
|
set user-group "bicstest" id 10
|
|
set user-group "bicstest" user "bics-test"
|
|
set user-group "cs_support_group" id 12
|
|
set user-group "cs_support_group" user "emagsombol"
|
|
set user-group "cs_support_group" user "juy_dxb"
|
|
set user-group "cs_support_group" user "preethypu"
|
|
set user-group "cs_support_group" user "vfolloso"
|
|
set user-group "en.More-LVL1-Group" id 19
|
|
set user-group "en.More-LVL2-Group" id 20
|
|
set user-group "en.More-LVL3-Group" id 18
|
|
set user-group "en.More-LVL3-Group" user "EMagsombol"
|
|
set user-group "en.More-LVL3-Group" user "KShahzad"
|
|
set user-group "en.More-LVL3-Group" user "LAbuezz"
|
|
set user-group "en.More-LVL3-Group" user "PPU"
|
|
set user-group "en.More-LVL3-Group" user "SJaber"
|
|
set user-group "en.More-LVL3-Group" user "VAntonio"
|
|
set user-group "en.More-LVL3-Group" user "ZNassif"
|
|
set user-group "en.More-LVL4-Group" id 21
|
|
set user-group "ensb_mgmt_group" id 1
|
|
set user-group "ensb_mgmt_group" user "aataedwan"
|
|
set user-group "ensb_mgmt_group" user "adesear"
|
|
set user-group "ensb_mgmt_group" user "juy"
|
|
set user-group "ensb_mgmt_group" user "msaeed"
|
|
set user-group "finmex_mgmt_group" id 7
|
|
set user-group "finmex_mgmt_group" user "ARousan"
|
|
set user-group "finmex_mgmt_group" user "SQasim"
|
|
set user-group "finmex_mgmt_group" user "ajaber"
|
|
set user-group "finmex_mgmt_group" user "finmex"
|
|
set user-group "finmex_mgmt_group" user "finmex_mgmt"
|
|
set user-group "finmex_mgmt_group" user "kpurswani"
|
|
set user-group "finmex_mgmt_group" user "test"
|
|
set user-group "finmex_mgmt_group" user "tswaity"
|
|
set user-group "singtel-users-group" id 16
|
|
set user-group "singtel-users-group" user "Singprod1"
|
|
set user-group "singtel-users-group" user "Singprod2"
|
|
set user-group "singtel-users-group" user "Singprod3"
|
|
set user-group "singtel-users-group" user "Singprod4"
|
|
set user-group "singtel-users-group" user "Singprod5"
|
|
set user-group "sw-support-group" id 15
|
|
set user-group "sw-support-group" user "SW-AAbuhijleh"
|
|
set user-group "sw-support-group" user "SW-AEdwan"
|
|
set user-group "sw-support-group" user "SW-AEdwan2"
|
|
set user-group "sw-support-group" user "SW-FTawaha"
|
|
set user-group "sw-support-group" user "SW-MAQatanany"
|
|
set user-group "sw-support-group" user "SW-MSalameh"
|
|
set user-group "sw-support-group" user "SW-RDevilla"
|
|
set user-group "sw-support-group" user "SW-SBKalahaf"
|
|
set user-group "sw-support-group" user "SW-SQasim"
|
|
set user-group "sw-support-group" user "kbaluyot"
|
|
set user-group "temp_group" id 4
|
|
set user-group "temp_group" user "temp"
|
|
set user-group "unirisx_mgmt_group" id 2
|
|
set user-group "unirisx_mgmt_group" user "mserhan"
|
|
set user-group "unirisx_mgmt_group" user "unirisx"
|
|
set user-group "unirisx_pharos_group" id 6
|
|
set user-group "unirisx_pharos_group" user "pharos"
|
|
set user-group "unirisx_pharos_group" user "pharos01"
|
|
set user-group "us_mgmt_group" id 5
|
|
set user-group "us_mgmt_group" user "asalameh"
|
|
set user-group "us_mgmt_group" user "hkharbat"
|
|
set crypto-policy
|
|
exit
|
|
set ike gateway "GW_ENSBPK_ISDN" address 192.168.247.7 Main outgoing-interface "ethernet0/1" preshare "3R8lQyNQNf9CFVsXRxCrDk9EPXnVvJ//Tx4FqlOfiv+2G0E1jpDJ4ME=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_ENSBPK" address 202.63.216.20 Main outgoing-interface "ethernet0/2" preshare "SBI+YdTUNmNTOqsYX7CGiavFOpnF3MkG7nez9O8BGYq7l0bjJUEP/Ug=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_PTSAAEAA_LL" address 213.132.40.101 id "PTSAAEAA@eastnets.com" Aggr outgoing-interface "ethernet0/2" preshare "KTTnXomfNfbE2JsFaMCYtFc22gnicYPKlT94/ZupwB0/UVNf8pe83ZQ=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_PTSAAEAA_ISDN" address 0.0.0.0 id "PTSAAEAA@eastnets.com" Aggr outgoing-interface "ethernet0/1" preshare "cReD8Pk0N4fxCisvsVCEuk8nhzngsiMoresEY8S2ezJvO89mM07um4g=" proposal "pre-g2-3des-md5"
|
|
unset ike gateway "GW_PTSAAEAA_ISDN" nat-traversal
|
|
set ike gateway "GW_KHYBPKKA_LL" address 210.2.139.34 Main outgoing-interface "ethernet0/2" preshare "q0mHyIkMNKVvoMswXCCuqbPma4ngAEdmS1nhzal/xjExmAEIBTAK1rc=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_KHYBPKKA_ISDN" address 0.0.0.0 id "KHYBPKKA@eastnets.com" Aggr outgoing-interface "ethernet0/1" preshare "vECQId6kNTf8qIsqrUChh9BSlunBejxlo6OC8sJsu1a+dPz7bwD710w=" proposal "pre-g2-3des-md5"
|
|
unset ike gateway "GW_KHYBPKKA_ISDN" nat-traversal
|
|
set ike gateway "GW_AIINPKKA_LL" address 203.130.2.203 Main outgoing-interface "ethernet0/2" preshare "XX379lLUNEUZicsIdsCoNyVtj4nzVKdd9/wdBBIebBKxXXzLsEt3URA=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_AIINPKKA_ISDN" address 0.0.0.0 id "AIINPKKA@eastnets.com" Aggr outgoing-interface "ethernet0/1" preshare "puGntBYVNGyGrtsHv0CyWoOwT9nCT6AX5Lli4kAPEp9xqShQRUqcNrk=" proposal "pre-g2-3des-md5"
|
|
unset ike gateway "GW_AIINPKKA_ISDN" nat-traversal
|
|
set ike gateway "GW_BKIPPKKA_LL" address 210.2.139.58 Main outgoing-interface "ethernet0/2" preshare "tNjGsQCRNrLiiTsFXvCE7s+dFSn6w73wAqtrmFsT/p2Iyz2q8lL+OC4=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_BKIPPKKA_ISDN" address 0.0.0.0 id "BKIPPKKA@eastnets.com" Aggr outgoing-interface "ethernet0/1" preshare "uSLzqz3/NYMZr3sUbnCX+V83ThnTzLrwaTKXb9dltW5TdL7Qdm3Fv8I=" proposal "pre-g2-3des-md5"
|
|
unset ike gateway "GW_BKIPPKKA_ISDN" nat-traversal
|
|
set ike gateway "GW_PLCOPKKA_LL" address 202.44.85.229 Main outgoing-interface "ethernet0/2" preshare "++5SdQjeNMLwQXsi+KCQnJw9cenWfQnh4bkvz7QMIrSd5oRFPIRylTg=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_PLCOPKKA_ISDN" address 0.0.0.0 id "PLCOPKKA@eastnets.com" Aggr outgoing-interface "ethernet0/1" preshare "EcDDa07pNuKgZzsEkMCkfubSr+nZR8Z/a2tIT1yK+wAPLpyluCs4S50=" proposal "pre-g2-3des-md5"
|
|
unset ike gateway "GW_PLCOPKKA_ISDN" nat-traversal
|
|
set ike gateway "GW_DBHDPKKA_LL" address 203.101.171.34 Main outgoing-interface "ethernet0/2" preshare "1S87JSiKNR0LUws770CHi+J7OanI2eD3zuE2HvYyUmbWTFTYL5ss52E=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_DBHDPKKA_ISDN" address 0.0.0.0 id "DBHDPKKA@eastnets.com" Aggr outgoing-interface "ethernet0/1" preshare "QUCty03+NIeM1NsUnGC+KgyLXKn9xZICrrIZQuuk9O+xJnkU+qpavnM=" proposal "pre-g2-3des-md5"
|
|
unset ike gateway "GW_DBHDPKKA_ISDN" nat-traversal
|
|
set ike gateway "GW_FDIBPKKA_LL" address 202.88.39.45 Main outgoing-interface "ethernet0/2" preshare "7+9y90XrNRlaZ9ssS2CgQHMVHYng0UmR+iPoVAFZmESTrnUDxmGnhCc=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_FDIBPKKA_ISDN" address 0.0.0.0 id "FDIBPKKA@eastnets.com" Aggr outgoing-interface "ethernet0/1" preshare "KknTZ1FnN7AUvKsHF5CeikgmIXnRwENHnYOc6pajYy6xAbuPm7QgOH8=" proposal "pre-g2-3des-md5"
|
|
unset ike gateway "GW_FDIBPKKA_ISDN" nat-traversal
|
|
set ike gateway "GW_FAYSPKKA_LL" address 125.209.98.178 Main outgoing-interface "ethernet0/2" preshare "Ue1Gq+A+NsqgIvsDZUCdIrR4PnndqPiyUx5Hw3D89t8DomUjG5m+mLo=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_FAYSPKKA_ISDN" address 0.0.0.0 id "FAYSPKKA@eastnets.com" Aggr outgoing-interface "ethernet0/1" preshare "zz+w5HIzNkmz3csO7ECqv4VPNGn+xKmGOOYmckEHnLxlMqe4Iaq6qRk=" proposal "pre-g2-3des-md5"
|
|
unset ike gateway "GW_FAYSPKKA_ISDN" nat-traversal
|
|
set ike gateway "GW_NIBPPKKA_LL" address 124.29.205.107 Main outgoing-interface "ethernet0/2" preshare "Cz7LpsRZN0YDlws8qnCFebX7l/neGQkFZ1GRxt9juEgQBnRIt5O1KyI=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_NIBPPKKA_ISDN" address 0.0.0.0 id "NIBPPKKA@eastnets.com" Aggr outgoing-interface "ethernet0/1" preshare "rXORMywtN8wz8qsOk/CsRbS9iin7VCdUgNrSULk5Vi4PbJkrK2KUtSI=" proposal "pre-g2-3des-md5"
|
|
unset ike gateway "GW_NIBPPKKA_ISDN" nat-traversal
|
|
set ike gateway "GW_US_FEBKUS6LLA1_SAAS_LL" address 71.158.80.172 Main outgoing-interface "ethernet0/2" preshare "3mUyWtfoNRfII0sUXACOYLi+nznvKmuFjnCwvcA/9ik+GeX4lAFm2RM=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_US_FEBKUS6LLA2_SAAS_LL" address 71.158.80.173 Main outgoing-interface "ethernet0/2" preshare "/ssdQ/H8NCq/rqs9FzCtrCS/K3nFVyMerLlLWlDWWA2EDAfwmlWptao=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_US_FEBKUS6LIRV_SAAS_LL" address 12.9.145.231 Main outgoing-interface "ethernet0/2" preshare "v+gljqyvNL3f6csKVQC9Gk+XFPnfG2nLSSaFDsl29UJOqWW3sOAn0TE=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_MEZNPKKA_LL" address 125.209.91.19 Main outgoing-interface "ethernet0/2" preshare "8Mq6BNxmNN8pN3srkkC4HTGVDFnktMkXdcOssyEy7HAKDRkG1QeKYyU=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_MEZNPKKA_ISDN" address 0.0.0.0 id "MEZNPKKA@eastnets.com" Aggr outgoing-interface "ethernet0/1" preshare "cTlvCxltNuixZ3sfwYCIPfFvOJneaUTh4Xzuwz7XIyV+cGuUDVbaJE4=" proposal "pre-g2-3des-md5"
|
|
unset ike gateway "GW_MEZNPKKA_ISDN" nat-traversal
|
|
set ike gateway "GW_FWOMPKKA_LL" address 124.29.205.6 Main outgoing-interface "ethernet0/2" preshare "L600zYrnNS4b/AsveHC2A6L2yXnjEdEFk74DiVuL+8X6ZBj+L4pRohA=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_FWOMPKKA_ISDN" address 0.0.0.0 id "FWOMPKKA@eastnets.com" Aggr outgoing-interface "ethernet0/1" preshare "G9i2bNXWNeUMS/s0uzClBzi0Lin/6v+g1sWRDEcNWIXusNZSxVpZRLk=" proposal "pre-g2-3des-md5"
|
|
unset ike gateway "GW_FWOMPKKA_ISDN" nat-traversal
|
|
set ike gateway "GW_ENSBUS" address 209.123.80.7 Main outgoing-interface "ethernet0/2" preshare "4rTUk1MXNkrTsfsidpCXBGQa9rnCK493oApgpplG6EizYQC1j5+Lnes=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_FAYSPKKA_DR_LL" address 58.27.253.14 Main outgoing-interface "ethernet0/2" preshare "0XGZVpjSN18nT1sDypCYNCdXScnEFPdVdiWqP3foYFtE4DHtCRmadzo=" proposal "pre-g2-3des-md5" "pre-g2-aes128-sha"
