hostname ASAPUSH
enable password 2KFQnbNIdI.2KYOU encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
!
interface Ethernet0/0
 switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
 switchport access vlan 5
!
interface Vlan1
 nameif navsteva
 security-level 100
 ip address 192.168.32.1 255.255.255.0 
!
interface Vlan2
 nameif outside
 security-level 0
 ip address [IP] [MASKA]
!
interface Vlan5
 nameif pushmail
 security-level 100
 ip address 192.168.33.1 255.255.255.0 
!
ftp mode passive
dns server-group DefaultDNS
 domain-name firma.sk
object network obj_any
 subnet 0.0.0.0 0.0.0.0
object network navsteva-obj
 subnet 192.168.32.0 255.255.255.0
 description objekt predstavujuci siet navsteva, pre ktory chcem povolit PAT
object network pushmail-obj
 subnet 192.168.33.0 255.255.255.0
 description objekt predstavujuci siet pushmail, pre ktory chcem povolit PAT
object-group network sietova-skupina-navsteva-push
 network-object 192.168.32.0 255.255.255.0
 network-object 192.168.33.0 255.255.255.0
access-list outside_access_in remark povolenie odpovede na prikaz ping
access-list outside_access_in extended permit icmp any 192.168.32.0 255.255.255.0 echo-reply 
access-list outside_access_in remark toto povoli prichod ostatnych ICMP paketov z Internetu dnu
access-list outside_access_in extended permit icmp any object-group sietova-skupina-navsteva-push 
pager lines 24
logging enable
logging asdm informational
mtu outside 1500
mtu navsteva 1500
mtu pushmail 1500
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
!
object network navsteva-obj
 nat (navsteva,outside) dynamic interface
object network pushmail-obj
 nat (pushmail,outside) dynamic interface
access-group outside_access_in in interface outside
route outside 0.0.0.0 0.0.0.0 195.12.128.145 1
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
http server enable
http 192.168.32.0 255.255.255.0 pushmail
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
telnet 192.168.33.0 255.255.255.0 pushmail
telnet timeout 5
ssh 192.168.32.0 255.255.255.0 pushmail
ssh timeout 5
console timeout 0

dhcpd auto_config outside
!
dhcpd address 192.168.32.5-192.168.32.254 navsteva
dhcpd enable navsteva
dhcpd address 192.168.33.5-192.168.33.254 navsteva
dhcpd enable pushmail
!
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
webvpn
username michal password ..vk0XqAed1YBUHU encrypted privilege 15
username pushadmin password ..5321ecad1YA3ce5 encrypted privilege 15
!
class-map inspection_default
 match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
 parameters
  message-length maximum client auto
  message-length maximum 512
policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map 
  inspect ftp 
  inspect h323 h225 
  inspect h323 ras 
  inspect rsh 
  inspect rtsp 
  inspect esmtp 
  inspect sqlnet 
  inspect skinny  
  inspect sunrpc 
  inspect xdmcp 
  inspect sip  
  inspect netbios 
  inspect tftp 
  inspect ip-options 
!
service-policy global_policy global
prompt hostname context 
no call-home reporting anonymous
Cryptochecksum:97705bac8617fc0c983a2768113eb984
: end
