User admin logged in to ciscoasa

Logins over the last 90 days: 14. Last login: 16:53:01 IST Sep 23 2025 from
[Link]
Failed logins since the last login: 18. Last failed login: 18:12:44 IST Sep 23
2025 from [Link]
Type help or '?' for a list of available commands.
ciscoasa> en
Password: ********
ciscoasa# more system:running-config | include pre-shared-key
ikev1 pre-shared-key NacToKnack
ikev1 pre-shared-key Limited@12345678900987654321
ikev2 remote-authentication pre-shared-key vjco1234
ikev2 local-authentication pre-shared-key vjco1234
ikev1 pre-shared-key Cotovijayawada@Tunnel2
ikev1 pre-shared-key N@c09876543211234567890!@#$ecur1ty
ikev1 pre-shared-key N@c09876543211234567890!@#$ecur1ty
ikev1 pre-shared-key N@C$ecur1ty@123456789987654321
ikev1 pre-shared-key $ecur1tyN@C
ciscoasa# more system:running-config | include ipsec-attributes |pre-shared-key
ikev1 pre-shared-key NacToKnack
ikev1 pre-shared-key Limited@12345678900987654321
ikev2 remote-authentication pre-shared-key vjco1234
ikev2 local-authentication pre-shared-key vjco1234
ikev1 pre-shared-key Cotovijayawada@Tunnel2
ikev1 pre-shared-key N@c09876543211234567890!@#$ecur1ty
ikev1 pre-shared-key N@c09876543211234567890!@#$ecur1ty
ikev1 pre-shared-key N@C$ecur1ty@123456789987654321
ikev1 pre-shared-key $ecur1tyN@C
ciscoasa# more system:running-config
: Saved

:
: Serial Number: JAD2112086W
: Hardware: ASA5516, 8192 MB RAM, CPU Atom C2000 series 2416 MHz, 1 CPU (8 cores)
: Written by enable_15 at 18:19:08.427 IST Tue Sep 23 2025
!
ASA Version 9.12(4)56
!
hostname ciscoasa
enable password 9jNfZuG3TC5tCVH0 encrypted
service-module 1 keepalive-timeout 4
service-module 1 keepalive-counter 6
service-module sfr keepalive-timeout 4
service-module sfr keepalive-counter 6
names
no mac-address auto
ip local pool VPNPOOL [Link]-[Link] mask [Link]
ip local pool SSLVPN_POOL [Link]-[Link] mask [Link]
zone NACMPLS

!
interface GigabitEthernet1/1
shutdown
nameif INTERNAL
security-level 100
no ip address
policy-route route-map nactraffic
!
interface GigabitEthernet1/2
 description ACT
nameif OUTSIDE1
security-level 0
ip address [Link] [Link]
!
interface GigabitEthernet1/3
description You_Bor lLL
nameif OUTSIDE2
security-level 0
ip address [Link] [Link]
!
interface GigabitEthernet1/4
description MPLS-SIFY
nameif BUDANTA
security-level 0
ip address [Link] [Link]
!
interface GigabitEthernet1/5
description JIO_ILL
nameif JIO
security-level 0
ip address [Link] [Link]
!
interface GigabitEthernet1/6
description MPLS-TATA
shutdown
nameif MPLSTATA
security-level 50
zone-member NACMPLS
ip address [Link] [Link]
!
interface GigabitEthernet1/7
description Hathway
nameif Hathway
security-level 0
ip address [Link] [Link]
!
interface GigabitEthernet1/8
nameif LAN
security-level 100
ip address [Link] [Link]
policy-route route-map PBR3
!
interface Management1/1
management-only
nameif management
security-level 0
ip address [Link] [Link]
!