|
|
set ike gateway "GW_FAYSPKKA_DR_LL" cert peer-ca all
|
|
set ike gateway "GW_UNIRISX_DIALIN" dialup "unirisx_mgmt_group" Aggr outgoing-interface "ethernet0/2" preshare "EhLFyzGsNDdLBKsxFHCJJAtbpynyfEGu4A==" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_UNIRISX_DIALIN" nat-traversal udp-checksum
|
|
set ike gateway "GW_UNIRISX_DIALIN" nat-traversal keepalive-frequency 5
|
|
set ike gateway "GW_UNIRISX_DIALIN" xauth
|
|
set ike gateway "GW_UNIRISX_DIALIN" xauth server auth-method chap pap
|
|
unset ike gateway "GW_UNIRISX_DIALIN" xauth do-edipi-auth
|
|
set ike gateway "GW_ENSB_MGMT_DIALIN(UNIRISX)" dialup "ensb_mgmt_group" Aggr outgoing-interface "ethernet0/2" preshare "V3SPR3ziNDVefSsfDnCV5ctS5YnE6YnL4hfD6AEH0Kwqs8TqUoaMARg=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_ENSB_MGMT_DIALIN(UNIRISX)" nat-traversal udp-checksum
|
|
set ike gateway "GW_ENSB_MGMT_DIALIN(UNIRISX)" nat-traversal keepalive-frequency 5
|
|
set ike gateway "GW_ENSB_MGMT_DIALIN(UNIRISX)" xauth
|
|
set ike gateway "GW_ENSB_MGMT_DIALIN(UNIRISX)" xauth server auth-method chap pap
|
|
unset ike gateway "GW_ENSB_MGMT_DIALIN(UNIRISX)" xauth do-edipi-auth
|
|
set ike gateway "GW_US_MGMT_DIALIN" dialup "us_mgmt_group" Aggr outgoing-interface "ethernet0/2" preshare "gu5E6btINzLn8isFKACCdX5FH8nTU+833Mbl8k0kJjG0ChOeaDvZ9A8=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_US_MGMT_DIALIN" nat-traversal udp-checksum
|
|
set ike gateway "GW_US_MGMT_DIALIN" nat-traversal keepalive-frequency 5
|
|
set ike gateway "GW_US_MGMT_DIALIN" xauth
|
|
set ike gateway "GW_US_MGMT_DIALIN" xauth server auth-method chap pap
|
|
unset ike gateway "GW_US_MGMT_DIALIN" xauth do-edipi-auth
|
|
set ike gateway "GW_ENTEST_ISDN" address 0.0.0.0 id "ENTEST@eastnets.com" Aggr outgoing-interface "ethernet0/1" preshare "QABHootgN2M9YjsxfQCyjw/F7envE348PQ==" proposal "pre-g2-3des-md5"
|
|
unset ike gateway "GW_ENTEST_ISDN" nat-traversal
|
|
set ike gateway "GW_US_IDXDUS33_SAAS_LL" address 65.102.232.108 Main outgoing-interface "ethernet0/2" preshare "gjkTMd69N4C7KxsVgPCzG7CWYMneIb/WVrS7/xNAix7NDLBAWDHEmPo=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_UNIRISX_PHAROS_DIALIN" dialup "unirisx_pharos_group" Aggr outgoing-interface "ethernet0/2" preshare "PNn+61dNNzvuU+sSZJCxwBnoOPnlskGlRw==" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_UNIRISX_PHAROS_DIALIN" nat-traversal udp-checksum
|
|
set ike gateway "GW_UNIRISX_PHAROS_DIALIN" nat-traversal keepalive-frequency 5
|
|
set ike gateway "GW_UNIRISX_PHAROS_DIALIN" xauth
|
|
set ike gateway "GW_UNIRISX_PHAROS_DIALIN" xauth server auth-method chap pap
|
|
unset ike gateway "GW_UNIRISX_PHAROS_DIALIN" xauth do-edipi-auth
|
|
set ike gateway "GW_US_RBBCUS6L_SAAS_LL" address 12.236.105.37 Main outgoing-interface "ethernet0/2" preshare "ptKLYJLmNJzHdzsjvDCCtCfusCnJNjllfvDQEw1f024wyxMXeZtjMAI=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_BAHLPKKA_GWCP_LL" address 202.125.136.108 Main outgoing-interface "ethernet0/2" preshare "OePZgOrJNyMdyvsANyCxntpm+Ynf4XXNBxdBDO11AsYt4Gad1Bwim8k=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_BAHLPKKA_DRCP_LL" address 117.20.16.142 Main outgoing-interface "ethernet0/2" preshare "QRhITC/qNsl/Rps72PCH+de2RlnJZhQI1xsW8aDtsSj02zEgqp3RzwQ=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_FINMEX_DIALIN" dialup "finmex_mgmt_group" Aggr outgoing-interface "ethernet0/2" preshare "uoeOvk6FNeLSdCsOQnCqTJ3NvZnxOsPqYS93L8eKIRssryxIlTGvbI8=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_FINMEX_DIALIN" nat-traversal udp-checksum
|
|
set ike gateway "GW_FINMEX_DIALIN" nat-traversal keepalive-frequency 5
|
|
set ike gateway "GW_FINMEX_DIALIN" xauth
|
|
set ike gateway "GW_FINMEX_DIALIN" xauth server auth-method chap pap
|
|
unset ike gateway "GW_FINMEX_DIALIN" xauth do-edipi-auth
|
|
set ike gateway "GW_TIDCKWKW_LL" address 62.150.82.143 Main outgoing-interface "ethernet0/2" preshare "1tyk9CLkNZWiSFsuncCA2fWODbn8dIBmmKyOtgygvrLkhRIMa3hWCiE=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_TIDCKWKW_LL_BACKUP" address 83.96.35.43 Main outgoing-interface "ethernet0/2" preshare "yOfoM/M3Nk16D7sxdKC6h0gWihnSZagEKE+qzm8ybp7XMJNrTPa5Cr8=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_AIINPKKA_DRCP_LL" address 124.29.206.2 Main outgoing-interface "ethernet0/2" preshare "C1m+HzpSNW7TBOseTaCveY2nXInwP7bMLt6w/GQhpSGtk9gi0qOtyIs=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_AIINPKKA1_ISDN" address 0.0.0.0 id "AIINPKKA1@eastnets.com" Aggr outgoing-interface "ethernet0/1" preshare "XWqO67vAN1mrLtsY3VCDmwbL27nivavLNmC8Ucb6dFlqsyGnRb35M2o=" proposal "pre-g2-3des-md5"
|
|
unset ike gateway "GW_AIINPKKA1_ISDN" nat-traversal
|
|
set ike gateway "GW_AIINPKKA1_LL" address 124.29.205.226 Main outgoing-interface "ethernet0/2" preshare "RP7d3JP+Nm5qnJsZSnCq8LwBxLn9Ud4zk7ljsREpTBQZCcabY2cBm8c=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_US_GPSXUS55_SAAS_LL" address 66.60.96.242 Main outgoing-interface "ethernet0/2" preshare "b7i8CA+6N8SQtmsNKyCWSxX8fxnZS4SXsjnqQTcH2gQLlqM0mVwisCw=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_US_GPSXUS55DR_SAAS_LL" address 99.48.94.42 Main outgoing-interface "ethernet0/2" preshare "3/7XYA8FN2h3bdsESoCN1pdD1GnGyMb4RRFCpLCq8UZY3m5kdO5Kv6U=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_JSBLPKKA_LL" address 203.130.1.17 Main outgoing-interface "ethernet0/2" preshare "35IYVav+NAEazSsw6sCm4bpwQznAoQ7iKbfhwpT775Mk3azkwmLXfzI=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_JSBLPKKA_ISDN" address 0.0.0.0 id "JSBLPKKA@eastnets.com" Aggr outgoing-interface "ethernet0/1" preshare "bl1dw1yFNC2oWosMgkCkMW08JDnnDMu5FI5gETbwPx7c+yI5MBy+Lkg=" proposal "pre-g2-3des-md5"
|
|
unset ike gateway "GW_JSBLPKKA_ISDN" nat-traversal
|
|
set ike gateway "GW_ACBBUS6L_SAAS_LL" address 66.126.22.22 Main outgoing-interface "ethernet0/2" preshare "dCTO7aUXNJ9ibJsxMYCPX5JplLnRPfXgkRCv8nDOM27BnLW1cBUHvM8=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_SONEPKKA_LL" address 124.29.206.142 Main outgoing-interface "ethernet0/2" preshare "34CJEn8iNf7mqUsBZICN/2EOH5nkheQYJ6bS1g6gUTgjPDjZR1jCsyM=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_SONEPKKA_ISDN" address 0.0.0.0 id "SONEPKKA@eastnets.com" Aggr outgoing-interface "ethernet0/1" preshare "k2Nx3SomNVt4WVsadTCo1Av8tRnW6MEWAz9BiZyL3oF/xoiGLAuYi/k=" proposal "pre-g2-3des-md5"
|
|
unset ike gateway "GW_SONEPKKA_ISDN" nat-traversal
|
|
set ike gateway "GW_CAGPBMHM_LL1" address 216.249.35.244 Main outgoing-interface "ethernet0/2" preshare "+yYQ/GtFNni2pKsBdRCSEjr3d2n2qg+6VvoB+bltlmajbux/4WwYj6c=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "DC-JO-LL" address 77.245.10.172 Main outgoing-interface "ethernet0/2" preshare "1Eehh6VRNjt0LZsl92CRoy0d1AnXdp9DvVcJTbKMqVnVqWB8KwmfKIs=" proposal "pre-g2-3des-sha"
|
|
set ike gateway "GW_UNILPKKA_LL" address 103.247.124.141 Main outgoing-interface "ethernet0/2" preshare "QGMfA3buNz2FFVsGVPC+5enxPtnMwlEWZuTYGxRSWRLtd6Ekh1ytZuY=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_UNILPKKA_ISDN" address 0.0.0.0 id "UNILPKKA@eastnets.com" Aggr outgoing-interface "ethernet0/1" preshare "q5kl4B12Nb4z+hsdN9CN/LZz2ynQ5QHyd0t36cvNQFkx0TEnquZczuY=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_UNILPKKA_ISDN" nat-traversal udp-checksum
|
|
set ike gateway "GW_UNILPKKA_ISDN" nat-traversal keepalive-frequency 5
|
|
set ike gateway "NISLAEAD-FHMS-LL" address 213.132.56.215 Main outgoing-interface "ethernet0/2" preshare "3KT87/SpN4W3DBsNxeCv86bta+n9pbZxnY+S0a4rEm0IE3ePHqiw5ys=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_MEZNPKKA_DRCP_LL" address 58.27.253.251 Main outgoing-interface "ethernet0/2" preshare "lW93qsVHNkLSeGsRx2C1VouMY5nuS2GkrcrmTsQswJN10aw/SA2q8ig=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_NIBPPKKA_LL2" address 115.186.127.22 Main outgoing-interface "ethernet0/2" preshare "YatP7AM+NgxaNMsCerC3p1wqw5n1zbJsJtyuDsdSkaqCzyY/5L2JRUs=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_NIBPPKKA_DR_LL" address 203.101.168.5 Main outgoing-interface "ethernet0/2" preshare "lXNjC1DfNfVm2qssdWC0+pECLKn55TIz7vQcmWavL+AkxmwacOiyil8=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_NIBPPKKA_DR_ISDN" address 0.0.0.0 id "NIBPPKKA_DR@eastnets.com" Aggr outgoing-interface "ethernet0/1" preshare "UW7atDxPNx9t+1st6BCqQFCIHpnULuOfJPMTUDEV6cwJq8qDUoN/HXY=" proposal "pre-g2-3des-md5"
|
|
unset ike gateway "GW_NIBPPKKA_DR_ISDN" nat-traversal
|
|
set ike gateway "GW_CAGPBMHM_LL2" address 199.172.216.82 Main outgoing-interface "ethernet0/2" preshare "WTbwv0nENTZkZHsZ6NCo4hEOginUm5sggPZGhRDk8ao8pQBXTrwcHvY=" proposal "pre-g2-3des-sha"
|
|
set ike gateway "BICS-GATEWAY-LL" address 80.84.22.1 Main outgoing-interface "ethernet3/3" preshare "sAPvR3+ONfPKS2sEFICaJwVJsrngRzVWT2SRiWeyZ/K8p4vdORky+94=" proposal "pre-g2-3des-sha" "pre-g2-des-sha"
|
|
set ike gateway "bicstest1" dialup "bicstest" Aggr outgoing-interface "ethernet3/3" preshare "Bbz1lZHJNaUph6sqeAC2rc8/QInThEv0bQ==" proposal "pre-g2-3des-sha"
|
|
set ike gateway "bicstest1" nat-traversal udp-checksum
|
|
set ike gateway "bicstest1" nat-traversal keepalive-frequency 5
|
|
set ike gateway "bicstest1" xauth
|
|
unset ike gateway "bicstest1" xauth do-edipi-auth
|
|
set ike gateway "GW_CAGPBMHM_LL-DR1" address 66.55.120.245 Main outgoing-interface "ethernet0/2" preshare "/m/v/ci1NXTuX5sfSoCQ+oJIEYnfIWDohw8XAsKkmQbFBbz2dwiguec=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_ENSBNOC" address 80.227.254.242 Main outgoing-interface "ethernet0/2" preshare "WMD0Zy7iNAdtBns0HJCkOy+ujonhpCW+/TyCWpI5tywoEQEsDqlBP+w=" proposal "pre-g2-3des-sha"
