set clock timezone -8 set vrouter trust-vr sharable set vrouter "untrust-vr" exit set vrouter "trust-vr" unset auto-route-export exit set auth-server "Local" id 0 set auth-server "Local" server-name "Local" set auth default auth server "Local" set auth radius accounting port 1646 set admin name "admin" set admin password "nPS4BSr8CjDBcHACrsSEHEKtMxLTDn" set admin auth timeout 60 set admin auth server "Local" set admin format dos set zone "Trust" vrouter "trust-vr" set zone "Untrust" vrouter "trust-vr" set zone "DMZ" vrouter "trust-vr" set zone "VLAN" vrouter "trust-vr" set zone "Untrust-Tun" vrouter "trust-vr" set zone "Trust" tcp-rst set zone "Untrust" block unset zone "Untrust" tcp-rst set zone "DMZ" tcp-rst set zone "VLAN" block unset zone "VLAN" tcp-rst set zone "Untrust" screen tear-drop set zone "Untrust" screen syn-flood set zone "Untrust" screen ping-death set zone "Untrust" screen ip-filter-src set zone "Untrust" screen land set zone "V1-Untrust" screen tear-drop set zone "V1-Untrust" screen syn-flood set zone "V1-Untrust" screen ping-death set zone "V1-Untrust" screen ip-filter-src set zone "V1-Untrust" screen land set interface "ethernet0/0" zone "Untrust" set interface "ethernet0/1" zone "Null" set interface "wireless0/0" zone "Null" set interface "bgroup0" zone "Trust" set interface bgroup0 port ethernet0/1 set interface bgroup0 port ethernet0/2 set interface bgroup0 port ethernet0/3 set interface bgroup0 port ethernet0/4 set interface bgroup0 port ethernet0/5 set interface bgroup0 port ethernet0/6 set interface bgroup0 port wireless0/1 set interface bgroup0 port wireless0/3 unset interface vlan1 ip set interface ethernet0/0 ip 45.129.200.2/24 set interface ethernet0/0 route set interface bgroup0 ip 45.200.1.1/24 set interface bgroup0 route unset interface vlan1 bypass-others-ipsec unset interface vlan1 bypass-non-ip set interface ethernet0/0 ip manageable set interface bgroup0 ip manageable set interface ethernet0/0 manage ping set interface bgroup0 manage mtrace set interface "serial0/0" modem settings "USR" init "AT&F" set interface "serial0/0" modem settings "USR" active set interface "serial0/0" modem speed 115200 set interface "serial0/0" modem retry 3 set interface "serial0/0" modem interval 10 set interface "serial0/0" modem idle-time 10 set interface wireless0/0 shutdown set interface wireless0/2 shutdown set interface wireless0/3 shutdown set flow tcp-mss unset flow tcp-syn-check unset flow tcp-syn-bit-check set flow reverse-route clear-text prefer set flow reverse-route tunnel always set pki authority default scep mode "auto" set pki x509 default cert-path partial set address "Trust" "45.200.0.0/16" 45.200.0.0 255.255.0.0 set address "Trust" "45.200.1.80/32" 45.200.1.80 255.255.255.255 set address "Trust" "ad.corp" 45.200.1.98 255.255.255.255 "active directory server" set address "Trust" "Infrasun" 45.200.1.2 255.255.255.255 "DNS/DHCP/all that jazz" set address "Trust" "NAC Team /16 Subnet" 45.200.0.0 255.255.0.0 set address "Untrust" "207.179.9.4/32" 207.179.9.4 255.255.255.255 set address "Untrust" "Laptop Net" 45.128.0.0 255.255.0.0 "Laptop net for use by team" set address "Untrust" "VoIP Team Subnet" 45.210.0.0 255.255.0.0 set ike respond-bad-spi 1 unset ike ikeid-enumeration unset ike dos-protection unset ipsec access-session enable set ipsec access-session maximum 5000 set ipsec access-session upper-threshold 0 set ipsec access-session lower-threshold 0 set ipsec access-session dead-p2-sa-timeout 0 unset ipsec access-session log-error unset ipsec access-session info-exch-connected unset ipsec access-session use-error-log set vrouter "untrust-vr" exit set vrouter "trust-vr" exit set url protocol websense exit set policy id 1 from "Trust" to "Untrust" "Any" "Any" "ANY" permit set policy id 1 exit set policy id 2 name "Let DNS in" from "Untrust" to "Trust" "Any" "ad.corp" "DNS" permit set policy id 2 set dst-address "Infrasun" exit set policy id 3 name "Let VoIP Team in" from "Untrust" to "Trust" "VoIP Team Subnet" "NAC Team /16 Subnet" "ANY" permit set policy id 3 exit set policy id 4 name "Let Laptop net in" from "Untrust" to "Trust" "Laptop Net" "NAC Team /16 Subnet" "ANY" permit set policy id 4 exit set policy id 5 from "Untrust" to "Trust" "Any" "Infrasun" "ICMP-ANY" permit set policy id 5 exit set policy id 6 from "Trust" to "Trust" "Any" "Any" "ANY" permit log set policy id 6 exit set policy id 7 from "Untrust" to "Trust" "207.179.9.4/32" "45.200.0.0/16" "TELNET" permit log set policy id 7 exit set nsmgmt bulkcli reboot-timeout 60 set ssh version v2 set ssh enable set scp enable set config lock timeout 5 unset license-key auto-update set ntp server "0.0.0.0" set ntp server backup1 "0.0.0.0" set ntp server backup2 "0.0.0.0" set wlan 0 channel auto set wlan 1 channel auto set ssid name ILABSNAC set ssid ILABSNAC authentication wpa-psk passphrase tVS+vIkZNCA8Tlsh7WCLja9yU0nPRT+5Og== encryption auto set ssid ILABSNAC interface wireless1 set snmp port listen 161 set snmp port trap 162 set vrouter "untrust-vr" exit set vrouter "trust-vr" unset add-default-route set route 45.200.0.0/16 interface bgroup0 gateway 45.200.1.3 preference 20 set route 0.0.0.0/0 interface ethernet0/0 gateway 45.129.200.1 set route 45.200.21.0/24 interface bgroup0 gateway 45.200.1.64 preference 20 exit set vrouter "untrust-vr" exit set vrouter "trust-vr" exit