boot system disk0:/[Link]
ftp mode passive
clock timezone IST 5 30
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
object network NACLAN4
subnet [Link] [Link]
object network NACLAN5
subnet [Link] [Link]
object network MPLS-NETWORK
 subnet [Link] [Link]
object network ChitWeb-Local
host [Link]
object network MIS-Local_WebApp
host [Link]
object network MIS-Public_WebApp
host [Link]
object service RDP
service tcp destination eq 3389
object service SQL
service tcp destination eq 1433
object service http
service tcp destination eq www
object network Alive-Public
host [Link]
object network Alive-Local
host [Link]
object network TNAGAR
subnet [Link] [Link]
object network TNAGAR_CCTV
subnet [Link] [Link]
object network obj-[Link]
subnet [Link] [Link]
object network Annanagar
subnet [Link] [Link]
object network obj-[Link]
subnet [Link] [Link]
object network Perambur
subnet [Link] [Link]
object network obj-[Link]
subnet [Link] [Link]
object network velachery
subnet [Link] [Link]
object network obj-[Link]
subnet [Link] [Link]
object network Mylapore
subnet [Link] [Link]
object network Mylapore_cctv
subnet [Link] [Link]
object network obj-[Link]
subnet [Link] [Link]
object network Webapp-Local
host [Link]
object network Webapp-Public
host [Link]
object service ICMP
service icmp echo-reply
object network NAC_Webapp-Local
host [Link]
object network NAC_Webapp-Public
host [Link]
object service HRMS
service tcp destination eq 90
object network NETWORK_OBJ_192.168.21.0_24
subnet [Link] [Link]
object service Tcp_3340
service tcp destination eq 3340
object service Tcp_443
service tcp destination eq https
object service Tcp_7070
service tcp destination eq 7070
object network Vijayawada
subnet [Link] [Link]
object network NETWORK_OBJ_10.4.160.0_24
subnet [Link] [Link]
object network Vij61
host [Link]
description [Link]
object network NACVLAN169
subnet [Link] [Link]
object network NACVLAN160
subnet [Link] [Link]
object service Voice
service tcp source eq 29100 destination eq 29101
description Voice Vlan
object network VoiceVLAN171
subnet [Link] [Link]
object service https
service tcp destination eq https
object network NETWORK_OBJ_192.168.60.0
subnet [Link] [Link]
object network NETWORK_OBJ_192.168.61.0_24
subnet [Link] [Link]
object network VJ_CO_ACT
host [Link]
description ACT
object network NETWORK_OBJ_10.4.200.0_24
subnet [Link] [Link]
object network NETWORK_OBJ_10.4.168.0_24
subnet [Link] [Link]
object network SQL_Public_MobileApp
host [Link]
object network SQL_Private_MobileApp
host [Link]
object network HRMS-Public
host [Link]
object network HRMS-Local
host [Link]
object service tcp3666
service tcp destination eq 3666
object network NETWORK_OBJ_172.31.1.0_24
subnet [Link] [Link]
object network SyncServer-Local
host [Link]
object network SyncServer-Public
host [Link]
object network TestingDB-Public
host [Link]
object network TestingDB-Local
host [Link]
object network Cloud_Public_IP
host [Link]
object network Cloud_Private_Network
subnet [Link] [Link]
object network Cloud_Akshaya_Server
host [Link]
object network Local_LAN_161Cloud
subnet [Link] [Link]
object network Local_LAN_160Cloud
subnet [Link] [Link]
object network Local_LAN_162Cloud
subnet [Link] [Link]
object network Local_LAN_163Cloud
subnet [Link] [Link]
object network Local_LAN_164Cloud
subnet [Link] [Link]
object network Local_LAN_165Cloud
subnet [Link] [Link]
object network Local_LAN_166Cloud
subnet [Link] [Link]
object network Local_LAN_167Cloud
subnet [Link] [Link]
object network Local_LAN_168Cloud
subnet [Link] [Link]
object network Local_LAN_169Cloud
subnet [Link] [Link]
object network Local_LAN_170Cloud
subnet [Link] [Link]
object service Printer
service tcp destination eq 9100
object network Cloud_Savings_Server
host [Link]
object network obj_any
subnet [Link] [Link]
object network AZURE_GW
subnet [Link] [Link]
object service Tcp_1627
service tcp destination eq 1627
object network Kanchipuram
subnet [Link] [Link]
object network NETWORK_OBJ_192.168.40.0
subnet [Link] [Link]
object network NETWORK_OBJ_192.168.41.0
subnet [Link] [Link]
object network Testing_SyncPublic
host [Link]
object service SQL_1434
service tcp destination eq 1434
