Sie sind auf Seite 1von 15

cisco4006#show run

Building configuration...

Current configuration : 26644 bytes


!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
service compress-config
!
hostname cisco4006
!
boot system bootflash:cat4000-is-mz.121-8a.EW1.bin
no logging console
enable secret 5 $1$RM65$zBiOxEmDPgmNbBzhwzLKq/
!
ip subnet-zero
no ip domain-lookup
!
!
spanning-tree vlan 1 priority 28672
spanning-tree vlan 2 priority 28672
spanning-tree vlan 3 priority 28672
spanning-tree vlan 4 priority 28672
spanning-tree vlan 5 priority 28672
spanning-tree vlan 6 priority 28672
spanning-tree vlan 7 priority 28672
spanning-tree vlan 8 priority 28672
spanning-tree vlan 9 priority 28672
spanning-tree vlan 10 priority 28672
spanning-tree vlan 11 priority 28672
spanning-tree vlan 12 priority 28672
spanning-tree vlan 13 priority 28672
spanning-tree vlan 14 priority 28672
spanning-tree vlan 15 priority 28672
spanning-tree vlan 16 priority 28672
spanning-tree vlan 17 priority 28672
spanning-tree vlan 18 priority 28672
spanning-tree vlan 19 priority 28672
spanning-tree vlan 20 priority 28672
spanning-tree vlan 21 priority 28672
spanning-tree vlan 22 priority 28672
spanning-tree vlan 25 priority 28672
!
!
interface GigabitEthernet1/1
switchport trunk encapsulation dot1q
switchport mode trunk
no snmp trap link-status
!
interface GigabitEthernet1/2
no snmp trap link-status
!
interface GigabitEthernet2/1
switchport access vlan 7
no snmp trap link-status
!
interface GigabitEthernet2/2
switchport access vlan 7
no snmp trap link-status
!
interface GigabitEthernet2/3
no snmp trap link-status
!
interface GigabitEthernet2/4
no snmp trap link-status
!
interface GigabitEthernet2/5
no snmp trap link-status
!
interface GigabitEthernet2/6
no snmp trap link-status
!
interface GigabitEthernet3/1
switchport access vlan 12
no snmp trap link-status
!
interface GigabitEthernet3/2
switchport access vlan 12
no snmp trap link-status
!
interface GigabitEthernet3/3
switchport access vlan 12
no snmp trap link-status
!
interface GigabitEthernet3/4
switchport access vlan 15
no snmp trap link-status
!
interface GigabitEthernet3/5
switchport access vlan 19
no snmp trap link-status
!
interface GigabitEthernet3/6
switchport access vlan 3
no snmp trap link-status
!
interface GigabitEthernet3/7
switchport access vlan 11
no snmp trap link-status
!
interface GigabitEthernet3/8
switchport access vlan 3
no snmp trap link-status
!
interface GigabitEthernet3/9
switchport access vlan 10
no snmp trap link-status
!
interface GigabitEthernet3/10
switchport access vlan 10
no snmp trap link-status
!
interface GigabitEthernet3/11
switchport access vlan 6
no snmp trap link-status
!
interface GigabitEthernet3/12
switchport access vlan 6
no snmp trap link-status
!
interface GigabitEthernet3/13
switchport access vlan 6
no snmp trap link-status
!
interface GigabitEthernet3/14
switchport access vlan 5
no snmp trap link-status
!
interface GigabitEthernet3/15
switchport access vlan 8
no snmp trap link-status
!
interface GigabitEthernet3/16
switchport access vlan 7
no snmp trap link-status
!
interface GigabitEthernet3/17
switchport access vlan 12
no snmp trap link-status
!
interface GigabitEthernet3/18
switchport access vlan 7
no snmp trap link-status
!
interface GigabitEthernet3/19
switchport access vlan 3
no snmp trap link-status
!
interface GigabitEthernet3/20
switchport access vlan 7
no snmp trap link-status
!
interface GigabitEthernet3/21
no snmp trap link-status
!
interface GigabitEthernet3/22
no snmp trap link-status
!
interface GigabitEthernet3/23
switchport access vlan 70
no snmp trap link-status
!
interface GigabitEthernet3/24
switchport access vlan 3
no snmp trap link-status
!