|
|
set ike gateway "CS-SUPPORT-DIALIN" dialup "cs_support_group" Aggr outgoing-interface "ethernet0/2" preshare "Z/NinbYCNd6fansmPnC/FrUu71nJFsPrIg==" proposal "pre-g2-3des-sha"
|
|
set ike gateway "CS-SUPPORT-DIALIN" nat-traversal udp-checksum
|
|
set ike gateway "CS-SUPPORT-DIALIN" nat-traversal keepalive-frequency 0
|
|
set ike gateway "CS-SUPPORT-DIALIN" xauth
|
|
unset ike gateway "CS-SUPPORT-DIALIN" xauth do-edipi-auth
|
|
set ike gateway "GW_SAUDPKKA_GWCP_LL" address 58.27.246.186 Main outgoing-interface "ethernet0/2" preshare "wSFH+ESAN5MykIs+dtCVdcRqAwnsAEpX2M1upj3pF26k9BYrzG6ShWY=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_SAUDPKKA_DRCP_LL" address 58.27.246.194 Main outgoing-interface "ethernet0/2" preshare "clO1L6HANu/+Dvsyn4CsvkpTzSne3Vjb50AsHHRh8DlQe+pjNoZUwU0=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_BKIPPKKA_DRCP_LL" address 125.209.120.202 Main outgoing-interface "ethernet0/2" preshare "tNjGsQCRNrLiiTsFXvCE7s+dFSn6w73wAqtrmFsT/p2Iyz2q8lL+OC4=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_BKIPPKKA_DRCP_ISDN" address 0.0.0.0 id "BKIPPKKA_DRCP@eastnets.com" Aggr outgoing-interface "ethernet0/1" preshare "uSLzqz3/NYMZr3sUbnCX+V83ThnTzLrwaTKXb9dltW5TdL7Qdm3Fv8I=" proposal "pre-g2-3des-md5"
|
|
unset ike gateway "GW_BKIPPKKA_DRCP_ISDN" nat-traversal
|
|
set ike gateway "MoneyExpress-Gateway" address 213.154.75.226 Main outgoing-interface "ethernet3/3" preshare "2wl2fvvBNigoCUsnwyCVAyB1hen7NxXn4A==" proposal "pre-g2-aes128-sha"
|
|
set ike gateway "GW_BURJPKKA_DRCP_LL" address 202.147.191.34 Main outgoing-interface "ethernet0/2" preshare "cSNnVlceNdl4Qus4t1Cgz5ulqFnrSBgaIKHGhDfvdq3i8/XUc07Bltc=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "SW-SUPPORT-DIALIN" dialup "sw-support-group" Aggr outgoing-interface "ethernet0/2" preshare "x04jVf9fNXs92Zs1TBCqRnRwkNnxS6y3cSoUBoYs27EfZ0u0hz6Gcn4=" proposal "pre-g2-3des-sha"
|
|
set ike gateway "SW-SUPPORT-DIALIN" nat-traversal udp-checksum
|
|
set ike gateway "SW-SUPPORT-DIALIN" nat-traversal keepalive-frequency 5
|
|
set ike gateway "SW-SUPPORT-DIALIN" xauth
|
|
unset ike gateway "SW-SUPPORT-DIALIN" xauth do-edipi-auth
|
|
set ike gateway "GW_DUIBPKKA_DRCP_LL" address 202.163.69.3 Main outgoing-interface "ethernet0/2" preshare "aJhr8mlhNjHgYMs82nCDCwjWfsnMk3GWX7c0+rVXPRIVwW2/61w5nME=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_DUIBPKKA_DRCP_ISDN" address 0.0.0.0 id "DUIBPKKA@eastnets.com" Aggr outgoing-interface "ethernet0/1" preshare "sqQyyISJNlTVqysO0cCYIIFodynMnVjEm9u2zCk73plIcTb0ldXFal4=" proposal "pre-g2-3des-md5"
|
|
unset ike gateway "GW_DUIBPKKA_DRCP_ISDN" nat-traversal
|
|
set ike gateway "ENSB-TELEPIN-LL" address 202.40.237.158 Main outgoing-interface "ethernet0/2" preshare "hX04lnqWNrFubWsrIcCeXoKLF5npHExKGsmQxil9gXuAKH8NsMDTdBE=" proposal "pre-g2-3des-sha"
|
|
set ike gateway "SINGTEL-USERS-DIALIN" dialup "singtel-users-group" Aggr outgoing-interface "ethernet0/2" preshare "35NwqgeBNKn0Wns/O1CyOA0BfCnAdywVCfwbq1uQ6dJ0olcJc7HRY2Y=" proposal "pre-g2-3des-sha"
|
|
set ike gateway "SINGTEL-USERS-DIALIN" nat-traversal udp-checksum
|
|
set ike gateway "SINGTEL-USERS-DIALIN" nat-traversal keepalive-frequency 0
|
|
set ike gateway "SINGTEL-USERS-DIALIN" xauth
|
|
unset ike gateway "SINGTEL-USERS-DIALIN" xauth do-edipi-auth
|
|
set ike gateway "EEC_en.More-LL" address 0.0.0.0 id "EEC@en.More.com" Aggr outgoing-interface "ethernet3/3" preshare "0wkIUMycN1IbyasT64C3Wsg2+PnWUb5i6A==" proposal "pre-g2-3des-sha"
|
|
set ike gateway "EEC_en.More-LL" nat-traversal udp-checksum
|
|
set ike gateway "EEC_en.More-LL" nat-traversal keepalive-frequency 5
|
|
set ike gateway "EN-IT-LL" address 213.132.40.99 Main outgoing-interface "ethernet3/3" preshare "jVr/dyOBNlmtZiswcTCMNgq3V4nCMw8f33UlbN15S+f2Bv+ltK5GbJU=" proposal "pre-g2-3des-sha"
|
|
set ike gateway "en.More-LVL3-GW_Gp" dialup "en.More-LVL3-Group" Aggr outgoing-interface "ethernet0/2" preshare "wvoOsK9TNu/eETsxODC8uc4+cWn7zHM5uA==" proposal "pre-g2-3des-sha"
|
|
set ike gateway "en.More-LVL3-GW_Gp" nat-traversal udp-checksum
|
|
set ike gateway "en.More-LVL3-GW_Gp" nat-traversal keepalive-frequency 0
|
|
set ike gateway "en.More-LVL3-GW_Gp" xauth
|
|
set ike gateway "en.More-LVL3-GW_Gp" xauth server auth-method chap pap
|
|
unset ike gateway "en.More-LVL3-GW_Gp" xauth do-edipi-auth
|
|
set ike gateway "SMS-Global-Production-GW" address 203.89.199.148 Main outgoing-interface "ethernet3/3" preshare "uqGJ8i9rNX9GGns+iHCAHd6QYgnZMqbA+Q==" proposal "pre-g2-3des-sha"
|
|
set ike gateway "SMS-Global-DR-GW" address 59.167.123.81 Main outgoing-interface "ethernet3/3" preshare "Ay8GfoGqNiP08ss3sfCc7/uZBKnENtqJAg==" proposal "pre-g2-3des-sha"
|
|
set ike gateway "GW_NBPAPKKA_DRCP_LL" address 103.28.150.160 Main outgoing-interface "ethernet0/2" preshare "tPWM1cSwNn2wR9sUPwC7Al162Dnvf3q/bFilOa75sLzjSVGlYudeplE=" proposal "pre-g2-3des-md5"
|
|
set ike gateway "GW_NBPAPKKA_DRCP_LL" nat-traversal
|
|
set ike gateway "GW_NBPAPKKA_DRCP_LL" nat-traversal udp-checksum
|
|
set ike gateway "GW_NBPAPKKA_DRCP_LL" nat-traversal keepalive-frequency 0
|
|
set ike gateway "DBIS-TEST" address 196.201.198.163 Main outgoing-interface "ethernet0/2" preshare "n1wKqvBrNkPiclsvt6CjdjxpcHnJZzOytZQdsE5AtcnRy++qrK7vLfg=" proposal "pre-g2-3des-sha"
|
|
set ike gateway "DBIS-TEST" nat-traversal
|
|
set ike gateway "DBIS-TEST" nat-traversal udp-checksum
|
|
set ike gateway "DBIS-TEST" nat-traversal keepalive-frequency 0
|
|
set ike gateway "MEA_en.More-LL" address 0.0.0.0 id "MEA@en.More.com" Aggr outgoing-interface "ethernet3/3" preshare "0wkIUMycN1IbyasT64C3Wsg2+PnWUb5i6A==" proposal "pre-g2-3des-sha"
|
|
set ike gateway "MEA_en.More-LL" nat-traversal udp-checksum
|
|
set ike gateway "MEA_en.More-LL" nat-traversal keepalive-frequency 5
|
|
set ike respond-bad-spi 1
|
|
set ike ikev2 ike-sa-soft-lifetime 60
|
|
unset ike ikeid-enumeration
|
|
unset ike dos-protection
|
|
unset ipsec access-session enable
|
|
set ipsec access-session maximum 5000
|
|
set ipsec access-session upper-threshold 0
|
|
set ipsec access-session lower-threshold 0
|
|
set ipsec access-session dead-p2-sa-timeout 0
|
|
unset ipsec access-session log-error
|
|
unset ipsec access-session info-exch-connected
|
|
unset ipsec access-session use-error-log
|
|
set xauth default ippool "Default_Pool"
|
|
set vpn "VPN_ENSBPK_ISDN" gateway "GW_ENSBPK_ISDN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_ENSBPK_ISDN" monitor optimized
|
|
set vpn "VPN_ENSBPK_ISDN" id 0x19 bind interface tunnel.4
|
|
set vpn "VPN_ENSBPK" gateway "GW_ENSBPK" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_ENSBPK" monitor optimized rekey
|
|
set vpn "VPN_ENSBPK" id 0x83 bind interface tunnel.3
|
|
set vpn "VPN_PTSAAEAA_LL" gateway "GW_PTSAAEAA_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_PTSAAEAA_LL" monitor optimized rekey
|
|
set vpn "VPN_PTSAAEAA_LL" id 0x10 bind interface tunnel.1
|
|
set vpn "VPN_PTSAAEAA_ISDN" gateway "GW_PTSAAEAA_ISDN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_PTSAAEAA_ISDN" monitor optimized rekey
|
|
set vpn "VPN_PTSAAEAA_ISDN" id 0x13 bind interface tunnel.2
|
|
set vpn "VPN_KHYBPKAKA_LL" gateway "GW_KHYBPKKA_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_KHYBPKAKA_LL" monitor optimized rekey
|
|
set vpn "VPN_KHYBPKAKA_LL" id 0x106 bind interface tunnel.1
|
|
set vpn "VPN_KHYBPKKA_ISDN" gateway "GW_KHYBPKKA_ISDN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_KHYBPKKA_ISDN" monitor optimized rekey
|
|
set vpn "VPN_KHYBPKKA_ISDN" id 0x20 bind interface tunnel.2
|
|
set vpn "VPN_BKIPPKKA_LL" gateway "GW_BKIPPKKA_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_BKIPPKKA_LL" monitor optimized rekey
|
|
set vpn "VPN_BKIPPKKA_LL" id 0x21 bind interface tunnel.1
|
|
set vpn "VPN_BKIPPKKA_ISDN" gateway "GW_BKIPPKKA_ISDN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_BKIPPKKA_ISDN" monitor optimized rekey
|
|
set vpn "VPN_BKIPPKKA_ISDN" id 0x22 bind interface tunnel.2
|
|
set vpn "VPN_AIINPKKA_LL" gateway "GW_AIINPKKA_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_AIINPKKA_LL" monitor optimized rekey
|
|
set vpn "VPN_AIINPKKA_LL" id 0x5f bind interface tunnel.1
|
|
set vpn "VPN_AIINPKKA_ISDN" gateway "GW_AIINPKKA_ISDN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_AIINPKKA_ISDN" monitor optimized rekey
|
|
set vpn "VPN_AIINPKKA_ISDN" id 0x24 bind interface tunnel.2
|
|
set vpn "VPN_PLCOPKKA_LL" gateway "GW_PLCOPKKA_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_PLCOPKKA_LL" monitor optimized rekey
|
|
set vpn "VPN_PLCOPKKA_LL" id 0x61 bind interface tunnel.1
|
|
set vpn "VPN_PLCOPKKA_ISDN" gateway "GW_PLCOPKKA_ISDN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_PLCOPKKA_ISDN" monitor optimized rekey
|
|
set vpn "VPN_PLCOPKKA_ISDN" id 0x26 bind interface tunnel.2
|
|
set vpn "VPN_DBHDPKKA_LL" gateway "GW_DBHDPKKA_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_DBHDPKKA_LL" monitor optimized rekey
|
|
set vpn "VPN_DBHDPKKA_LL" id 0x85 bind interface tunnel.1
|
|
set vpn "VPN_DBHDPKKA_ISDN" gateway "GW_DBHDPKKA_ISDN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_DBHDPKKA_ISDN" monitor optimized rekey
|
|
set vpn "VPN_DBHDPKKA_ISDN" id 0x28 bind interface tunnel.2
|
|
set vpn "VPN_FAYSPKKA_LL" gateway "GW_FAYSPKKA_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_FAYSPKKA_LL" monitor optimized rekey
|
|
set vpn "VPN_FAYSPKKA_LL" id 0x29 bind interface tunnel.1
|
|
set vpn "VPN_FAYSPKKA_ISDN" gateway "GW_FAYSPKKA_ISDN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_FAYSPKKA_ISDN" monitor optimized rekey
