unset key protection enable set clock timezone 6 set clock dst recurring start-weekday 2 0 3 02:00 end-weekday

1 0 11 02:00 set vrouter trust-vr sharable set vrouter "untrust-vr" exit set vrouter "trust-vr" unset auto-route-export exit set vrouter name "VR-1025" id 1025 unset vrouter "VR-1025" nsrp-config-sync set vrouter "VR-1025" unset auto-route-export set preference nhrp 100 set preference ospf-e2 254 exit set service "HTTP" timeout 5 set service "SERVERDM" protocol tcp src-port 30000-30000 dst-port 30000-30000 set service "http-8080" protocol tcp src-port 1024-65535 dst-port 8080-8080 set service "http-8081" protocol tcp src-port 1024-65535 dst-port 8081-8081 set service "http81" protocol tcp src-port 0-65535 dst-port 81-81 set service "NAS" protocol tcp src-port 0-65535 dst-port 9000-9000 set alg appleichat enable unset alg appleichat re-assembly enable set alg sctp enable set auth-server "Local" id 0 set auth-server "Local" server-name "Local" set auth default auth server "Local" set auth radius accounting port 1646 set admin name "netscreen" set admin password "nKVUM2rwMUzPcrkG5sWIHdCtqkAibn" set admin auth web timeout 10 set admin auth dial-in timeout 3 set admin auth server "Local" set admin format dos set vip multi-port set zone "Trust" vrouter "trust-vr" set zone "Untrust" vrouter "trust-vr" set zone "DMZ" vrouter "trust-vr" set zone "VLAN" vrouter "trust-vr" set zone "Untrust-Tun" vrouter "trust-vr" set zone "Trust" tcp-rst set zone "Untrust" block unset zone "Untrust" tcp-rst set zone "MGT" block unset zone "V1-Trust" tcp-rst unset zone "V1-Untrust" tcp-rst set zone "DMZ" block unset zone "DMZ" tcp-rst unset zone "V1-DMZ" tcp-rst unset zone "VLAN" tcp-rst set zone "Untrust" screen tear-drop set zone "Untrust" screen syn-flood set zone "Untrust" screen ping-death set zone "Untrust" screen ip-filter-src set zone "Untrust" screen land set zone "V1-Untrust" screen tear-drop set zone "V1-Untrust" screen syn-flood set zone "V1-Untrust" screen ping-death set zone "V1-Untrust" screen ip-filter-src

set zone "V1-Untrust" screen land set interface "ethernet0/0" zone "Untrust" set interface "ethernet0/1" zone "Untrust" set interface "ethernet0/2" zone "DMZ" set interface "bgroup0" zone "Trust" set interface "tunnel.1" zone "Untrust" set interface bgroup0 port ethernet0/3 set interface bgroup0 port ethernet0/4 unset interface vlan1 ip set interface ethernet0/0 ip 116.212.55.6/32 set interface ethernet0/0 route set interface ethernet0/1 ip 172.172.1.101/24 set interface ethernet0/1 route set interface bgroup0 ip 10.51.0.251/16 set interface bgroup0 nat set interface tunnel.1 ip 172.16.0.51/24 unset interface vlan1 bypass-others-ipsec unset interface vlan1 bypass-non-ip set interface ethernet0/0 ip manageable unset interface ethernet0/1 ip manageable set interface bgroup0 ip manageable set interface ethernet0/1 manage ping unset interface ethernet0/2 manage ping set interface ethernet0/0 vip interface-ip 8080 "HTTP" 10.51.0.242 manual set interface ethernet0/0 vip interface-ip 8081 "HTTP" 10.51.0.242 manual set interface ethernet0/0 vip interface-ip 21 "FTP" 10.51.0.2 manual set interface ethernet0/0 vip interface-ip 30000 "SERVERDM" 10.51.0.242 manual set interface ethernet0/0 vip interface-ip 81 "http81" 10.51.0.242 manual set interface ethernet0/0 vip interface-ip 9000 "NAS" 10.51.1.1 manual set interface ethernet0/1 dhcp client enable set interface bgroup0 dhcp server service set interface bgroup0 dhcp server auto set interface bgroup0 dhcp server option domainname home set interface bgroup0 dhcp server option dns1 172.172.1.1 set interface bgroup0 dhcp server option dns2 8.8.8.8 unset interface bgroup0 dhcp server config next-server-ip set interface "serial0/0" modem settings "USR" init "AT&F" set interface "serial0/0" modem settings "USR" active set interface "serial0/0" modem speed 115200 set interface "serial0/0" modem retry 3 set interface "serial0/0" modem interval 10 set interface "serial0/0" modem idle-time 10 set flow tcp-mss set flow all-tcp-mss 1304 unset flow no-tcp-seq-check set flow tcp-syn-check unset flow tcp-syn-bit-check set flow reverse-route clear-text prefer set flow reverse-route tunnel always set domain home set hostname ssg20_dienbien set pki authority default cert-status ocsp cert-verify hash "0E9290B27AA8BAF65D3 C9229AFE8F31DB953B2DA" set pki authority default scep mode "auto" set pki x509 default cert-path partial set pki x509 dn state-name "DIENBIEN" set pki x509 dn local-name "TPDienbien" set pki x509 dn org-name "PCDIENBIEN" set pki x509 dn org-unit-name "TTVT" set pki x509 dn name "hatan"