interface FastEthernet6/1
switchport access vlan 7
no snmp trap link-status
!
interface FastEthernet6/2
switchport access vlan 7
no snmp trap link-status
!
interface FastEthernet6/3
switchport access vlan 7
no snmp trap link-status
!
interface FastEthernet6/4
switchport access vlan 7
no snmp trap link-status
!
interface FastEthernet6/5
switchport access vlan 6
no snmp trap link-status
!
interface FastEthernet6/6
switchport access vlan 3
no snmp trap link-status
!
interface FastEthernet6/7
switchport access vlan 6
no snmp trap link-status
!
interface FastEthernet6/8
switchport access vlan 6
no snmp trap link-status
!
interface FastEthernet6/9
switchport access vlan 7
no snmp trap link-status
!
interface FastEthernet6/10
switchport access vlan 7
no snmp trap link-status
!
interface FastEthernet6/11
switchport access vlan 13
no snmp trap link-status
!
interface FastEthernet6/12
switchport access vlan 8
no snmp trap link-status
!
interface FastEthernet6/13
switchport access vlan 7
no snmp trap link-status
!
interface FastEthernet6/14
switchport access vlan 11
no snmp trap link-status
!
interface FastEthernet6/15
switchport access vlan 2
no snmp trap link-status
!
interface FastEthernet6/16
switchport access vlan 13
no snmp trap link-status
!
interface FastEthernet6/17
switchport access vlan 14
no snmp trap link-status
!
interface FastEthernet6/18
switchport access vlan 14
no snmp trap link-status
!
interface FastEthernet6/19
switchport access vlan 4
no snmp trap link-status
!
interface FastEthernet6/20
switchport access vlan 4
no snmp trap link-status
!
interface FastEthernet6/21
switchport access vlan 12
no snmp trap link-status
!
interface FastEthernet6/22
switchport access vlan 12
no snmp trap link-status
!
interface FastEthernet6/23
switchport access vlan 10
no snmp trap link-status
!
interface FastEthernet6/24
switchport access vlan 10
no snmp trap link-status
!
interface FastEthernet6/25
switchport access vlan 3
no snmp trap link-status
!
interface FastEthernet6/26
switchport access vlan 3
no snmp trap link-status
!
interface FastEthernet6/27
switchport access vlan 3
no snmp trap link-status
!
interface FastEthernet6/28
switchport access vlan 15
no snmp trap link-status
!
interface FastEthernet6/29
switchport access vlan 26
no snmp trap link-status
!
interface FastEthernet6/30
switchport access vlan 5
no snmp trap link-status
!
interface FastEthernet6/31
switchport access vlan 6
no snmp trap link-status
!
interface FastEthernet6/32
switchport access vlan 15
no snmp trap link-status
!
interface FastEthernet6/33
switchport access vlan 15
no snmp trap link-status
!
interface FastEthernet6/34
switchport access vlan 15
no snmp trap link-status
!
interface FastEthernet6/35
switchport access vlan 16
no snmp trap link-status
!
interface FastEthernet6/36
switchport access vlan 4
no snmp trap link-status
!
interface FastEthernet6/37
switchport access vlan 17
no snmp trap link-status
!
interface FastEthernet6/38
switchport access vlan 3
no snmp trap link-status
!
interface FastEthernet6/39
switchport access vlan 70
no snmp trap link-status
!
interface FastEthernet6/40
switchport access vlan 18
no snmp trap link-status
!
interface FastEthernet6/41
switchport access vlan 6
no snmp trap link-status
!
interface FastEthernet6/42
switchport access vlan 18
no snmp trap link-status
!
interface FastEthernet6/43
switchport access vlan 10
no snmp trap link-status
!
interface FastEthernet6/44
switchport access vlan 6
no snmp trap link-status
!
interface FastEthernet6/45
switchport access vlan 18
no snmp trap link-status
!
interface FastEthernet6/46
switchport access vlan 21
no snmp trap link-status
!
interface FastEthernet6/47
switchport access vlan 70
no snmp trap link-status
!
interface FastEthernet6/48
switchport access vlan 7
no snmp trap link-status
!
interface Vlan1
ip address 192.168.254.1 255.255.255.0
!
interface Vlan2
ip address 192.168.2.13 255.255.255.0
!