object network TrilokBabu
host [Link]
object network NETWORK_OBJ_192.168.25.0
subnet [Link] [Link]
object network NETWORK_OBJ_192.168.26.0
subnet [Link] [Link]
object network NETWORK_OBJ_10.5.160.0_24
subnet [Link] [Link]
object network NAS_Local
host [Link]
object service Tcp_FTP
service tcp destination eq ftp
object network Biometric_Local
host [Link]
object network Biometric_Public
host [Link]
object network CO_Server_New
host [Link]
object network Cloud_Server_Public
 host [Link]
object network Cloud_SyncPublic
host [Link]
object service TCP_1723
service tcp destination eq pptp
object network Tally_Server_Local
host [Link]
object network Tally_Server_Public
host [Link]
object service TCP_47
service tcp destination eq 47
object network CO_Server_Productweb_Private
host [Link]
object service Product_WebService
service tcp destination eq 81
object network CO_Server_Productweb_Public
host [Link]
object service Infinity_3306
service tcp destination eq 3306
object network Infinity_Local
host [Link]
object network Infinity_Public
host [Link]
object service infinity_8443
service tcp destination eq 8443
object network Alive-Act
host [Link]
object network OUTSIDE-ACT1
subnet [Link] [Link]
object network TallyPrime_Private
host [Link]
description TallyPrime_TSPlus
object network TallyPrime_Public
host [Link]
description TallyPrime_TSPlus
object network TallyPrime_Privte_209
host [Link]
object service RDP_4493
service tcp destination eq 4493
description TallyPrime_TSPlus
object network Tally_TSPlus
host [Link]
description TallyPrime_TSPlus
object network TAllyPrime_Public_YOUILL
host [Link]
description TallyPrime
object service RDP_BUSY
service tcp destination eq 4494
description BUSY_APP
object network BUSY_SERVER_PRIVATE
host [Link]
description BUSY_OUTSIDE
object network BUSY_SERVER_PUBLIC_YOUILL
host [Link]
description BUSY_sERVER
object network Infinity_public_Act
host [Link]
description infinity_outside
object network infinity_hathway
 host [Link]
description infinity_outside
object network Network_object_10.4.162.0_24
subnet [Link] [Link]
object network Network_object_10.4.163.0
subnet [Link] [Link]
object network Perambur_ACT
host [Link]
object network Testing_NAT
host [Link]
object service TESTING_NAT
service tcp destination eq 86
object network TESTING_NAT_ILL
host [Link]
object network TallypRIME_JIO
host [Link]
description JIO_ILL
object network INFINIY_JIO
host [Link]
description Infinity_outside JIO
object network HRMS_JIO
host [Link]
description HRMS_OUTSIDE JIO
object network JIO_nat
host [Link]
description JIO_NATING
object network JIO_ILL_GATEWAY
host [Link]
description JIO_GATEWAY
object network BIOMETRIC_JIO
host [Link]
description BIOMETRIC_OUTSIDE_JIO
object network CLOUDSYNC_JIO
host [Link]
description CLOUDSYNC_OUTSIDE_JIO
object network ALIVE_JIO
host [Link]
description ALIVE_JIO_OUTSIDE
object network JIO_ILL
host [Link]
description JIO_ILL
object network Biometric_NEW
host [Link]
description NEW
object service RDP_BIOMETRIC_NEW
service tcp destination eq 82
description BIOMETRIC_WEB SOFTWARE
object network Hathway
host [Link]
description Hathway Gateway
object network velachery_cctv
subnet [Link] [Link]
object network Perambur_cctv
subnet [Link] [Link]
object network Annanagar_cctv
subnet [Link] [Link]
object service Infinity_8080
service tcp destination eq 8080
object network MD_Residance_Data
 subnet [Link] [Link]
description RA PURAM
object network MD_RSEIDENCE_CCTV
subnet [Link] [Link]
description RA PURAM
object network NAP_JIO
host [Link]
description NAP_JIO
object network NAP_Local
host [Link]
description NAP_Local
object service RDP_TSPlus10163236
service tcp source eq 3389
object service RDP_TSPlus236
service tcp destination eq 3389
object service Essl_247
service tcp source eq 82
object network ESSL_Webserver
host [Link]
object service ESSL_WebPort
service tcp destination eq 82
object service Essl_Web
service tcp source eq 82
object network FTP_Server_249
host [Link]
object service FTP_Server231_Port
service tcp destination eq ftp
object service FTP_Server231_Webport
service tcp source eq ftp
object service FTP_249
service 21
object service FTP_249_1
service 21