|
|
set vpn "VPN_FAYSPKKA_ISDN" id 0x2a bind interface tunnel.2
|
|
set vpn "VPN_FDIBPKKA_LL" gateway "GW_FDIBPKKA_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_FDIBPKKA_LL" monitor optimized rekey
|
|
set vpn "VPN_FDIBPKKA_LL" id 0x54 bind interface tunnel.1
|
|
set vpn "VPN_FDIBPKKA_ISDN" gateway "GW_FDIBPKKA_ISDN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_FDIBPKKA_ISDN" monitor optimized rekey
|
|
set vpn "VPN_FDIBPKKA_ISDN" id 0x2c bind interface tunnel.2
|
|
set vpn "VPN_NIBPPKKA_LL" gateway "GW_NIBPPKKA_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_NIBPPKKA_LL" monitor optimized rekey
|
|
set vpn "VPN_NIBPPKKA_LL" id 0x99 bind interface tunnel.1
|
|
set vpn "VPN_NIBPPKKA_ISDN" gateway "GW_NIBPPKKA_ISDN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_NIBPPKKA_ISDN" monitor optimized rekey
|
|
set vpn "VPN_FEBKUS6LLA1_SAAS_LL" gateway "GW_US_FEBKUS6LLA1_SAAS_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_FEBKUS6LLA1_SAAS_LL" monitor rekey
|
|
set vpn "VPN_FEBKUS6LLA1_SAAS_LL" id 0x33 bind interface tunnel.11
|
|
set vpn "VPN_FEBKUS6LLA2_SAAS_LL" gateway "GW_US_FEBKUS6LLA2_SAAS_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_FEBKUS6LLA2_SAAS_LL" monitor rekey
|
|
set vpn "VPN_FEBKUS6LLA2_SAAS_LL" id 0x32 bind interface tunnel.11
|
|
set vpn "VPN_FEBKUS6LIRV_SAAS_LL" gateway "GW_US_FEBKUS6LIRV_SAAS_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_FEBKUS6LIRV_SAAS_LL" monitor optimized rekey
|
|
set vpn "VPN_FEBKUS6LIRV_SAAS_LL" id 0x34 bind interface tunnel.11
|
|
set vpn "VPN_MEZNPKKA_LL" gateway "GW_MEZNPKKA_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_MEZNPKKA_LL" monitor optimized rekey
|
|
set vpn "VPN_MEZNPKKA_LL" id 0x92 bind interface tunnel.1
|
|
set vpn "VPN_MEZNPKKA_ISDN" gateway "GW_MEZNPKKA_ISDN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_MEZNPKKA_ISDN" monitor optimized rekey
|
|
set vpn "VPN_MEZNPKKA_ISDN" id 0x36 bind interface tunnel.2
|
|
set vpn "VPN_FWOMPKKA_LL" gateway "GW_FWOMPKKA_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_FWOMPKKA_LL" monitor optimized rekey
|
|
set vpn "VPN_FWOMPKKA_LL" id 0x37 bind interface tunnel.1
|
|
set vpn "VPN_FWOMPKKA_ISDN" gateway "GW_FWOMPKKA_ISDN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_FWOMPKKA_ISDN" monitor optimized rekey
|
|
set vpn "VPN_FWOMPKKA_ISDN" id 0x38 bind interface tunnel.2
|
|
set vpn "VPN_ENSBUS" gateway "GW_ENSBUS" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_ENSBUS" monitor optimized rekey
|
|
set vpn "VPN_ENSBUS" id 0x47 bind interface tunnel.13
|
|
set vpn "VPN_FAYSPKKA_DR_LL" gateway "GW_FAYSPKKA_DR_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_FAYSPKKA_DR_LL" monitor optimized rekey
|
|
set vpn "VPN_FAYSPKKA_DR_LL" id 0x56 bind interface tunnel.1
|
|
set vpn "VPN_UNIRISX_DIALIN" gateway "GW_UNIRISX_DIALIN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_UNIRISX_DIALIN" monitor optimized rekey
|
|
set vpn "VPN_ENSB_MGMT_DIALIN(UNIRISX)" gateway "GW_ENSB_MGMT_DIALIN(UNIRISX)" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_ENSB_MGMT_DIALIN(UNIRISX)" monitor
|
|
set vpn "VPN_US_MGMT_DIALIN" gateway "GW_US_MGMT_DIALIN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_US_MGMT_DIALIN" monitor optimized rekey
|
|
set vpn "VPN_ENTEST_ISDN" gateway "GW_ENTEST_ISDN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_ENTEST_ISDN" id 0x66 bind interface tunnel.2
|
|
set vpn "VPN_IDXDUS33_SAAS_LL" gateway "GW_US_IDXDUS33_SAAS_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_IDXDUS33_SAAS_LL" monitor optimized rekey
|
|
set vpn "VPN_UNIRISX_PHAROS_DIALIN" gateway "GW_UNIRISX_PHAROS_DIALIN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_UNIRISX_PHAROS_DIALIN" monitor optimized rekey
|
|
set vpn "VPN_RBBCUS6L_SAAS_LL" gateway "GW_US_RBBCUS6L_SAAS_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_RBBCUS6L_SAAS_LL" monitor optimized rekey
|
|
set vpn "VPN_RBBCUS6L_SAAS_LL" id 0x70 bind interface tunnel.11
|
|
set vpn "VPN_BAHLPKKA_GWCP_LL" gateway "GW_BAHLPKKA_GWCP_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_BAHLPKKA_GWCP_LL" monitor optimized rekey
|
|
set vpn "VPN_BAHLPKKA_GWCP_LL" id 0x71 bind interface tunnel.1
|
|
set vpn "VPN_BAHLPKKA_DRCP_LL" gateway "GW_BAHLPKKA_DRCP_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_BAHLPKKA_DRCP_LL" monitor optimized rekey
|
|
set vpn "VPN_BAHLPKKA_DRCP_LL" id 0x72 bind interface tunnel.1
|
|
set vpn "VPN_FINMEX_DIALIN" gateway "GW_FINMEX_DIALIN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_FINMEX_DIALIN" monitor
|
|
set vpn "VPN_TIDCKWKW_LL" gateway "GW_TIDCKWKW_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_TIDCKWKW_LL" monitor optimized rekey
|
|
set vpn "VPN_TIDCKWKW_LL" id 0x76 bind interface tunnel.1
|
|
set vpn "VPN_TIDCKWKW_LL_BACKUP" gateway "GW_TIDCKWKW_LL_BACKUP" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_TIDCKWKW_LL_BACKUP" monitor optimized rekey
|
|
set vpn "VPN_TIDCKWKW_LL_BACKUP" id 0x78 bind interface tunnel.2
|
|
set vpn "VPN_AIINPKKA_DRCP_LL" gateway "GW_AIINPKKA_DRCP_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_AIINPKKA_DRCP_LL" monitor optimized rekey
|
|
set vpn "VPN_AIINPKKA_DRCP_LL" id 0x94 bind interface tunnel.1
|
|
set vpn "VPN_AIINPKKA_DRCP_LL" dscp-mark 0
|
|
set vpn "VPN_AIINPKKA1_LL" gateway "GW_AIINPKKA1_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_AIINPKKA1_LL" monitor optimized rekey
|
|
set vpn "VPN_AIINPKKA1_LL" id 0x91 bind interface tunnel.1
|
|
set vpn "VPN_AIINPKKA1_LL" dscp-mark 0
|
|
set vpn "VPN_AIINPKKA1_ISDN" gateway "GW_AIINPKKA1_ISDN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_AIINPKKA1_ISDN" monitor optimized rekey
|
|
set vpn "VPN_AIINPKKA1_ISDN" id 0x7b bind interface tunnel.2
|
|
set vpn "VPN_AIINPKKA1_ISDN" dscp-mark 0
|
|
set vpn "VPN_GPSXUS55_SAAS_LL" gateway "GW_US_GPSXUS55_SAAS_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_GPSXUS55_SAAS_LL" monitor optimized rekey
|
|
set vpn "VPN_GPSXUS55_SAAS_LL" id 0x7d bind interface tunnel.11
|
|
set vpn "VPN_GPSXUS55DR_SAAS_LL" gateway "GW_US_GPSXUS55DR_SAAS_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_GPSXUS55DR_SAAS_LL" monitor optimized rekey
|
|
set vpn "VPN_GPSXUS55DR_SAAS_LL" id 0x7e bind interface tunnel.11
|
|
set vpn "VPN_JSBLPKKA_LL" gateway "GW_JSBLPKKA_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_JSBLPKKA_LL" monitor optimized rekey
|
|
set vpn "VPN_JSBLPKKA_LL" id 0xe3 bind interface tunnel.1
|
|
set vpn "VPN_JSBLPKKA_ISDN" gateway "GW_JSBLPKKA_ISDN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_JSBLPKKA_ISDN" monitor optimized rekey
|
|
set vpn "VPN_JSBLPKKA_ISDN" id 0x87 bind interface tunnel.2
|
|
set vpn "VPN_ACBBUS6L_SAAS_LL" gateway "GW_ACBBUS6L_SAAS_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_ACBBUS6L_SAAS_LL" monitor optimized rekey
|
|
set vpn "VPN_ACBBUS6L_SAAS_LL" id 0x88 bind interface tunnel.11
|
|
set vpn "VPN_SONEPKKA_LL" gateway "GW_SONEPKKA_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_SONEPKKA_LL" monitor optimized rekey
|
|
set vpn "VPN_SONEPKKA_LL" id 0x89 bind interface tunnel.1
|
|
set vpn "VPN_SONEPKKA_ISDN" gateway "GW_ENSBPK_ISDN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_SONEPKKA_ISDN" monitor optimized rekey
|
|
set vpn "VPN_SONEPKKA_ISDN" id 0x8a bind interface tunnel.2
|
|
set vpn "VPN_CAGPBMHM_LL1" gateway "GW_CAGPBMHM_LL1" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_CAGPBMHM_LL1" monitor optimized rekey
|
|
set vpn "VPN_CAGPBMHM_LL1" id 0xcf bind interface tunnel.11
|
|
set vpn "DC-JO-LL" gateway "DC-JO-LL" replay tunnel idletime 0 proposal "g2-esp-3des-sha"
|
|
set vpn "DC-JO-LL" monitor optimized rekey
|
|
set vpn "DC-JO-LL" id 0xe9 bind interface tunnel.10
|
|
set vpn "VPN_UNILPKKA_LL" gateway "GW_UNILPKKA_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_UNILPKKA_LL" monitor optimized rekey
|
|
set vpn "VPN_UNILPKKA_LL" id 0xfd bind interface tunnel.1
|
|
set vpn "VPN_UNILPKKA_ISDN" gateway "GW_UNILPKKA_ISDN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_UNILPKKA_ISDN" monitor optimized rekey
|
|
set vpn "VPN_UNILPKKA_ISDN" id 0x8f bind interface tunnel.2
|
|
set vpn "VPN_MEZNPKKA_DRCP_LL" gateway "GW_MEZNPKKA_DRCP_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_MEZNPKKA_DRCP_LL" monitor optimized rekey
|
|
set vpn "VPN_MEZNPKKA_DRCP_LL" id 0x95 bind interface tunnel.1
|
|
set vpn "VPN_NIBPPKKA_LL2" gateway "GW_NIBPPKKA_LL2" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_NIBPPKKA_LL2" monitor optimized rekey
|
|
set vpn "VPN_NIBPPKKA_LL2" id 0x96 bind interface tunnel.2
|
|
set vpn "VPN_NIBPPKKA_LL2" dscp-mark 0
|
|
set vpn "VPN_NIBPPKKA_DR_LL" gateway "GW_NIBPPKKA_DR_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_NIBPPKKA_DR_LL" monitor optimized rekey
|
|
set vpn "VPN_NIBPPKKA_DR_LL" id 0x9a bind interface tunnel.1
|
|
set vpn "VPN_NIBPPKKA_DR_ISDN" gateway "GW_NIBPPKKA_DR_ISDN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_NIBPPKKA_DR_ISDN" monitor optimized rekey
|
|
set vpn "VPN_NIBPPKKA_DR_ISDN" id 0x9b bind interface tunnel.2
|
|
set vpn "VPN_CAGPBMHM_LL2" gateway "GW_CAGPBMHM_LL2" no-replay tunnel idletime 0 proposal "g2-esp-3des-sha"
|
|
set vpn "VPN_CAGPBMHM_LL2" monitor optimized rekey
|
|
set vpn "VPN_CAGPBMHM_LL2" id 0xcc bind interface tunnel.12
|
|
set vpn "VPN_CAGPBMHM_LL2" dscp-mark 0
|
|
set vpn "bicstest" gateway "bicstest1" no-replay tunnel idletime 0 proposal "g2-esp-3des-sha"
|
|
set vpn "VPN_CAGPBMHM_LL-DR1" gateway "GW_CAGPBMHM_LL-DR1" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_CAGPBMHM_LL-DR1" monitor optimized rekey
