ns5gt->
ns5gt->
ns5gt->
ns5gt->
ns5gt->
ns5gt->
ns5gt->
ns5gt-> get config
Total Config size 6940:
set clock timezone 1
set vrouter trust-vr sharable
set vrouter "untrust-vr"
exit
set vrouter "trust-vr"
unset auto-route-export
exit
set auth-server "Local" id 0
set auth-server "Local" server-name "Local"
set auth default auth server "Local"
set auth radius accounting port 1646
set admin name "netscreen"
set admin password "nKVUM2rwMUzPcrkG5sWIHdCtqkAibn"
set admin auth timeout 10
set admin auth server "Local"
set admin format dos
set zone "Trust" vrouter "trust-vr"
set zone "Untrust" vrouter "trust-vr"
set zone "VLAN" vrouter "trust-vr"
set zone "Untrust-Tun" vrouter "trust-vr"
unset zone "Trust" tcp-rst
unset zone "Untrust" block
unset zone "Untrust" tcp-rst
set zone "MGT" block
set zone "VLAN" block
unset zone "VLAN" tcp-rst
set zone "Untrust" screen tear-drop
set zone "Untrust" screen syn-flood
set zone "Untrust" screen ping-death
set zone "Untrust" screen ip-filter-src
set zone "Untrust" screen land
set zone "V1-Untrust" screen tear-drop
set zone "V1-Untrust" screen syn-flood
set zone "V1-Untrust" screen ping-death
set zone "V1-Untrust" screen ip-filter-src
set zone "V1-Untrust" screen land
set interface "trust" zone "Trust"
set interface "untrust" zone "Untrust"
set interface "loopback.1" zone "Trust"
unset interface vlan1 ip
set interface trust ip 192.168.1.1/24
set interface trust route
set interface "untrust" ipv6 mode "host"
set interface "untrust" ipv6 ip 2001:738:10:3::2/64
set interface "untrust" ipv6 enable
set interface untrust route
set interface loopback.1 ip 1.1.1.1/24
set interface loopback.1 nat
unset interface vlan1 bypass-others-ipsec
unset interface vlan1 bypass-non-ip
set interface trust ip manageable
set interface loopback.1 ip manageable
set interface trust manage mtrace
set interface untrust manage ping
unset interface loopback.1 manage ssh
unset interface loopback.1 manage telnet
unset interface loopback.1 manage snmp
unset interface loopback.1 manage ssl
unset interface loopback.1 manage web
set interface untrust ipv6 nd nud
set interface trust dhcp server service
set interface trust dhcp server enable
set interface trust dhcp server option lease 1440000
set interface trust dhcp server option dns1 213.163.34.66
set interface trust dhcp server option dns2 62.77.203.10
set interface trust dhcp server ip 192.168.1.30 to 192.168.1.39
unset interface trust dhcp server config next-server-ip
unset interface trust dhcp server config updatable
set interface untrust dip 4 2001:738:10:3::10 2001:738:10:3::11
set interface "trust" mip 192.168.1.64 ipv6 prefix 2001:738:10:4::c0a8:141
/96 netmask 255.255.255.252 vr "trust-vr"
set flow tcp-mss
unset flow no-tcp-seq-check
set flow tcp-syn-check
set domain icnlab

set pki authority default scep mode "auto"
set pki x509 default cert-path partial
set dns proxy
set dns proxy enable
set address "Trust" "192.168.1.100/32" 192.168.1.100 255.255.255.255
set address "Trust" "pool00" 192.168.1.0 255.255.255.0
set address "Untrust" "pool01" 192.168.101.32 255.255.255.0
set address "Global" "ftp1" 211.20.1.10 255.255.255.255
set group address "Untrust" "group01"
set group address "Untrust" "group01" add "pool01"
set user "user01" uid 1
set user "user01" type  auth
set user "user01" hash-password "021ns+AmAYZjnejTh2blo0DtnDESapo84T3sE="
set user "user01" "enable"
set ike respond-bad-spi 1
unset ike ikeid-enumeration