set pki x509 dn phone "0963666667" set dns host dns1 203.119.8.106 src-interface bgroup0 set dns host dns2 8.8.8.8 src-interface bgroup0 set dns host dns3 0.0.0.0 set dns host schedule 06:28 set dns ddns set dns ddns enable set address "Trust" "10.51.0.2/16" 10.51.0.2 255.255.0.0 set address "Trust" "10.51.0.242/16" 10.51.0.242 255.255.0.0 set address "Trust" "10.51.0.85/16" 10.51.0.85 255.255.0.0 set address "Trust" "116.212.55.6/32" 116.212.55.6 255.255.255.255 set address "Trust" "LAN" 10.51.0.0 255.255.0.0 set address "Trust" "PCTAN" 10.51.0.85 255.255.0.0 set address "Trust" "Trust_LAN" 10.51.0.0 255.255.0.0 set address "Trust" "WEB_SERVER_TEST" 10.51.0.2 255.255.0.0 "WEBSERVERTEST" set address "Untrust" "LAN_cty" 10.21.0.0 255.255.248.0 set group service "SERVER_TEST" set group service "SERVER_TEST" add "FTP" set group service "SERVER_TEST" add "HTTP" set group service "SERVER_TEST" add "HTTPS" set group service "SERVER_TEST" add "TFTP" set ippool "l2-pool" 10.51.0.240 10.51.0.250 set user "tanhv" uid 1 set user "tanhv" type l2tp set user "tanhv" remote ippool "l2-pool" set user "tanhv" remote ipaddr "10.51.0.241" set user "tanhv" password "PXo4YRSKNIHn1nsrCMClpyYGz6nvEhql3w==" unset user "tanhv" type auth set user "tanhv" "enable" set crypto-policy exit set ike gateway "To_LAN_TCty" address 125.214.11.215 Aggr local-id "dienbien@npc .com.vn" outgoing-interface "ethernet0/0" preshare "UKkthRcPNdCZRSs2QkCAqQM9Opns 2lFnow==" sec-level standard set ike respond-bad-spi 1 set ike ikev2 ike-sa-soft-lifetime 60 unset ike ikeid-enumeration unset ike dos-protection unset ipsec access-session enable set ipsec access-session maximum 5000 set ipsec access-session upper-threshold 0 set ipsec access-session lower-threshold 0 set ipsec access-session dead-p2-sa-timeout 0 unset ipsec access-session log-error unset ipsec access-session info-exch-connected unset ipsec access-session use-error-log set vpn "TCty_TTVT_CNTT" gateway "To_LAN_TCty" no-replay tunnel idletime 0 sec-l evel standard set vpn "TCty_TTVT_CNTT" monitor rekey set vpn "TCty_TTVT_CNTT" id 0x1 bind interface tunnel.1 set vrouter "untrust-vr" exit set vrouter "trust-vr" exit set vrouter "VR-1025" exit set l2tp default dns1 10.51.0.1 set l2tp default ippool "l2-pool" set l2tp default ppp-auth chap set l2tp default wins1 10.51.0.1