|
|
set vpn "VPN_CAGPBMHM_LL-DR1" id 0xb4 bind interface tunnel.11
|
|
set vpn "VPN_ENSBNOC" gateway "GW_ENSBNOC" replay tunnel idletime 0 proposal "g2-esp-3des-sha"
|
|
set vpn "VPN_ENSBNOC" monitor optimized rekey
|
|
set vpn "VPN_ENSBNOC" id 0xc7 bind interface tunnel.7
|
|
set vpn "BICS-LL" gateway "BICS-GATEWAY-LL" replay tunnel idletime 0 proposal "nopfs-esp-3des-sha" "nopfs-esp-des-sha"
|
|
set vpn "BICS-LL" id 0xc9 bind interface tunnel.15
|
|
set vpn "BICS-LL" dscp-mark 0
|
|
set interface tunnel.15 nhtb 3.3.3.3 vpn "BICS-LL"
|
|
set vpn "CS-SUPPORT-DIALIN" gateway "CS-SUPPORT-DIALIN" replay tunnel idletime 0 proposal "g2-esp-3des-sha"
|
|
set vpn "CS-SUPPORT-DIALIN" monitor optimized rekey
|
|
set vpn "VPN_SAUDPKKA_GWCP_LL" gateway "GW_SAUDPKKA_GWCP_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_SAUDPKKA_GWCP_LL" monitor optimized rekey
|
|
set vpn "VPN_SAUDPKKA_GWCP_LL" id 0xd6 bind interface tunnel.1
|
|
set vpn "VPN_SAUDPKKA_DRCP_LL" gateway "GW_SAUDPKKA_DRCP_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_SAUDPKKA_DRCP_LL" monitor optimized rekey
|
|
set vpn "VPN_SAUDPKKA_DRCP_LL" id 0xd3 bind interface tunnel.1
|
|
set vpn "VPN_BKIPPKKA_DRCP_LL" gateway "GW_BKIPPKKA_DRCP_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_BKIPPKKA_DRCP_LL" monitor optimized rekey
|
|
set vpn "VPN_BKIPPKKA_DRCP_LL" id 0xd4 bind interface tunnel.1
|
|
set vpn "VPN_BKIPPKKA_DRCP_ISDN" gateway "GW_BKIPPKKA_DRCP_ISDN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_BKIPPKKA_DRCP_ISDN" monitor optimized rekey
|
|
set vpn "VPN_BKIPPKKA_DRCP_ISDN" id 0xd5 bind interface tunnel.2
|
|
set vpn "MoneyExpress-VPN" gateway "MoneyExpress-Gateway" replay tunnel idletime 0 proposal "g2-esp-aes128-sha"
|
|
set vpn "MoneyExpress-VPN" monitor optimized rekey
|
|
set vpn "VPN_BURJPKKA_DRCP_LL" gateway "GW_BURJPKKA_DRCP_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_BURJPKKA_DRCP_LL" monitor optimized rekey
|
|
set vpn "VPN_BURJPKKA_DRCP_LL" id 0xdd bind interface tunnel.1
|
|
set vpn "SW-SUPPORT-DIALIN" gateway "SW-SUPPORT-DIALIN" replay tunnel idletime 0 proposal "g2-esp-3des-sha"
|
|
set vpn "VPN_DUIBPKKA_DRCP_LL" gateway "GW_DUIBPKKA_DRCP_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_DUIBPKKA_DRCP_LL" monitor optimized rekey
|
|
set vpn "VPN_DUIBPKKA_DRCP_LL" id 0xe5 bind interface tunnel.1
|
|
set vpn "VPN_DUIBPKKA_DRCP_ISDN" gateway "GW_DUIBPKKA_DRCP_ISDN" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_DUIBPKKA_DRCP_ISDN" monitor optimized rekey
|
|
set vpn "VPN_DUIBPKKA_DRCP_ISDN" id 0xe6 bind interface tunnel.2
|
|
set vpn "ENSB-TELEPIN-LL" gateway "ENSB-TELEPIN-LL" replay tunnel idletime 0 proposal "g2-esp-3des-sha"
|
|
set vpn "ENSB-TELEPIN-LL" monitor optimized rekey
|
|
set vpn "ENSB-TELEPIN-LL" id 0xe7 bind interface tunnel.18
|
|
set interface tunnel.18 nhtb 7.7.7.7 vpn "ENSB-TELEPIN-LL"
|
|
set vpn "SINGTEL-USERS-DIALIN" gateway "SINGTEL-USERS-DIALIN" replay tunnel idletime 0 proposal "g2-esp-3des-sha"
|
|
set vpn "EEC_en.More-LL" gateway "EEC_en.More-LL" replay tunnel idletime 0 proposal "g2-esp-3des-sha"
|
|
set vpn "EEC_en.More-LL" monitor optimized rekey
|
|
set vpn "EEC_en.More-LL" id 0xea bind interface tunnel.1
|
|
set vpn "EEC_en.More-LL" dscp-mark 0
|
|
set vpn "EN-IT-LL" gateway "EN-IT-LL" replay tunnel idletime 0 proposal "g2-esp-3des-sha"
|
|
set vpn "EN-IT-LL" monitor optimized rekey
|
|
set vpn "EN-IT-LL" id 0xef bind interface tunnel.20
|
|
set vpn "en.More-LVL3-VPN_Gp" gateway "en.More-LVL3-GW_Gp" replay tunnel idletime 0 proposal "g2-esp-3des-sha"
|
|
set vpn "en.More-LVL3-VPN_Gp" monitor
|
|
set vpn "SMS-Global-Production-VPN" gateway "SMS-Global-Production-GW" replay tunnel idletime 0 proposal "nopfs-esp-3des-sha"
|
|
set vpn "SMS-Global-Production-VPN" id 0x103 bind interface tunnel.21
|
|
set interface tunnel.21 nhtb 8.8.8.8 vpn "SMS-Global-Production-VPN"
|
|
set vpn "SMS-Global-DR-VPN" gateway "SMS-Global-DR-GW" replay tunnel idletime 0 proposal "nopfs-esp-3des-sha"
|
|
set vpn "SMS-Global-DR-VPN" id 0x102 bind interface tunnel.22
|
|
set interface tunnel.22 nhtb 9.9.9.9 vpn "SMS-Global-DR-VPN"
|
|
set vpn "VPN_NBPAPKKA_DRCP_LL" gateway "GW_NBPAPKKA_DRCP_LL" replay tunnel idletime 0 proposal "g2-esp-3des-md5"
|
|
set vpn "VPN_NBPAPKKA_DRCP_LL" monitor optimized rekey
|
|
set vpn "VPN_NBPAPKKA_DRCP_LL" id 0x104 bind interface tunnel.1
|
|
set vpn "DBIS-TEST" gateway "DBIS-TEST" replay tunnel idletime 0 proposal "g2-esp-3des-sha"
|
|
set vpn "DBIS-TEST" monitor optimized rekey
|
|
set vpn "DBIS-TEST" id 0x107 bind interface tunnel.1
|
|
set vpn "MEA_en.More-LL" gateway "MEA_en.More-LL" replay tunnel idletime 0 proposal "g2-esp-3des-sha"
|
|
set vpn "MEA_en.More-LL" monitor optimized rekey
|
|
set vpn "MEA_en.More-LL" id 0x108 bind interface tunnel.1
|
|
set vpn "MEA_en.More-LL" dscp-mark 0
|
|
unset interface tunnel.21 acvpn-dynamic-routing
|
|
unset interface tunnel.22 acvpn-dynamic-routing
|
|
set vpn-group id 1
|
|
set attack db sigpack base
|
|
set attack db mode Update
|
|
set attack db schedule daily 00:00
|
|
set url protocol websense
|
|
exit
|
|
set vpn "BICS-LL" proxy-id local-ip 10.246.89.12/30 remote-ip 193.43.238.248/30 "ANY"
|
|
set vpn "MoneyExpress-VPN" proxy-id local-ip 192.168.211.230/32 remote-ip 10.10.10.187/32 "ANY"
|
|
set vpn "ENSB-TELEPIN-LL" proxy-id local-ip 192.168.211.237/32 remote-ip 202.40.237.144/28 "ANY"
|
|
set vpn "EN-IT-LL" proxy-id check
|
|
set vpn "EN-IT-LL" proxy-id local-ip 192.168.211.0/24 remote-ip 192.168.2.0/24 "ANY"
|
|
set vpn "SMS-Global-Production-VPN" proxy-id check
|
|
set vpn "SMS-Global-Production-VPN" proxy-id local-ip 172.24.211.230/32 remote-ip 203.89.193.162/32 "HTTP"
|
|
set vpn "SMS-Global-Production-VPN" proxy-id local-ip 172.24.211.230/32 remote-ip 203.89.193.162/32 "HTTPS"
|
|
set vpn "SMS-Global-Production-VPN" proxy-id local-ip 172.24.211.230/32 remote-ip 203.89.193.162/32 "SMS_Global_Ports"
|
|
set vpn "SMS-Global-Production-VPN" proxy-id local-ip 172.24.211.230/32 remote-ip 203.89.193.162/32 "ICMP-ANY"
|
|
set vpn "SMS-Global-DR-VPN" proxy-id check
|
|
set vpn "SMS-Global-DR-VPN" proxy-id local-ip 172.25.211.230/32 remote-ip 59.167.123.105/32 "HTTPS"
|
|
set vpn "SMS-Global-DR-VPN" proxy-id local-ip 172.25.211.230/32 remote-ip 59.167.123.105/32 "HTTP"
|
|
set vpn "SMS-Global-DR-VPN" proxy-id local-ip 172.25.211.230/32 remote-ip 59.167.123.105/32 "SMS_Global_Ports"
|
|
set vpn "SMS-Global-DR-VPN" proxy-id local-ip 172.25.211.230/32 remote-ip 59.167.123.105/32 "ICMP-ANY"
|
|
set policy id 142 from "Trust_US" to "Untrust" "en.More Web Server 1" "SMS_Global_DR_SRVR1" "ANY" permit log
|
|
set policy id 142
|
|
set log session-init
|
|
exit
|
|
set policy id 141 from "Trust_US" to "Untrust" "en.More Web Server 1" "SMS_Global_Production_SRVR1" "ANY" permit log
|
|
set policy id 141
|
|
set log session-init
|
|
exit
|
|
set policy id 140 from "Trust_US" to "Untrust" "en.More Web Server 1" "Dial-Up VPN" "HTTPS" tunnel vpn "en.More-LVL3-VPN_Gp" id 0xf9 pair-policy 139 log
|
|
set policy id 140
|
|
set log session-init
|
|
exit
|
|
set policy id 139 from "Untrust" to "Trust_US" "Dial-Up VPN" "en.More Web Server 1" "HTTPS" tunnel vpn "en.More-LVL3-VPN_Gp" id 0xf9 pair-policy 140 log
|
|
set policy id 139
|
|
set log session-init
|
|
exit
|
|
set policy id 138 from "Trust_US" to "Untrust" "en.More Web Server 1" "Dial-Up VPN" "HTTP" tunnel vpn "en.More-LVL3-VPN_Gp" id 0xf8 pair-policy 137 log
|
|
set policy id 138
|
|
set log session-init
|
|
exit
|
|
set policy id 137 from "Untrust" to "Trust_US" "Dial-Up VPN" "en.More Web Server 1" "HTTP" tunnel vpn "en.More-LVL3-VPN_Gp" id 0xf8 pair-policy 138 log
|
|
set policy id 137
|
|
set log session-init
|
|
exit
|
|
set policy id 124 from "Untrust" to "Trust_US" "Dial-Up VPN" "192.168.214.104/29" "ANY" tunnel vpn "en.More-LVL3-VPN_Gp" id 0xf1 pair-policy 123 log
|
|
set policy id 124
|
|
set log session-init
|
|
exit
|
|
set policy id 123 from "Trust_US" to "Untrust" "192.168.214.104/29" "Dial-Up VPN" "ANY" tunnel vpn "en.More-LVL3-VPN_Gp" id 0xf1 pair-policy 124 log
|
|
set policy id 123
|
|
set log session-init
|
|
exit
|
|
set policy id 122 from "Untrust" to "Trust_US" "Dial-Up VPN" "192.168.211.104/29" "ANY" tunnel vpn "en.More-LVL3-VPN_Gp" id 0xf0 pair-policy 121 log
|
|
set policy id 122
|
|
set log session-init
|
|
exit
|
|
set policy id 121 from "Trust_US" to "Untrust" "192.168.211.104/29" "Dial-Up VPN" "ANY" tunnel vpn "en.More-LVL3-VPN_Gp" id 0xf0 pair-policy 122 log
|
|
set policy id 121
|
|
set log session-init
|
|
exit
|
|
set policy id 118 from "Untrust" to "Trust_US" "EEC-WSs" "en.More Web Servers" "HTTPS" permit log
|
|
set policy id 118
|
|
set log session-init
|
|
exit
|
|
set policy id 117 from "Trust_US" to "Untrust" "en.More Web Servers" "EEC-WSs" "ANY" permit log
|
|
set policy id 117
|
|
set log session-init
|
|
exit
|
|
set policy id 116 from "Trust_US" to "Untrust" "ENSWDAPP-CLUSTER" "TELEPIN-FTP" "ANY" permit log
|
|
set policy id 116
|
|
set src-address "ENSWDAPP1"
|
|
set src-address "ENSWDAPP2"
|
|
set dst-address "TELEPIN-FTP-TEMP"
|
|
set dst-address "TELEPIN-SINGTEL NW"
|
|
set dst-address "TELEPIN-SINGTEL-SRV-TEMP"
|
|
set dst-address "TELEPIN-SINGTEL-SRV1"
|
|
set dst-address "TELEPIN-SINGTEL-SRV2"
|
|
set dst-address "TELEPIN-SINGTEL-SRV3"
|
|
set dst-address "TELEPIN-SINGTEL-SRV4"
|
|
set log session-init
|
|
exit
|
|
set policy id 105 from "Trust_US" to "Untrust" "ENMOREDAPP2" "RemitONE-Servers" "HTTPS" nat src permit log
|
|
set policy id 105
|
|
set log session-init
|
|
exit
|
|