unset ipsec access-session enable
set ipsec access-session maximum 5000
set ipsec access-session upper-threshold 0
set ipsec access-session lower-threshold 0
set ipsec access-session dead-p2-sa-timeout 0
unset ipsec access-session log-error
unset ipsec access-session info-exch-connected
unset ipsec access-session use-error-log
set av profile "scan-mgr"
set ftp scan-mode  scan-all
set ftp decompress-layer  2
set http scan-mode  scan-all
set imap scan-mode  scan-all
set imap decompress-layer  2
set pop3 scan-mode  scan-all
set pop3 decompress-layer  2
set smtp scan-mode  scan-all
set smtp decompress-layer  2
exit
set url protocol websense
exit
set policy id 19 from "Trust" to "Untrust"  "Any-IPv4" "MIP(192.168.1.64/3
0)" "ANY" nat src dip-id 4 permit no-session-backup
set policy id 19
exit
set policy id 7 name "ipv6" from "Trust" to "Untrust"  "Any-IPv6" "Any-IPv
6" "ANY" permit
set policy id 7 disable
set policy id 7
exit
set policy id 1 from "Trust" to "Untrust"  "Any-IPv4" "Any-IPv4" "ANY" per
mit traffic mbw 100
set policy id 1 disable
set policy id 1
exit
set policy id 8 from "Untrust" to "Trust"  "Any-IPv6" "Any-IPv6" "ANY" per
mit
set policy id 8 disable
set policy id 8
exit
set policy id 9 from "Untrust" to "Trust"  "Any-IPv4" "Any-IPv4" "ANY" per
mit
set policy id 9 disable
set policy id 9
exit
set policy id 11 name "FTP" from "Trust" to "Untrust"  "Any-IPv4" "Any-IPv
4" "FTP" permit no-session-backup traffic mbw 100
set policy id 11 disable
set policy id 11
exit
set policy id 12 name "TELNET" from "Trust" to "Untrust"  "Any-IPv4" "Any-
IPv4" "TELNET" permit no-session-backup traffic mbw 100
set policy id 12 disable
set policy id 12
exit
set policy id 13 name "SSH" from "Trust" to "Untrust"  "Any-IPv4" "Any-IPv
4" "SSH" permit no-session-backup traffic mbw 100
set policy id 13 disable
set policy id 13
exit
set policy id 14 name "HTTP" from "Trust" to "Untrust"  "Any-IPv4" "Any-IP
v4" "HTTP" permit no-session-backup traffic mbw 100
set policy id 14 disable
set policy id 14
exit
set policy id 15 name "FTP-IPv6" from "Trust" to "Untrust"  "Any-IPv6" "An
y-IPv6" "FTP" permit no-session-backup traffic mbw 100
set policy id 15 disable
set policy id 15
exit
set policy id 16 name "TELNET-IPv6" from "Trust" to "Untrust"  "Any-IPv6"
"Any-IPv6" "TELNET" permit no-session-backup traffic mbw 100
set policy id 16 disable
set policy id 16
exit
set policy id 17 name "SSH-IPv6" from "Trust" to "Untrust"  "Any-IPv6" "An
y-IPv6" "SSH" permit no-session-backup traffic mbw 100
set policy id 17 disable
set policy id 17
exit
set policy id 18 name "HTTP-IPv6" from "Trust" to "Untrust"  "Any-IPv6" "A
ny-IPv6" "HTTP" permit no-session-backup traffic mbw 100
set policy id 18 disable
set policy id 18
exit
set monitor cpu 100
set global-pro policy-manager primary outgoing-interface untrust
set global-pro policy-manager secondary outgoing-interface untrust
set nsmgmt bulkcli reboot-timeout 60
set ssh version v2
set config lock timeout 5
set ntp server "0.0.0.0"
set ntp server backup1 "0.0.0.0"
set ntp server backup2 "0.0.0.0"
set modem speed 115200
set modem retry 3
set modem interval 10
set modem idle-time 10
set snmp port listen 161
set snmp port trap 162
set vrouter "untrust-vr"
exit
set vrouter "trust-vr"
unset add-default-route
set route ::/0 interface untrust gateway 2001:738:10:3::1 preference 20
exit
set vrouter "untrust-vr"
exit
set vrouter "trust-vr"
exit