interface Vlan3
ip address 168.1.206.1 255.255.0.0
!
interface Vlan4
ip address 222.96.206.100 255.255.255.0
ip access-group net222 out
!
interface Vlan5
ip address 192.168.0.250 255.255.255.0
ip access-group net0 out
!
interface Vlan6
ip address 192.168.201.1 255.255.255.0
ip access-group net201 out
!
interface Vlan7
ip address 192.168.200.1 255.255.255.0
ip access-group net200 out
!
interface Vlan8
ip address 192.168.202.1 255.255.255.0
ip access-group net202 out
!
interface Vlan9
ip address 10.5.86.33 255.255.255.0
!
interface Vlan10
ip address 192.168.212.1 255.255.255.0
ip access-group net212 out
!
interface Vlan11
ip address 192.168.203.1 255.255.255.0
ip access-group net203 out
!
interface Vlan12
ip address 192.168.213.1 255.255.255.0
ip access-group net213 out
!
interface Vlan13
ip address 192.168.204.1 255.255.255.0
ip access-group net204 out
!
interface Vlan14
ip address 192.168.205.1 255.255.255.0
ip access-group net205 out
!
interface Vlan15
ip address 192.168.207.1 255.255.255.0
ip access-group net207 out
!
interface Vlan16
ip address 192.168.210.1 255.255.255.0
!
interface Vlan17
ip address 192.168.209.1 255.255.255.0
!
interface Vlan18
ip address 172.16.10.250 255.255.255.0
!
interface Vlan19
ip address 192.168.199.1 255.255.255.0
!
interface Vlan21
ip address 192.168.206.1 255.255.255.0
ip access-group net206 out
!
interface Vlan22
ip address 192.168.221.1 255.255.255.0
ip access-group net221 in
!
interface Vlan25
no ip address
shutdown
!
interface Vlan26
ip address 192.168.208.254 255.255.255.0
!
interface Vlan70
ip address 10.12.13.245 255.255.255.0
!
ip classless
ip route 10.0.0.3 255.255.255.255 192.168.200.13
ip route 10.5.82.0 255.255.255.0 10.5.86.1
ip route 10.5.83.0 255.255.255.0 10.5.86.1
ip route 10.5.84.0 255.255.255.0 10.5.86.1
ip route 10.5.91.0 255.255.255.0 10.5.86.1
ip route 10.12.0.0 255.255.240.0 10.12.13.254
ip route 10.12.0.0 255.255.255.0 10.12.13.254
ip route 10.192.1.0 255.255.255.0 192.168.200.13
ip route 192.168.1.0 255.255.255.0 192.168.208.1
ip route 192.168.209.0 255.255.255.0 168.1.0.5
ip route 192.168.214.0 255.255.255.0 192.168.208.1
ip route 202.96.201.7 255.255.255.255 192.168.200.13
ip route 211.94.36.100 255.255.255.255 192.168.200.13
ip http server
!
!
ip access-list extended net0
permit ip host 168.1.1.200 192.168.0.144 0.0.0.15
permit ip host 168.1.1.35 192.168.0.144 0.0.0.15
permit ip 192.168.200.0 0.0.0.255 any
permit ip 192.168.206.0 0.0.0.255 any
permit ip 192.168.212.0 0.0.1.255 any
deny ip 192.168.0.0 0.0.255.255 any
deny ip 172.16.0.0 0.15.255.255 any
deny ip 222.96.206.0 0.0.0.255 any
permit ip host 10.12.0.1 host 192.168.0.32
permit ip host 10.12.0.1 host 192.168.0.33
permit ip host 10.12.0.1 host 192.168.0.34
permit ip host 168.1.1.35 host 192.168.0.39
permit ip host 168.1.1.200 host 192.168.0.39
permit ip host 10.12.0.1 host 192.168.0.100
permit ip host 10.12.0.1 host 192.168.0.80
permit ip host 168.1.201.53 any
deny ip 168.1.0.0 0.0.255.255 any
permit ip host 10.12.0.1 host 192.168.0.97
permit ip host 10.12.0.1 host 192.168.0.49
permit ip host 10.12.0.9 host 192.168.0.34