set l2tp "l2-tunnel" id 1 outgoing-interface ethernet0/0 keepalive 60 set l2tp "l2-tunnel" remote-setting ippool "l2-pool" dns1 10.51.0.1 wins1 10.51. 0.1 set l2tp "l2-tunnel" auth server "Local" set url protocol websense exit set policy id 1 from "Trust" to "Untrust" "Any" "Any" "ANY" permit set policy id 1 exit set policy id 12 from "Untrust" to "Trust" "Dial-Up VPN" "Trust_LAN" "ANY" tunn el l2tp "l2-tunnel" set policy id 12 exit set policy id 14 from "Untrust" to "Trust" "Any" "VIP(ethernet0/0)" "ANY" permi t set policy id 14 exit set pppoe name "1" set pppoe name "1" username "test_dienbien_ftth2@ftth_mb" password "Zv2RUCHyNsk+ wMsfAhCymT3lpZnNFciaJBWsx/2msViG4Ywv+i3gRXQ=" set pppoe name "1" clear-on-disconnect unset pppoe name "1" enable set pppoe name "NPC" set pppoe name "NPC" username "test_dienbien002" password "oZN7fzO9N3Om+LsvagCQs 3D1W4nT8vtMGQ==" set pppoe name "NPC" idle 0 set pppoe name "NPC" ppp lcp-echo-timeout 30 set pppoe name "NPC" auto-connect 60 set pppoe name "NPC" clear-on-disconnect unset pppoe name "NPC" enable set pppoe name "NPC2" set pppoe name "NPC2" username "pcdb_dienbienpc" password "PyyAzNavNZyyvmshP3CBK 8zbGyny7wwhterMmo3KL7+rzQQge/Gt92k=" set pppoe name "NPC2" idle 0 set pppoe name "NPC2" interface ethernet0/0 set pppoe name "NPC2" ppp lcp-echo-timeout 30 set pppoe name "NPC2" auto-connect 300 set pppoe name "NPC2" clear-on-disconnect set nsmgmt report alarm traffic enable set nsmgmt report alarm attack enable set nsmgmt report alarm other enable set nsmgmt report alarm di enable set nsmgmt report log config enable set nsmgmt report log info enable set nsmgmt report log self enable set nsmgmt report log traffic enable set nsmgmt init id 771629E6D84E4E903F435580A9B09812CC2015C900 set nsmgmt server primary 10.21.0.59 port 7800 set nsmgmt bulkcli reboot-timeout 60 set nsmgmt hb-interval 20 set nsmgmt hb-threshold 5 set nsmgmt enable set ssh version v2 set config lock timeout 5 unset license-key auto-update set telnet client enable set snmp port listen 161 set snmp port trap 162 set vrouter "untrust-vr" exit

set vrouter "trust-vr" unset add-default-route set route 10.0.0.0/8 interface tunnel.1 gateway 172.16.0.2 set route 10.0.0.0/8 interface null metric 20 set route source 10.51.0.0/16 interface bgroup0 set route 0.0.0.0/0 vrouter "untrust-vr" preference 20 metric 1 set route source 10.51.0.0/0 vrouter "untrust-vr" preference 20 metric 1 exit set vrouter "VR-1025" set router-id 10.51.0.0 exit set vrouter "untrust-vr" exit set vrouter "trust-vr" exit set vrouter "VR-1025" exit

Sign up to vote on this title
UsefulNot useful