set policy id 113 from "Untrust" to "Trust_US" "TELEPIN TEST NW" "ENSWDAPP-CLUSTER" "ICMP-ANY" permit log
|
|
set policy id 113
|
|
set src-address "TELEPIN-FTP"
|
|
set src-address "TELEPIN-SINGTEL NW"
|
|
set src-address "TELEPIN-SINGTEL-SRV-TEMP"
|
|
set src-address "TELEPIN-SINGTEL-SRV1"
|
|
set src-address "TELEPIN-SINGTEL-SRV2"
|
|
set src-address "TELEPIN-SINGTEL-SRV3"
|
|
set src-address "TELEPIN-SINGTEL-SRV4"
|
|
set dst-address "ENSWDAPP1"
|
|
set dst-address "ENSWDAPP2"
|
|
set log session-init
|
|
exit
|
|
set policy id 114 from "Untrust" to "Trust_US" "Dial-Up VPN" "ENSWDAPP-CLUSTER" "ANY" tunnel vpn "SINGTEL-USERS-DIALIN" id 0xe8 pair-policy 115 log
|
|
set policy id 114
|
|
set log session-init
|
|
exit
|
|
set policy id 104 from "Untrust" to "Trust_US" "RemitONE-Servers" "VIP(ethernet3/3)" "en.More-HTTPS-5443" permit log
|
|
set policy id 104
|
|
set log session-init
|
|
exit
|
|
set policy id 102 from "Untrust" to "Trust_US" "MoneyExpress-Server" "en.More Web Server 1" "MoneyExpress_Ports" tunnel vpn "MoneyExpress-VPN" id 0xdb pair-policy 101 log
|
|
set policy id 102
|
|
set log session-init
|
|
exit
|
|
set policy id 101 from "Trust_US" to "Untrust" "en.More Web Server 1" "MoneyExpress-Server" "MoneyExpress_Ports" tunnel vpn "MoneyExpress-VPN" id 0xdb pair-policy 102 log
|
|
set policy id 101
|
|
set log session-init
|
|
exit
|
|
set policy id 100 from "Untrust" to "Trust_US" "Dial-Up VPN" "en.More Web Server 1" "ANY" tunnel vpn "VPN_FINMEX_DIALIN" id 0xd7 pair-policy 99 log
|
|
set policy id 100
|
|
set log session-init
|
|
exit
|
|
set policy id 99 from "Trust_US" to "Untrust" "en.More Web Server 1" "Dial-Up VPN" "ANY" tunnel vpn "VPN_FINMEX_DIALIN" id 0xd7 pair-policy 100 log
|
|
set policy id 99
|
|
set log session-init
|
|
exit
|
|
set policy id 98 from "Trust_US" to "Untrust" "ENMOREDAPP2" "Any" "ANY" nat src permit log
|
|
set policy id 98 disable
|
|
set policy id 98
|
|
set log session-init
|
|
exit
|
|
set policy id 97 from "Trust_US" to "Untrust" "en.More Web Servers" "Any" "ANY" nat src permit log
|
|
set policy id 97 disable
|
|
set policy id 97
|
|
set log session-init
|
|
exit
|
|
set policy id 68 name "enMore" from "Untrust" to "Trust_US" "Any" "VIP(80.227.254.217)" "FTP" permit log
|
|
set policy id 68
|
|
set service "HTTP"
|
|
set service "HTTPS"
|
|
set log session-init
|
|
exit
|
|
set policy id 61 from "Untrust" to "Trust_US" "UNIRISX_MGMT_PUBLIC" "VIP(80.227.254.209)" "FTP" permit log
|
|
set policy id 61
|
|
set log session-init
|
|
exit
|
|
set policy id 60 from "Untrust" to "Trust_US" "UNIRISX_MGMT_PUBLIC" "VIP(80.227.254.208)" "FTP" permit log
|
|
set policy id 60
|
|
set log session-init
|
|
exit
|
|
set policy id 58 from "Untrust" to "Trust_US" "Any" "VIP(80.227.254.208)" "HTTP" permit log
|
|
set policy id 58
|
|
set service "HTTPS"
|
|
set log session-init
|
|
exit
|
|
set policy id 59 from "Untrust" to "Trust_US" "Any" "VIP(80.227.254.209)" "HTTP" permit log
|
|
set policy id 59
|
|
set service "HTTPS"
|
|
set log session-init
|
|
exit
|
|
set policy id 62 from "Untrust" to "Trust_US" "Any" "VIP(80.227.254.210)" "HTTP" permit log
|
|
set policy id 62
|
|
set service "HTTPS"
|
|
set log session-init
|
|
exit
|
|
set policy id 63 from "Untrust" to "Trust_US" "Any" "VIP(80.227.254.211)" "DNS" permit log
|
|
set policy id 63
|
|
set service "FTP"
|
|
set service "HTTP"
|
|
set service "HTTPS"
|
|
set service "ICMP-ANY"
|
|
set log session-init
|
|
exit
|
|
set policy id 56 from "Untrust" to "Trust" "10.153.0.0/16" "192.168.206.0/23" "ANY" permit log
|
|
set policy id 56
|
|
exit
|
|
set policy id 52 from "Trust" to "Trust_US" "Any" "Any" "ANY" permit log
|
|
set policy id 52
|
|
set log session-init
|
|
exit
|
|
set policy id 57 from "Untrust" to "Trust_US" "USA_CUS_NW" "ENSB_DXB_US_NW" "ICMP-ANY" permit log
|
|
set policy id 57
|
|
exit
|
|
set policy id 48 from "Untrust" to "Trust_US" "USA_CUS_NW" "ENUS_AML_NW" "EN_Side_Safewatch" permit log
|
|
set policy id 48
|
|
set log session-init
|
|
exit
|
|
set policy id 43 from "Trust_US" to "Untrust" "FINMEX-SRV1" "Dial-Up VPN" "ANY" tunnel vpn "VPN_FINMEX_DIALIN" id 0x75 pair-policy 42 log
|
|
set policy id 43
|
|
set log session-init
|
|
exit
|
|
set policy id 71 from "Trust_US" to "Untrust" "en.More-SRV1" "Dial-Up VPN" "ANY" tunnel vpn "VPN_FINMEX_DIALIN" id 0x9d pair-policy 70 log
|
|
set policy id 71
|
|
set log session-init
|
|
exit
|
|
set policy id 92 from "Trust_US" to "Untrust" "en.More-SRV2" "Dial-Up VPN" "ANY" tunnel vpn "VPN_FINMEX_DIALIN" id 0xcd pair-policy 91 log
|
|
set policy id 92
|
|
set log session-init
|
|
exit
|
|
set policy id 94 from "Trust_US" to "Untrust" "ENMOREDAPP1" "Dial-Up VPN" "ANY" tunnel vpn "VPN_FINMEX_DIALIN" id 0xd1 pair-policy 93 log
|
|
set policy id 94
|
|
set log session-init
|
|
exit
|
|
set policy id 96 from "Trust_US" to "Untrust" "ENMOREDAPP2" "Dial-Up VPN" "ANY" tunnel vpn "VPN_FINMEX_DIALIN" id 0xd2 pair-policy 95 log
|
|
set policy id 96
|
|
set log session-init
|
|
exit
|
|
set policy id 42 from "Untrust" to "Trust_US" "Dial-Up VPN" "FINMEX-SRV1" "ANY" tunnel vpn "VPN_FINMEX_DIALIN" id 0x75 pair-policy 43 log
|
|
set policy id 42
|
|
set log session-init
|
|
exit
|
|
set policy id 70 from "Untrust" to "Trust_US" "Dial-Up VPN" "en.More-SRV1" "ANY" tunnel vpn "VPN_FINMEX_DIALIN" id 0x9d pair-policy 71 log
|
|
set policy id 70
|
|
set log session-init
|
|
exit
|
|
set policy id 91 from "Untrust" to "Trust_US" "Dial-Up VPN" "en.More-SRV2" "ANY" tunnel vpn "VPN_FINMEX_DIALIN" id 0xcd pair-policy 92 log
|
|
set policy id 91
|
|
set log session-init
|
|
exit
|
|
set policy id 93 from "Untrust" to "Trust_US" "Dial-Up VPN" "ENMOREDAPP1" "ANY" tunnel vpn "VPN_FINMEX_DIALIN" id 0xd1 pair-policy 94 log
|
|
set policy id 93
|
|
set log session-init
|
|
exit
|
|
set policy id 95 from "Untrust" to "Trust_US" "Dial-Up VPN" "ENMOREDAPP2" "ANY" tunnel vpn "VPN_FINMEX_DIALIN" id 0xd2 pair-policy 96 log
|
|
set policy id 95
|
|
set log session-init
|
|
exit
|
|
set policy id 40 from "Trust_US" to "Untrust" "UNIRISX-SRV03" "Dial-Up VPN" "ANY" tunnel vpn "VPN_UNIRISX_PHAROS_DIALIN" id 0x6f pair-policy 39 log
|
|
set policy id 40
|
|
set log session-init
|
|
exit
|
|
set policy id 39 from "Untrust" to "Trust_US" "Dial-Up VPN" "UNIRISX-SRV03" "ANY" tunnel vpn "VPN_UNIRISX_PHAROS_DIALIN" id 0x6f pair-policy 40 log
|
|
set policy id 39 disable
|
|
set policy id 39
|
|
set log session-init
|
|
exit
|
|
set policy id 33 name "VPN_ENSB_MGMT_DIALIN(UNIRISX)" from "Trust_US" to "Untrust" "ENSB_DXB_US_NW" "Dial-Up VPN" "ANY" tunnel vpn "VPN_US_MGMT_DIALIN" id 0x64 pair-policy 32 log
|
|
set policy id 33
|
|
exit
|
|
set policy id 32 name "VPN_ENSB_MGMT_DIALIN(UNIRISX)" from "Untrust" to "Trust_US" "Dial-Up VPN" "ENSB_DXB_US_NW" "ANY" tunnel vpn "VPN_US_MGMT_DIALIN" id 0x64 pair-policy 33 log
|
|
set policy id 32
|
|
exit
|
|
set policy id 27 from "Trust_US" to "Untrust" "ENSB_DXB_US_NW" "Dial-Up VPN" "RDP" tunnel vpn "VPN_UNIRISX_DIALIN" id 0x62 log
|
|
set policy id 27
|
|
exit
|
|
set policy id 26 from "Untrust" to "Trust_US" "Dial-Up VPN" "UNIRISX-HOST" "RDP" tunnel vpn "VPN_UNIRISX_DIALIN" id 0x69 pair-policy 38 log
|
|
set policy id 26
|
|
exit
|
|
set policy id 25 name "VPN_ENSB_MGMT_DIALIN(UNIRISX)" from "Trust_US" to "Untrust" "ENSB_DXB_US_NW" "Dial-Up VPN" "ANY" tunnel vpn "VPN_ENSB_MGMT_DIALIN(UNIRISX)" id 0x5e pair-policy 24 log
|
|
set policy id 25
|
|
exit
|
|
set policy id 24 name "VPN_ENSB_MGMT_DIALIN(UNIRISX)" from "Untrust" to "Trust_US" "Dial-Up VPN" "ENSB_DXB_US_NW" "ANY" tunnel vpn "VPN_ENSB_MGMT_DIALIN(UNIRISX)" id 0x5e pair-policy 25 log
|
|
set policy id 24
|
|
exit
|
|
set policy id 23 from "Trust_US" to "Untrust" "ENSB_DXB_US_NW" "Dial-Up VPN" "ANY" tunnel vpn "VPN_UNIRISX_DIALIN" id 0x5d pair-policy 22 log
|
|
set policy id 23
|
|
exit
|
|
set policy id 22 from "Untrust" to "Trust_US" "Dial-Up VPN" "ENSB_DXB_US_NW" "ANY" tunnel vpn "VPN_UNIRISX_DIALIN" id 0x5d pair-policy 23 log
|
|
set policy id 22
|
|
exit
|
|
set policy id 20 from "Untrust" to "Trust_US" "ENSBUS_NW" "ENSB_DXB_US_NW" "ANY" permit log
|
|
set policy id 20
|
|
exit
|
|
set policy id 11 from "Untrust" to "Trust_US" "USA_CUS_NW" "ENUS_SAG_NW" "ICMP-ANY" permit log
|
|
set policy id 11
|
|
set service "EN_SAG"
|
|
exit
|
|
set policy id 10 from "Trust_US" to "Untrust" "ENSB_DXB_US_NW" "USA_CUS_NW" "ANY" permit log
|
|
set policy id 10
|
|
exit
|
|
set policy id 9 from "Untrust" to "Trust" "ENSBPK_NW" "ENSBD_NW" "ANY" permit log
|
|
set policy id 9
|
|
exit
|
|
set policy id 5 from "Untrust" to "Trust" "PK_CUS_NW_DRCP" "ENSBDXB_SAG1" "ICMP-ANY" permit log
|
|
set policy id 5
|
|
set src-address "PK_CUS_NW_GWCP"
|
|
set dst-address "ENSBDXB_SAG2"
|
|
set dst-address "ENSBDXB_SAG3"
|
|
set dst-address "ENSBDXB_SAG4"
|
|
set dst-address "ENSBDXB_SAG5"
|
|
set service "EN_SAG"
|
|
exit
|
|
set policy id 7 from "Untrust" to "Global" "Any" "Any" "ANY" permit log
|
|
set policy id 7 disable
|
|
set policy id 7
|
|
exit
|
|
set policy id 6 from "Untrust" to "Untrust" "Any" "Any" "ANY" permit log
|
|
set policy id 6
|
|
exit
|
|
set policy id 4 from "Trust" to "Untrust" "Any" "Any" "ANY" permit log
|
|
set policy id 4
|
|
exit
|
|
set policy id 12 from "Untrust" to "Trust_US" "US_FEBKUS6LIRV_NW" "ENSB_DXB_US_NW" "ICMP-ANY" permit log
|
|
set policy id 12
|
|
set src-address "US_FEBKUS6LLA1_NW"
|
|
set src-address "US_FEBKUS6LLA2_NW"
|
|
set service "EN_MSIH"
|
|
exit
|
|
set policy id 19 from "Untrust" to "Trust" "ENSBUS_NW" "ENSBD_NW_US" "ANY" permit log
|
|
set policy id 19
|
|
exit
|
|