deny ip 10.0.0.0 0.255.255.255 any
permit ip any any
ip access-list extended net168
permit tcp any host 168.1.1.35 eq 1433
permit tcp any host 168.1.1.35 eq 139
permit tcp any host 168.1.1.35 eq ftp
permit tcp any host 168.1.1.35 eq ftp-data
permit tcp any host 168.1.1.200 eq 1433
permit tcp any host 168.1.101.169 eq 1433
permit tcp any host 168.1.169.46 eq 1433
permit tcp any host 168.1.169.46 eq ftp
permit tcp any host 168.1.169.46 eq ftp-data
permit tcp any host 168.1.169.46 eq 139
permit ip 192.168.212.0 0.0.1.255 any
permit ip any 168.1.201.0 0.0.0.31
permit ip any 168.1.161.0 0.0.0.7
permit ip any 168.1.200.0 0.0.0.7
permit ip host 192.168.201.59 host 168.1.201.75
permit ip host 192.168.201.59 host 168.1.154.1
permit ip 192.168.209.0 0.0.0.255 any
permit ip 10.12.0.0 0.0.255.255 168.1.161.0 0.0.0.255
permit ip 192.168.200.0 0.0.0.255 any
permit ip any host 168.1.201.53
permit ip host 192.168.201.59 host 168.1.161.210
permit ip host 192.168.205.147 host 168.1.1.35
permit ip any host 168.1.201.60
permit ip host 192.168.201.59 host 168.1.201.57
permit ip host 192.168.201.165 host 168.1.1.35
permit ip host 10.12.0.9 any
permit ip host 10.12.0.8 any
permit ip host 192.168.201.244 host 168.1.201.56
permit ip host 10.12.0.1 host 168.1.201.123
permit ip host 10.12.0.1 host 168.1.201.122
permit ip host 10.12.0.1 host 168.1.201.44
permit ip host 10.12.0.1 host 168.1.201.121
permit ip host 10.12.0.1 host 168.1.201.124
permit ip host 192.168.201.59 host 168.1.201.105
permit ip host 192.168.201.71 host 168.1.201.105
permit ip host 192.168.207.144 any
ip access-list extended net200
permit icmp any any
permit ip 192.168.212.0 0.0.1.255 192.168.200.0 0.0.0.255
permit tcp any host 192.168.200.11 eq 1352
permit tcp any host 192.168.200.11 eq www
permit tcp any host 192.168.200.12 eq 1352
permit tcp any host 192.168.200.12 eq www
permit ip any host 192.168.200.14
permit ip 168.1.0.0 0.0.255.255 host 192.168.200.22
permit tcp any host 192.168.200.15 eq www
permit tcp any host 192.168.200.15 eq 81
permit tcp any host 192.168.200.15 eq 8080
permit tcp any host 192.168.200.16 eq www
permit tcp any host 192.168.200.16 eq 81
permit tcp any host 192.168.200.16 eq 8080
permit ip 192.168.201.32 0.0.0.1 10.192.1.0 0.0.0.255
permit ip 192.168.201.32 0.0.0.1 host 211.94.36.100
permit ip 222.96.206.212 0.0.0.3 10.192.1.0 0.0.0.255
permit ip 222.96.206.212 0.0.0.3 host 211.94.36.100
permit ip 168.1.201.0 0.0.0.15 192.168.200.0 0.0.0.255
permit tcp host 192.168.2.1 eq 1433 192.168.200.0 0.0.0.255
permit tcp host 168.1.1.200 eq 1433 192.168.200.0 0.0.0.255
permit ip host 222.96.206.214 host 202.96.201.7
permit ip host 222.96.206.216 host 202.96.201.7
permit ip host 168.1.161.6 host 192.168.200.15
permit ip host 168.1.201.105 host 192.168.200.15
permit ip any host 192.168.200.20
permit ip host 192.168.213.15 host 192.168.200.22
permit ip host 168.1.222.14 host 192.168.200.11
permit ip host 168.1.222.14 host 192.168.200.12
permit ip any host 192.168.200.9
permit ip host 192.168.200.12 host 168.1.77.133
permit ip host 192.168.200.11 host 168.1.77.133