object network FTP_LocalServer231
host [Link]
object network NAS_213
host [Link]
description NAS server
object network ACT
host [Link]
object network BIOMETRIC
host [Link]
object network BioMetric_ACT
host [Link]
description ACT_Natting
object network Biometric_HW
host [Link]
description HW_Natting
object service FTP
service tcp source eq ftp destination eq ftp
object network Gowtham
host [Link]
object network TEST
host [Link]
object network Unknown_IP
host [Link]
object network Aster_Dialer
host [Link]
object network unknown_Ip2
 host [Link]
object-group network DM_INLINE_NETWORK_1
network-object object NACLAN4
network-object object NACLAN5
object-group network DM_INLINE_NETWORK_2
network-object object NACLAN4
network-object object NACLAN5
object-group network MPLS_NETWORKS
network-object object TNAGAR
network-object object TNAGAR_CCTV
network-object object obj-[Link]
network-object object Annanagar
network-object object obj-[Link]
network-object object Perambur
network-object object obj-[Link]
network-object object velachery
network-object object obj-[Link]
network-object object Mylapore
network-object object Mylapore_cctv
network-object object obj-[Link]
object-group service DM_INLINE_SERVICE_1
service-object object http
service-object tcp destination eq echo
object-group service Tcp
service-object object Tcp_3340
service-object object Tcp_443
service-object object Tcp_7070
object-group network DM_INLINE_NETWORK_4
network-object object NETWORK_OBJ_10.4.160.0_24
network-object object NETWORK_OBJ_10.4.200.0_24
object-group service DM_INLINE_SERVICE_4
service-object ip
service-object object Tcp_443
service-object object https
service-object object Tcp_3340
service-object object Tcp_7070
object-group service DM_INLINE_SERVICE_5
service-object ip
service-object object Tcp_443
service-object object https
service-object object Tcp_3340
service-object object Tcp_7070
service-object object Infinity_3306
object-group network DM_INLINE_NETWORK_3
network-object object NETWORK_OBJ_192.168.61.0_24
network-object object obj-[Link]
object-group network DM_INLINE_NETWORK_5
network-object object NETWORK_OBJ_10.4.168.0_24
network-object object NETWORK_OBJ_10.4.200.0_24
network-object object NETWORK_OBJ_10.4.160.0_24
network-object object NETWORK_OBJ_10.5.160.0_24
object-group network DM_INLINE_NETWORK_6
network-object object NETWORK_OBJ_10.4.160.0_24
network-object object NETWORK_OBJ_10.4.168.0_24
network-object object NETWORK_OBJ_10.4.200.0_24
object-group network DM_INLINE_NETWORK_7
network-object object NETWORK_OBJ_192.168.60.0
network-object object NETWORK_OBJ_192.168.61.0_24
object-group network DM_INLINE_NETWORK_8
 network-object object NETWORK_OBJ_10.4.160.0_24
network-object object NETWORK_OBJ_10.4.168.0_24
network-object object NETWORK_OBJ_10.4.200.0_24
object-group network DM_INLINE_NETWORK_9
network-object object NETWORK_OBJ_192.168.60.0
network-object object NETWORK_OBJ_192.168.61.0_24
object-group service DM_INLINE_SERVICE_11
service-object ip
service-object tcp destination eq www
object-group service DM_INLINE_SERVICE_3
service-object ip
service-object object http
object-group network AzureNetworks
description Azure-Virtual-Network
network-object [Link] [Link]
object-group network DM_INLINE_NETWORK_11
network-object object NETWORK_OBJ_192.168.60.0
network-object object NETWORK_OBJ_192.168.61.0_24
object-group network AZURE-NET
description Azure vNet
network-object [Link] [Link]
network-object object AZURE_GW
object-group network ONPRIM-NET
description OnPrim Network
network-object [Link] [Link]
network-object [Link] [Link]
object-group network DM_INLINE_NETWORK_10
network-object object NETWORK_OBJ_10.4.160.0_24
network-object object NETWORK_OBJ_10.4.168.0_24
network-object object NETWORK_OBJ_10.4.200.0_24
network-object object NETWORK_OBJ_10.5.160.0_24
object-group network DM_INLINE_NETWORK_12
network-object object NETWORK_OBJ_192.168.40.0
network-object object NETWORK_OBJ_192.168.41.0
object-group network DM_INLINE_NETWORK_13
network-object object NETWORK_OBJ_10.4.160.0_24
network-object object NETWORK_OBJ_10.4.168.0_24
network-object object NETWORK_OBJ_10.4.200.0_24
network-object object NETWORK_OBJ_10.5.160.0_24