set policy id 21 from "Trust_US" to "Untrust" "ENSB_DXB_US_NW" "ENSBUS_NW" "ANY" permit log
|
|
set policy id 21
|
|
exit
|
|
set policy id 35 from "Untrust" to "Trust_US" "US_IDXDUS033_NW" "ENSB_DXB_US_NW" "ICMP-ANY" permit log
|
|
set policy id 35
|
|
set service "EN_MSIH"
|
|
exit
|
|
set policy id 38 from "Trust_US" to "Untrust" "UNIRISX-HOST" "Dial-Up VPN" "RDP" tunnel vpn "VPN_UNIRISX_DIALIN" id 0x69 pair-policy 26 log
|
|
set policy id 38
|
|
exit
|
|
set policy id 46 from "Trust_US" to "Untrust" "FINMEX-SRV1" "213.132.58.173/32" "FTP" nat src permit log
|
|
set policy id 46
|
|
exit
|
|
set policy id 41 from "Untrust" to "Trust_US" "US_RBBCUS6L_NW" "ENSB_DXB_US_NW" "ICMP-ANY" permit log
|
|
set policy id 41
|
|
set service "EN_MSIH"
|
|
exit
|
|
set policy id 47 from "Untrust" to "Trust_US" "US_GPSXUS55_NW" "ENSB_DXB_US_NW" "ICMP-ANY" permit log
|
|
set policy id 47
|
|
set src-address "US_GPSXUS55DR_NW"
|
|
set service "EN_MSIH"
|
|
set log session-init
|
|
exit
|
|
set policy id 45 from "Trust_US" to "Untrust" "FINMEX-SRV1" "Any" "ANY" nat src permit log
|
|
set policy id 45
|
|
exit
|
|
set policy id 49 from "Untrust" to "Trust_US" "US_ACBBUS6L_NW" "ENSB_DXB_US_NW" "ICMP-ANY" permit log
|
|
set policy id 49
|
|
set service "EN_MSIH"
|
|
set log session-init
|
|
exit
|
|
set policy id 50 from "Untrust" to "Trust_US" "US_CAGPBMHM_NW" "ENSB_DXB_US_NW" "FTP" permit log
|
|
set policy id 50 disable
|
|
set policy id 50
|
|
set service "ICMP-ANY"
|
|
set service "SSH"
|
|
set service "EN_MSIH"
|
|
set log session-init
|
|
exit
|
|
set policy id 51 from "Untrust" to "Trust_US" "US_CAGPBMHM_NW" "ENSB_DXB_US_NW" "ANY" permit log
|
|
set policy id 51
|
|
set log session-init
|
|
exit
|
|
set policy id 53 from "Trust_US" to "Trust" "Any" "Any" "ANY" permit log
|
|
set policy id 53
|
|
set log session-init
|
|
exit
|
|
set policy id 54 from "Untrust" to "Trust_US" "ENSB-JO-NW" "ENSB_DXB_US_NW" "ANY" permit log
|
|
set policy id 54
|
|
set log session-init
|
|
exit
|
|
set policy id 67 from "Untrust" to "Trust_US" "UNIRISX_KEYSRV" "UNIRISX-HOST" "UNIRISX_KEYSRV" permit log
|
|
set policy id 67
|
|
set log session-init
|
|
exit
|
|
set policy id 55 from "Trust_US" to "Untrust" "ENSB_DXB_US_NW" "ENSB-JO-NW" "ANY" permit log
|
|
set policy id 55
|
|
exit
|
|
set policy id 64 name "UNIRISX DNS" from "Trust_US" to "Untrust" "UNIRISX" "Any" "DNS" nat src permit log
|
|
set policy id 64
|
|
set log session-init
|
|
exit
|
|
set policy id 65 name "UNIRISX_KEYSRV" from "Trust_US" to "Untrust" "UNIRISX-HOST" "UNIRISX_KEYSRV" "UNIRISX_KEYSRV" nat src permit log
|
|
set policy id 65
|
|
set log session-init
|
|
exit
|
|
set policy id 85 from "Trust_US" to "Untrust" "en.More-SRV1" "BICS-HOMESEND-PROD-SVR-01" "ANY" permit log
|
|
set policy id 85
|
|
set src-address "ENMOREDAPP1"
|
|
set src-address "ENMOREDAPP2"
|
|
set log session-init
|
|
exit
|
|
set policy id 82 from "Trust_US" to "Untrust" "en.More-SRV2" "BICS-HOMESEND-TEST-SVR-01" "ANY" permit log
|
|
set policy id 82
|
|
set log session-init
|
|
exit
|
|
set policy id 78 from "Trust_US" to "Untrust" "en.More-SRV1" "BICS-HOMESEND-TEST-SVR-01" "ANY" permit log
|
|
set policy id 78 disable
|
|
set policy id 78
|
|
set log session-init
|
|
exit
|
|
set policy id 80 from "Trust_US" to "Untrust" "ENSB-BICS-NW" "Dial-Up VPN" "ANY" tunnel vpn "bicstest" id 0xac log
|
|
set policy id 80 disable
|
|
set policy id 80
|
|
set log session-init
|
|
exit
|
|
set policy id 66 from "Untrust" to "Trust_US" "Any" "UNIRISX" "DNS" permit log
|
|
set policy id 66
|
|
set log session-init
|
|
exit
|
|
set policy id 69 from "Trust_US" to "Untrust" "en.More-SRV1" "Any" "ANY" nat src permit log
|
|
set policy id 69
|
|
set log session-init
|
|
exit
|
|
set policy id 108 from "Trust_US" to "Untrust" "ENSW-SRVS" "Any" "ANY" nat src permit log
|
|
set policy id 108
|
|
set log session-init
|
|
exit
|
|
set policy id 103 from "Trust_US" to "Untrust" "192.168.211.237/32" "Any" "ANY" nat src permit log
|
|
set policy id 103
|
|
set log session-init
|
|
exit
|
|
set policy id 120 from "Trust_US" to "Untrust" "ENSB_DXB_US_NW" "IT-MAIL-SERVER" "ANY" nat dst ip 192.168.2.13 permit log
|
|
set policy id 120
|
|
set log session-init
|
|
exit
|
|
set policy id 72 from "Untrust" to "Trust_US" "US_CAGPBMHM_NW-DR" "ENSB_DXB_US_NW" "ANY" permit log
|
|
set policy id 72
|
|
set log session-init
|
|
exit
|
|
set policy id 81 from "Untrust" to "Trust_US" "BICS-HOMESEND-PROD-SVR-01" "MIP(10.246.89.12)" "FTP" permit log
|
|
set policy id 81
|
|
set dst-address "MIP(10.246.89.14)"
|
|
set dst-address "MIP(10.246.89.15)"
|
|
set service "HTTPS"
|
|
set log session-init
|
|
exit
|
|
set policy id 79 from "Untrust" to "Trust_US" "BICS-HOMESEND-TEST-SVR-01" "MIP(10.246.89.13)" "FTP" permit log
|
|
set policy id 79
|
|
set service "HTTPS"
|
|
set log session-init
|
|
exit
|
|
set policy id 77 from "Trust_US" to "Untrust" "Any" "Any" "ANY" permit log
|
|
set policy id 77
|
|
set log session-init
|
|
exit
|
|
set policy id 83 from "Untrust" to "Trust_US" "Any" "en.More-SRV1" "DNS" permit log
|
|
set policy id 83
|
|
set dst-address "en.More-SRV2"
|
|
set log session-init
|
|
exit
|
|
set policy id 84 from "Trust_US" to "Untrust" "ENSBDFTP1" "Any" "FTP" permit log
|
|
set policy id 84
|
|
set log session-init
|
|
exit
|
|
set policy id 86 from "Untrust" to "Trust" "ENSB-NOC-NW" "ENSBD_NW_US" "ANY" permit log
|
|
set policy id 86
|
|
set log session-init
|
|
exit
|
|
set policy id 88 from "Untrust" to "Trust" "PK_CUS_NW_GWCP" "SWP-NLB" "HTTPS" permit log
|
|
set policy id 88
|
|
set dst-address "SWP-SRV1"
|
|
set dst-address "SWP-SRV2"
|
|
set service "ICMP-ANY"
|
|
set service "Proxy_48600"
|
|
set log session-init
|
|
exit
|
|
set policy id 89 from "Untrust" to "Trust_US" "Dial-Up VPN" "en.More-SRV1" "ANY" tunnel vpn "CS-SUPPORT-DIALIN" id 0xcb pair-policy 90 log
|
|
set policy id 89
|
|
set log session-init
|
|
exit
|
|
set policy id 90 from "Trust_US" to "Untrust" "en.More-SRV1" "Dial-Up VPN" "ANY" tunnel vpn "CS-SUPPORT-DIALIN" id 0xcb pair-policy 89 log
|
|
set policy id 90
|
|
set log session-init
|
|
exit
|
|
set policy id 107 from "Trust_US" to "Untrust" "ENSB_DXB_US_NW" "Dial-Up VPN" "ANY" tunnel vpn "VPN_FINMEX_DIALIN" id 0xdf log
|
|
set policy id 107
|
|
set log session-init
|
|
exit
|
|
set policy id 109 from "Untrust" to "Trust_US" "Dial-Up VPN" "ENSB_DXB_US_NW" "ANY" tunnel vpn "SW-SUPPORT-DIALIN" id 0xe4 pair-policy 110 log
|
|
set policy id 109
|
|
set log session-init
|
|
exit
|
|
set policy id 110 from "Trust_US" to "Untrust" "ENSB_DXB_US_NW" "Dial-Up VPN" "ANY" tunnel vpn "SW-SUPPORT-DIALIN" id 0xe4 pair-policy 109 log
|
|
set policy id 110
|
|
set log session-init
|
|
exit
|
|
set policy id 111 from "Untrust" to "Trust_US" "TELEPIN-FTP" "ENSWDAPP-CLUSTER" "TELEPIN-SINGTEL" permit log
|
|
set policy id 111
|
|
set src-address "TELEPIN-SINGTEL NW"
|
|
set src-address "TELEPIN-SINGTEL-SRV-TEMP"
|
|
set src-address "TELEPIN-SINGTEL-SRV1"
|
|
set src-address "TELEPIN-SINGTEL-SRV2"
|
|
set src-address "TELEPIN-SINGTEL-SRV3"
|
|
set src-address "TELEPIN-SINGTEL-SRV4"
|
|
set dst-address "ENSWDAPP1"
|
|
set dst-address "ENSWDAPP2"
|
|
set log session-init
|
|
exit
|
|
set policy id 112 from "Untrust" to "Trust_US" "TELEPIN-FTP" "ENSBDFTP1" "FTP" permit log
|
|
set policy id 112
|
|
set src-address "TELEPIN-SINGTEL-SRV-TEMP"
|
|
set dst-address "ENSWDAPP-CLUSTER"
|
|
set service "SSH"
|
|
set log session-init
|
|
exit
|
|
set policy id 115 from "Trust_US" to "Untrust" "ENSWDAPP-CLUSTER" "Dial-Up VPN" "ANY" tunnel vpn "SINGTEL-USERS-DIALIN" id 0xe8 pair-policy 114 log
|
|
set policy id 115
|
|
set log session-init
|
|
exit
|
|
set policy id 119 from "Untrust" to "Trust_US" "EN-IT-MAIL-SRV" "ENSB_DXB_US_NW" "SMTP" permit log
|
|
set policy id 119
|
|
set log session-init
|
|
exit
|
|
set policy id 144 from "Untrust" to "Trust_US" "SMS_Global_Production_SRVR1" "MIP(172.24.211.230)" "ANY" permit log
|
|
set policy id 144
|
|
exit
|
|
set policy id 143 from "Untrust" to "Trust_US" "SMS_Global_DR_SRVR1" "MIP(172.25.211.230)" "ANY" permit log
|
|
set policy id 143
|
|
exit
|
|
set policy id 145 from "Trust_US" to "Untrust" "en.More Web Servers" "MEA-WSs" "ANY" permit log
|
|
set policy id 145
|
|
set log session-init
|
|
exit
|
|
set policy id 146 from "Untrust" to "Trust_US" "MEA-WSs" "en.More Web Servers" "HTTPS" permit log
|
|
set policy id 146
|
|
set log session-init
|
|
exit
|
|
set syslog config "192.168.206.111"
|
|
set syslog config "192.168.206.111" facilities local0 local0
|
|
set syslog config "192.168.206.111" port 1513
|
|
set syslog enable
|
|
set log exclude-id 1 event-type 8
|
|
unset log module system level information destination syslog
|
|
unset log module system level emergency destination webtrends
|
|
unset log module system level alert destination webtrends
|
|
unset log module system level notification destination webtrends
|
|
unset log module system level emergency destination usb
|
|
unset log module system level alert destination usb
|
|
unset log module system level critical destination usb
|
|
unset log module system level error destination usb
|
|
unset log module system level warning destination usb
|
|
unset log module system level notification destination usb
|
|
unset log module system level information destination usb
|
|
unset log module system level debugging destination usb
|
|
set nsmgmt bulkcli reboot-timeout 60
|
|
set ssh version v2
|
|
set ssh enable
|
|
set scp enable
|
|
set config lock timeout 5
|
|
unset license-key auto-update
|
|
set telnet client enable
|
|