permit ip host 168.1.77.133 host 192.168.200.11
permit ip host 168.1.77.133 host 192.168.200.12
permit ip any host 192.168.200.13
permit ip 192.168.200.0 0.0.0.255 any
permit ip any host 192.168.200.22
permit ip host 192.168.200.22 any
permit ip 168.1.0.0 0.0.255.255 host 192.168.200.11
permit ip 168.1.0.0 0.0.255.255 host 192.168.200.31
permit ip 168.1.0.0 0.0.255.255 host 192.168.200.32
permit ip host 168.1.201.101 host 192.168.200.20
permit ip host 168.1.201.7 host 192.168.200.20
permit ip 168.1.0.0 0.0.255.255 host 192.168.200.20
permit ip host 168.1.201.53 host 192.168.200.30
permit ip host 10.12.0.1 host 192.168.200.30
permit ip any host 192.168.200.30
permit ip host 10.12.0.1 host 192.168.200.12
ip access-list extended net201
permit ip host 168.1.1.35 192.168.201.144 0.0.0.15
permit ip host 168.1.1.200 192.168.201.144 0.0.0.15
permit ip host 168.1.169.46 192.168.201.144 0.0.0.15
permit ip host 168.1.154.1 host 192.168.201.59
permit ip host 168.1.201.75 host 192.168.201.59
permit ip 192.168.200.0 0.0.0.255 any
permit ip 192.168.206.0 0.0.0.255 any
permit ip 192.168.212.0 0.0.1.255 any
permit ip 10.192.1.0 0.0.0.255 192.168.201.32 0.0.0.1
permit ip host 192.168.200.20 host 192.168.201.68
deny ip 172.16.0.0 0.15.255.255 any
deny ip 10.0.0.0 0.255.255.255 any
permit ip any host 192.168.200.22
permit ip host 192.168.200.22 any
permit ip host 168.1.201.53 any
permit ip any host 168.1.201.53
permit ip host 168.1.161.210 host 192.168.201.59
permit ip host 168.1.201.57 host 192.168.201.59
permit ip host 168.1.1.35 host 192.168.201.165
permit ip host 168.1.1.200 host 192.168.201.165
permit ip host 168.1.201.56 host 192.168.201.244
permit ip host 168.1.1.35 host 192.168.201.160
permit ip host 168.1.1.200 host 192.168.201.160
permit ip host 222.96.206.68 host 192.168.201.154
permit ip host 222.96.206.68 host 192.168.201.155
deny ip 222.96.206.0 0.0.0.255 any
permit ip host 168.1.201.105 host 192.168.201.59
deny ip 168.1.0.0 0.0.255.255 any
deny ip 192.168.0.0 0.0.255.255 any
permit ip any any
ip access-list extended net202
permit ip 192.168.200.0 0.0.0.255 any
permit ip 192.168.212.0 0.0.1.255 any
permit ip host 168.1.1.35 192.168.202.144 0.0.0.15
permit ip host 168.1.1.200 192.168.202.144 0.0.0.15
permit ip host 168.1.169.46 192.168.202.144 0.0.0.15
deny ip 192.168.0.0 0.0.255.255 any
deny ip 172.16.0.0 0.15.255.255 any
permit ip host 222.96.206.9 host 192.168.202.9
deny ip 222.96.206.0 0.0.0.255 any
permit ip 10.12.0.0 0.0.255.255 host 192.168.202.153
permit ip host 168.1.201.53 any
deny ip 168.1.0.0 0.0.255.255 any
permit ip 10.12.0.0 0.0.255.255 host 192.168.202.105
deny ip 10.0.0.0 0.255.255.255 any
permit ip any any
ip access-list extended net203
permit ip 192.168.200.0 0.0.0.255 any
permit ip 192.168.212.0 0.0.1.255 any
permit ip host 168.1.1.35 192.168.203.144 0.0.0.15
permit ip host 168.1.1.200 192.168.203.144 0.0.0.15
permit ip host 168.1.169.46 192.168.203.144 0.0.0.15
permit ip host 222.96.206.9 host 192.168.203.9
permit ip host 192.168.203.208 host 192.168.200.9
permit ip host 192.168.200.9 any
permit ip any host 192.168.200.9
deny ip 172.16.0.0 0.15.255.255 any
deny ip 10.0.0.0 0.255.255.255 any
deny ip 222.96.206.0 0.0.0.255 any
permit ip any host 192.168.200.22
permit ip host 192.168.200.22 any
permit ip host 168.1.1.35 192.168.203.0 0.0.0.67
permit ip host 168.1.1.200 192.168.203.0 0.0.0.67
deny ip 192.168.0.0 0.0.255.255 any
permit ip host 168.1.201.53 any
permit ip host 168.1.201.60 any
deny ip 168.1.0.0 0.0.255.255 any
permit ip any any
ip access-list extended net204
permit ip 192.168.200.0 0.0.0.255 any
permit ip 192.168.212.0 0.0.1.255 any
deny ip 192.168.0.0 0.0.255.255 any
deny ip 168.1.0.0 0.0.255.255 any
deny ip 172.16.0.0 0.15.255.255 any
deny ip 222.96.206.0 0.0.0.255 any
permit ip 10.12.0.0 0.0.255.255 host 192.168.204.119
permit ip 10.12.0.0 0.0.255.255 host 192.168.204.241
permit ip 10.12.0.0 0.0.255.255 host 192.168.204.145
permit ip 10.12.0.0 0.0.255.255 host 192.168.204.125
deny ip 10.0.0.0 0.255.255.255 any
permit ip any any
ip access-list extended net205
permit ip host 168.1.1.200 192.168.205.144 0.0.0.15
permit ip host 168.1.1.35 192.168.205.144 0.0.0.15
permit ip host 168.1.169.46 192.168.205.144 0.0.0.15
permit ip 192.168.200.0 0.0.0.255 any
permit ip 192.168.212.0 0.0.1.255 any
deny ip 172.16.0.0 0.15.255.255 any
deny ip 222.96.206.0 0.0.0.255 any
deny ip 10.0.0.0 0.255.255.255 any
permit ip any host 192.168.200.22
permit ip host 192.168.200.22 any
deny ip 192.168.0.0 0.0.255.255 any
permit ip host 168.1.201.53 any
deny ip 168.1.0.0 0.0.255.255 any
permit ip any any
ip access-list extended net206
deny ip 192.168.200.0 0.0.0.255 any
deny ip 192.168.212.0 0.0.1.255 any
deny ip 192.168.208.0 0.0.3.255 any
deny ip 172.16.0.0 0.15.255.255 any
deny ip 168.1.1.0 0.0.0.255 any
deny ip host 168.1.101.169 any
deny ip host 168.1.169.46 any
deny ip host 168.1.9.28 any
deny ip host 168.1.220.1 any
deny ip host 168.1.207.1 any
permit ip 10.192.1.0 0.0.0.255 any
permit ip host 10.0.0.3 any
deny ip 10.0.0.0 0.255.255.255 any
permit ip any any
ip access-list extended net207
permit ip host 168.1.1.35 192.168.207.144 0.0.0.15
permit ip host 168.1.1.200 192.168.207.144 0.0.0.15
permit ip host 168.1.169.46 192.168.207.144 0.0.0.15
permit ip 192.168.200.0 0.0.0.255 any
permit ip 192.168.212.0 0.0.1.255 any
permit ip 10.5.80.0 0.0.6.255 any
permit ip 192.168.207.0 0.0.0.255 any
permit ip 10.12.0.0 0.0.255.255 host 192.168.207.149
deny ip 192.168.0.0 0.0.255.255 any
deny ip 172.16.0.0 0.15.255.255 any
deny ip 222.96.206.0 0.0.0.255 any
permit ip 192.168.207.0 0.0.0.255 host 192.168.213.13
permit ip host 168.1.201.53 any
permit ip 10.12.0.0 0.0.255.255 host 192.168.207.150
permit ip 10.12.0.0 0.0.255.255 host 192.168.207.151
deny ip 10.0.0.0 0.255.255.255 any
permit ip any host 192.168.207.144
deny ip 168.1.0.0 0.0.255.255 any
permit ip any any
ip access-list extended net21
ip access-list extended net212
permit ip 192.168.212.0 0.0.0.255 any
permit ip 192.168.200.0 0.0.0.255 192.168.212.0 0.0.0.255
permit tcp 168.1.0.0 0.0.255.255 192.168.212.0 0.0.0.255 eq www
permit tcp 192.168.200.0 0.0.7.255 192.168.212.0 0.0.0.255 eq www