set ssl port 2443
|
|
set snmp community "SSG520" Read-Only Trap-on traffic version v1
|
|
set snmp host "SSG520" 192.168.206.111/32 src-interface ethernet0/0 trap v1
|
|
set snmp port listen 161
|
|
set snmp port trap 162
|
|
set snmpv3 local-engine id "JN1208243ADA"
|
|
set vrouter "untrust-vr"
|
|
exit
|
|
set vrouter "trust-vr"
|
|
unset add-default-route
|
|
set route 172.28.0.0/28 interface tunnel.2 gateway 10.20.0.200 preference 20
|
|
set route 172.22.0.0/16 interface tunnel.2 gateway 10.20.0.1 preference 20 metric 10
|
|
set route 10.82.0.0/16 interface tunnel.1 gateway 10.10.0.1 preference 20
|
|
set route 10.82.0.0/16 interface tunnel.2 gateway 10.20.0.1 preference 20 metric 10
|
|
set route 10.82.110.0/24 interface ethernet0/2 gateway 91.75.72.1 preference 20
|
|
set route 10.91.0.0/16 interface ethernet0/1 gateway 192.168.207.1 preference 20
|
|
set route 172.22.0.0/28 interface tunnel.1 gateway 10.10.0.200 preference 20
|
|
set route 172.22.0.0/28 interface tunnel.2 gateway 10.20.0.200 preference 20 metric 10
|
|
set route 10.95.115.0/24 interface ethernet0/1 gateway 192.168.207.1 preference 20
|
|
set route 192.168.246.0/24 interface tunnel.3 gateway 10.30.0.1 preference 20
|
|
set route 192.168.246.0/24 interface tunnel.4 gateway 10.30.0.129 preference 20 metric 10
|
|
set route 192.168.247.0/24 interface ethernet0/1 gateway 192.168.207.1 preference 20
|
|
set route 172.22.0.64/26 interface tunnel.1 gateway 10.10.0.100 preference 20
|
|
set route 172.22.0.64/26 interface tunnel.2 gateway 10.20.0.100 preference 20 metric 10
|
|
set route 172.22.0.128/26 interface tunnel.1 gateway 10.10.0.105 preference 20
|
|
set route 172.22.0.128/26 interface tunnel.2 gateway 10.20.0.105 preference 20 metric 10
|
|
set route 172.22.0.192/26 interface tunnel.1 gateway 10.10.0.110 preference 20
|
|
set route 172.22.0.192/26 interface tunnel.2 gateway 10.20.0.110 preference 20 metric 10
|
|
set route 172.22.1.192/26 interface tunnel.1 gateway 10.10.0.130 preference 20
|
|
set route 172.22.1.192/26 interface tunnel.2 gateway 10.20.0.130 preference 20 metric 10
|
|
set route 172.22.1.128/26 interface tunnel.1 gateway 10.10.0.125 preference 20
|
|
set route 172.22.1.128/26 interface tunnel.2 gateway 10.20.0.125 preference 20 metric 10
|
|
set route 172.22.1.64/26 interface tunnel.1 gateway 10.10.0.120 preference 20
|
|
set route 172.22.1.64/26 interface tunnel.2 gateway 10.20.0.120 preference 20 metric 10
|
|
set route 172.22.1.0/26 interface tunnel.1 gateway 10.10.0.115 preference 20
|
|
set route 172.22.1.0/26 interface tunnel.2 gateway 10.20.0.115 preference 20 metric 10
|
|
set route 172.22.2.64/26 interface tunnel.1 gateway 10.10.0.140 preference 20
|
|
set route 172.22.2.64/26 interface tunnel.2 gateway 10.20.0.140 preference 20 metric 10
|
|
set route 172.28.0.64/26 interface tunnel.11 gateway 10.40.0.100 preference 20
|
|
set route 172.28.0.128/26 interface tunnel.11 gateway 10.40.0.105 preference 20
|
|
set route 172.28.0.192/26 interface tunnel.11 gateway 10.40.0.110 preference 20
|
|
set route 172.28.0.0/16 interface null preference 20 metric 999
|
|
set route 172.22.2.192/26 interface tunnel.1 gateway 10.10.0.150 preference 20
|
|
set route 172.22.2.192/26 interface tunnel.2 gateway 10.20.0.150 preference 20 metric 10
|
|
set route 172.22.2.128/26 interface tunnel.1 gateway 10.10.0.145 preference 20
|
|
set route 172.22.2.128/26 interface tunnel.2 gateway 10.20.0.145 preference 20 metric 10
|
|
set route 192.168.111.0/24 interface tunnel.13 gateway 10.60.0.1 preference 20
|
|
set route 192.168.111.0/24 interface tunnel.14 gateway 10.60.0.129 preference 20 metric 10
|
|
set route 172.22.3.64/26 interface tunnel.1 gateway 10.10.0.160 preference 20
|
|
set route 172.28.1.64/26 interface tunnel.11 gateway 10.40.0.115 preference 20
|
|
set route 172.28.1.128/26 interface tunnel.11 gateway 10.40.0.120 preference 20
|
|
set route 172.22.2.0/26 interface tunnel.1 gateway 10.10.0.135 preference 20
|
|
set route 172.22.3.0/26 interface tunnel.1 gateway 10.10.0.155 preference 20
|
|
set route 172.22.4.64/26 interface tunnel.1 gateway 10.10.0.175 preference 20
|
|
set route 172.22.3.128/26 interface tunnel.2 gateway 10.20.0.170 preference 20 metric 10
|
|
set route 172.22.4.64/26 interface tunnel.2 gateway 10.20.0.175 preference 20 metric 10
|
|
set route 172.28.1.192/26 interface tunnel.11 gateway 10.40.0.125 preference 20
|
|
set route 172.28.2.0/26 interface tunnel.11 gateway 10.40.0.130 preference 20
|
|
set route 172.22.0.0/16 interface tunnel.3 gateway 10.30.0.1 preference 20 metric 100
|
|
set route 172.22.0.0/16 interface tunnel.4 gateway 10.30.0.129 preference 20 metric 110
|
|
set route 172.22.3.128/26 interface tunnel.1 gateway 10.10.0.170 preference 20
|
|
set route 172.22.4.128/26 interface tunnel.1 gateway 10.10.0.180 preference 20
|
|
set route 172.22.4.128/26 interface tunnel.2 gateway 10.20.0.180 preference 20 metric 10
|
|
set route 172.22.5.0/26 interface tunnel.1 gateway 10.10.0.185 preference 20
|
|
set route 172.22.5.0/26 interface tunnel.2 gateway 10.20.0.185 preference 20 metric 10
|
|
set route 172.28.2.64/26 interface tunnel.11 gateway 10.40.0.135 preference 20
|
|
set route 172.28.2.128/26 interface tunnel.11 gateway 10.40.0.140 preference 20
|
|
set route 172.22.3.192/26 interface tunnel.1 gateway 10.10.0.165 preference 20
|
|
set route 172.22.3.192/26 interface tunnel.2 gateway 10.20.0.165 preference 20 metric 10
|
|
set route 192.168.216.0/23 interface ethernet0/0 gateway 192.168.206.4 metric 10 description "ENSB-JO-NW"
|
|
set route 0.0.0.0/0 interface ethernet0/2 gateway 80.227.254.193 metric 2
|
|
set route 0.0.0.0/0 interface ethernet0/2 gateway 80.227.254.194 metric 3
|
|
set route 0.0.0.0/0 interface ethernet0/2 gateway 80.227.254.195 metric 4
|
|
set route 172.22.5.64/26 interface tunnel.1 gateway 10.10.0.195
|
|
set route 172.22.5.64/26 interface tunnel.2 gateway 10.20.0.195 metric 20
|
|
set route 172.22.5.128/26 interface tunnel.1 gateway 10.10.0.200 description "NIBPPKKA_DR"
|
|
set route 172.22.5.128/26 interface tunnel.2 gateway 10.20.0.200 metric 10 description "NIBPPKKA_DR"
|
|
set route 172.28.2.192/26 interface tunnel.11 gateway 10.40.0.145 description "CAGPBMHM-DR-GWCP-LL"
|
|
set route 10.149.11.0/24 interface ethernet0/0 gateway 192.168.206.7 description "ROUTE TO SSL-VPN-MGMT-NW"
|
|
set route 192.168.196.0/24 interface tunnel.7 gateway 10.70.0.20 description "DC NOC"
|
|
set route 193.43.238.248/30 interface tunnel.15 gateway 3.3.3.3
|
|
set route 172.28.2.128/26 interface tunnel.12 gateway 10.50.0.140 description "CAGPBMHM-FMHS-LL2"
|
|
set route 172.22.6.0/26 interface tunnel.1 gateway 10.10.0.210 description "SAUDPKKA-GWCP"
|
|
set route 172.22.6.64/26 interface tunnel.1 gateway 10.10.0.215 description "SAUDPKKA-DRCP-LL"
|
|
set route 172.22.6.128/26 interface tunnel.1 gateway 10.10.0.220 preference 20
|
|
set route 172.22.6.128/26 interface tunnel.2 gateway 10.20.0.220 preference 20 metric 10
|
|
set route 80.84.22.1/32 interface ethernet3/3 gateway 80.227.254.225
|
|
set route 213.132.35.201/32 interface ethernet3/3 gateway 80.227.254.225 description "For testing with EHDF, Delete"
|
|
set route 213.154.75.226/32 interface ethernet3/3 gateway 80.227.254.225 description "MoneyExpress-VPN"
|
|
set route 192.168.214.108/32 interface ethernet3/0 gateway 192.168.211.1
|
|
set route 84.45.85.251/32 interface ethernet3/3 gateway 80.227.254.225 description "Remit Public IP 1"
|
|
set route 84.45.85.253/32 interface ethernet3/3 gateway 80.227.254.225 description "Remit Public IP 2"
|
|
set route 84.45.85.222/32 interface ethernet3/3 gateway 80.227.254.225 description "Remit Public IP 3"
|
|
set route 172.22.6.192/26 interface tunnel.1 gateway 10.10.0.225 description "BURJPKKA-DRCP-LL"
|
|
set route 192.168.214.107/32 interface ethernet3/0 gateway 192.168.211.1
|
|
set route 10.254.240.128/28 interface tunnel.18 gateway 7.7.7.7 description "ENSB-TELEPIN-LL"
|
|
set route 202.40.237.153/32 interface tunnel.18 gateway 7.7.7.7 description "ENSB-TELEPIN-LL-FTP"
|
|
set route 202.40.237.144/29 interface tunnel.18 gateway 7.7.7.7 description "ENSB-TELEPIN-LL"
|
|
set route 172.22.7.0/26 interface tunnel.1 gateway 10.10.0.235 description "DUIBPKKA-DRCP-LL"
|
|
set route 172.22.7.0/26 interface tunnel.2 gateway 10.20.0.235 description "DUIBPKKA-DRCP-ISDN"
|
|
set route 192.168.216.0/23 interface tunnel.10 gateway 10.100.0.15
|
|
set route 172.22.7.64/26 interface tunnel.1 gateway 10.10.0.240 description "EEC_en.More-LL"
|
|
set route 84.45.85.199/32 interface ethernet3/3 gateway 80.227.254.225 description "Remit Public IP 4"
|
|
set route 84.45.85.195/32 interface ethernet3/3 gateway 80.227.254.225 description "Remit Public IP 5"
|
|
set route 192.168.2.0/24 interface tunnel.20 gateway 11.11.11.11 description "EN-IT-LL"
|
|
set route 203.89.198.148/32 interface ethernet3/3 gateway 80.227.254.225 description "SMS_Global_Production_Route"
|
|
set route 59.167.123.81/32 interface ethernet3/3 gateway 80.227.254.225 description "SMS_Global_DR_Route"
|
|
set route 203.89.193.162/32 interface tunnel.21 gateway 8.8.8.8 description "SMS_Global_Production-Tunnel"
|
|
set route 59.167.123.105/32 interface tunnel.22 gateway 9.9.9.9 description "SMS_Global_DR-Tunnel"
|
|
set route 172.22.7.128/26 interface tunnel.1 gateway 10.10.0.245 description "NBPAPKKA-DRCP-LL"
|
|
set route 172.22.7.128/26 interface tunnel.1 gateway 10.10.0.250 description "MEA_en.More-LL"
|
|
exit
|
|
set vrouter "untrust-vr"
|
|
set protocol pim
|
|
exit
|
|
exit
|
|
set vrouter "trust-vr"
|
|
exit
|