permit tcp 222.96.206.0 0.0.0.255 192.168.212.0 0.0.0.255 eq www
permit tcp host 192.168.2.1 192.168.212.0 0.0.0.255 eq www
permit tcp 10.5.86.0 0.0.0.255 192.168.212.0 0.0.0.255 eq www
permit tcp 10.5.84.0 0.0.0.255 192.168.212.0 0.0.0.255 eq www
permit tcp 192.168.0.0 0.0.0.255 192.168.212.0 0.0.0.255 eq www
permit ip 168.1.201.0 0.0.0.15 192.168.212.0 0.0.0.255
permit ip 168.1.161.0 0.0.0.15 192.168.212.0 0.0.0.255
permit ip host 192.168.205.154 host 192.168.212.14
permit ip host 168.1.161.151 host 192.168.212.14
permit ip host 168.1.201.53 host 192.168.212.14
permit ip host 192.168.205.12 host 192.168.212.14
permit ip host 192.168.200.30 host 192.168.212.14
permit ip host 192.168.205.209 host 192.168.212.14
ip access-list extended net213
permit ip 192.168.213.0 0.0.0.255 any
permit ip 168.1.0.0 0.0.255.255 host 192.168.213.12
permit ip 192.168.200.0 0.0.7.255 host 192.168.213.12
permit ip 192.168.0.0 0.0.0.255 host 192.168.213.12
permit ip 222.96.206.0 0.0.0.255 host 192.168.213.12
permit ip 168.1.0.0 0.0.255.255 host 192.168.213.22
permit ip 192.168.200.0 0.0.7.255 host 192.168.213.22
permit ip 192.168.0.0 0.0.0.255 host 192.168.213.22
permit ip 222.96.206.0 0.0.0.255 host 192.168.213.22
permit ip 168.1.0.0 0.0.255.255 host 192.168.213.11
permit ip 168.1.0.0 0.0.255.255 host 192.168.213.21
permit ip host 168.1.201.8 host 192.168.213.13
permit tcp host 168.1.201.7 host 192.168.213.13 eq www
permit ip 222.96.206.0 0.0.0.255 host 192.168.213.11
permit ip 192.168.0.0 0.0.255.255 host 192.168.213.11
permit ip host 192.168.200.22 host 192.168.213.15
permit ip host 192.168.205.123 host 192.168.213.102
permit ip host 222.96.206.68 host 192.168.213.13
permit ip host 192.168.205.126 host 192.168.213.102
permit ip host 222.96.206.222 host 192.168.213.13
permit ip host 192.168.201.63 host 192.168.213.164
permit ip host 222.96.206.34 host 192.168.213.13
permit ip 168.1.0.0 0.0.255.255 host 192.168.213.13
permit ip 222.96.206.0 0.0.0.255 host 192.168.213.13
permit ip 192.168.203.0 0.0.0.255 host 192.168.213.13
permit ip 192.168.205.0 0.0.0.255 host 192.168.213.13
permit ip 192.168.207.0 0.0.0.255 host 192.168.213.13
permit ip 192.168.201.0 0.0.0.255 host 192.168.213.13
permit ip 192.168.0.0 0.0.0.255 host 192.168.213.13
permit ip 192.168.214.0 0.0.0.255 host 192.168.213.11
permit ip 192.168.214.0 0.0.0.255 host 192.168.213.13
ip access-list extended net221
permit ip 192.168.221.0 0.0.0.255 192.168.200.0 0.0.0.255
permit ip 192.168.221.0 0.0.0.255 192.168.212.0 0.0.1.255
permit ip 192.168.221.0 0.0.0.255 192.168.206.0 0.0.0.255
deny ip 192.168.221.0 0.0.0.255 192.168.0.0 0.0.255.255
deny ip 192.168.221.0 0.0.0.255 172.16.0.0 0.0.255.255
deny ip 192.168.221.0 0.0.0.255 168.1.0.0 0.0.255.255
deny ip 192.168.221.0 0.0.0.255 222.96.206.0 0.0.0.255
permit ip any any
ip access-list extended net222
permit ip host 168.1.1.35 222.96.206.144 0.0.0.15
permit ip host 168.1.1.200 222.96.206.144 0.0.0.15
permit ip 192.168.200.0 0.0.0.255 any
permit ip 192.168.212.0 0.0.1.255 any
permit ip 10.192.1.0 0.0.0.255 222.96.206.212 0.0.0.3
permit ip host 202.96.201.7 host 222.96.206.214
permit ip host 202.96.201.7 host 222.96.206.216
deny ip 172.16.0.0 0.15.255.255 any
deny ip 10.0.0.0 0.255.255.255 any
permit ip host 192.168.202.9 host 222.96.206.9
permit ip host 192.168.203.9 host 222.96.206.9
permit ip any host 192.168.200.22
permit ip host 192.168.200.22 any
deny ip 192.168.0.0 0.0.255.255 any
permit ip host 168.1.201.53 any
deny ip 168.1.0.0 0.0.255.255 any
permit ip any any
ip access-list extended nethtbt
ip access-list extended nettohtbt
permit tcp any host 10.12.0.1 eq www
permit tcp any host 10.12.0.1 eq 1521
permit tcp any host 10.12.0.1 eq 8921
permit tcp any host 10.12.0.1 eq 13245
permit tcp any host 10.12.0.1 eq ftp
permit udp any host 10.12.0.1 eq 8922
permit tcp any host 10.12.0.1 eq 40109
permit tcp any host 10.12.0.1 eq 12525
permit tcp any host 10.12.0.1 eq 22189
permit tcp any host 10.12.0.1 eq 9080
permit tcp any host 10.12.0.1 eq telnet
permit tcp any host 10.12.0.1 eq ftp-data
permit ip host 168.1.161.2 host 10.12.0.1
permit tcp any host 10.12.0.1 eq 12524
permit udp any host 10.12.0.1 eq netbios-ns
permit ip host 168.1.161.209 host 10.12.0.1
permit ip host 168.1.161.171 host 10.12.0.1
permit ip host 168.1.201.7 host 10.12.0.1
permit tcp any host 10.12.0.1 eq 40178
permit ip host 168.1.161.161 host 10.12.0.1
permit ip host 168.1.161.43 host 10.12.0.1
permit ip host 168.1.161.208 host 10.12.0.1
permit ip host 168.1.161.36 host 10.12.0.1
permit ip host 168.1.161.39 host 10.12.0.1
permit ip host 168.1.161.104 host 10.12.0.1
permit ip host 168.1.161.107 host 10.12.0.1
permit ip host 168.1.161.108 host 10.12.0.1
permit ip host 168.1.161.109 host 10.12.0.1
permit tcp any host 10.12.0.1 eq 8080
permit ip host 168.1.161.109 host 10.12.0.9
permit ip host 168.1.161.171 host 10.12.0.9
permit ip host 168.1.201.7 host 10.12.0.9
permit ip host 168.1.201.7 host 10.12.0.8
permit ip host 168.1.161.220 host 10.12.0.9
permit ip 168.1.161.0 0.0.0.255 host 10.12.0.9
permit ip host 168.1.201.120 host 10.12.0.1
permit ip host 168.1.201.121 host 10.12.0.1
permit ip host 168.1.201.122 host 10.12.0.1
permit ip host 168.1.201.123 host 10.12.0.1
permit ip host 168.1.201.120 host 10.12.0.9
permit ip host 168.1.201.121 host 10.12.0.9
permit ip host 168.1.201.122 host 10.12.0.9
permit ip host 168.1.201.123 host 10.12.0.9
permit ip host 192.168.200.30 host 10.12.0.1
permit ip host 168.1.161.45 host 10.12.0.1
permit ip host 168.1.161.45 host 10.12.0.1
permit ip host 168.1.201.44 host 10.12.0.9
permit ip host 168.1.201.44 host 10.12.0.1
permit ip host 168.1.201.1 host 10.12.0.9
permit ip host 168.1.201.120 host 10.12.0.8
permit ip host 168.1.201.124 host 10.12.0.1
permit ip host 168.1.201.124 host 10.12.0.9
permit ip host 192.168.200.12 host 10.12.0.1
permit ip host 192.168.0.34 host 10.12.0.9
route-map permit permit 10
!
snmp-server community public RO
!
line con 0
stopbits 1
line vty 0 4
password jiangning1207
login
!
!
monitor session 1 source vlan 3 - 4 , 7 , 10 - 12
monitor session 1 destination interface Gi3/8
end

Das könnte Ihnen auch gefallen