object-group network DM_INLINE_NETWORK_14
network-object object NETWORK_OBJ_192.168.40.0
network-object object NETWORK_OBJ_192.168.41.0
object-group network DM_INLINE_NETWORK_15
network-object object NETWORK_OBJ_10.4.160.0_24
network-object object NETWORK_OBJ_10.4.168.0_24
network-object object NETWORK_OBJ_10.4.200.0_24
network-object object NETWORK_OBJ_10.5.160.0_24
object-group network DM_INLINE_NETWORK_16
network-object object NETWORK_OBJ_192.168.40.0
network-object object NETWORK_OBJ_192.168.41.0
object-group network DM_INLINE_NETWORK_17
network-object object NETWORK_OBJ_10.4.160.0_24
network-object object NETWORK_OBJ_10.4.200.0_24
object-group network DM_INLINE_NETWORK_18
network-object object NETWORK_OBJ_192.168.40.0
network-object object NETWORK_OBJ_192.168.41.0
object-group network DM_INLINE_NETWORK_19
network-object object NETWORK_OBJ_192.168.40.0
network-object object NETWORK_OBJ_192.168.41.0
object-group network DM_INLINE_NETWORK_20
network-object object NETWORK_OBJ_10.4.160.0_24
network-object object NETWORK_OBJ_10.4.168.0_24
network-object object NETWORK_OBJ_10.4.200.0_24
object-group network DM_INLINE_NETWORK_21
network-object object NETWORK_OBJ_192.168.25.0
network-object object NETWORK_OBJ_192.168.26.0
object-group network DM_INLINE_NETWORK_22
network-object object NETWORK_OBJ_10.4.160.0_24
network-object object NETWORK_OBJ_10.4.168.0_24
network-object object NETWORK_OBJ_10.4.200.0_24
object-group network DM_INLINE_NETWORK_23
network-object object NETWORK_OBJ_192.168.25.0
network-object object NETWORK_OBJ_192.168.26.0
object-group network DM_INLINE_NETWORK_24
network-object object NETWORK_OBJ_10.4.160.0_24
network-object object NETWORK_OBJ_10.4.200.0_24
object-group network DM_INLINE_NETWORK_25
network-object object NETWORK_OBJ_192.168.25.0
network-object object NETWORK_OBJ_192.168.26.0
object-group network DM_INLINE_NETWORK_26
network-object object NETWORK_OBJ_192.168.25.0
network-object object NETWORK_OBJ_192.168.26.0
object-group service DM_INLINE_SERVICE_6
service-object object TCP_1723
service-object object TCP_47
object-group service DM_INLINE_SERVICE_7
service-object object Infinity_3306
service-object object http
service-object object infinity_8443
object-group service DM_INLINE_SERVICE_8
service-object object Infinity_3306
service-object object http
service-object object infinity_8443
object-group service DM_INLINE_SERVICE_12
service-object object TCP_1723
service-object object TCP_47
object-group service DM_INLINE_SERVICE_10
service-object object Infinity_3306
service-object tcp destination eq www
service-object object infinity_8443
object-group service DM_INLINE_SERVICE_2
service-object ip
service-object tcp destination eq www
object-group service DM_INLINE_SERVICE_9
service-object object TCP_1723
service-object object TCP_47
object-group service DM_INLINE_TCP_1 tcp
port-object eq echo
port-object eq www
object-group network DM_INLINE_NETWORK_27
network-object object NETWORK_OBJ_10.4.160.0_24
network-object object NETWORK_OBJ_10.4.168.0_24
network-object object NETWORK_OBJ_10.4.200.0_24
network-object object NETWORK_OBJ_10.5.160.0_24
object-group network DM_INLINE_NETWORK_28
network-object object NETWORK_OBJ_192.168.40.0
network-object object NETWORK_OBJ_192.168.41.0
object-group service DM_INLINE_SERVICE_13
 service-object object Infinity_3306
service-object object infinity_8443
object-group service DM_INLINE_TCP_2 tcp
port-object eq echo
port-object eq www
object-group network DM_INLINE_NETWORK_29
network-object object NETWORK_OBJ_10.4.160.0_24
network-object object NETWORK_OBJ_10.4.168.0_24
network-object object NETWORK_OBJ_10.4.200.0_24
object-group network DM_INLINE_NETWORK_30
network-object object MD_RSEIDENCE_CCTV
network-object object MD_Residance_Data
object-group network DIVERT_BACKUP
network-object object TEST
access-list sfr_redirect extended deny ip any host [Link]
access-list sfr_redirect extended deny ip host [Link] any
access-list sfr_redirect extended deny ip any [Link] [Link] inactive
access-list sfr_redirect extended deny ip any object-group MPLS_NETWORKS
access-list sfr_redirect extended permit ip any any
access-list NACLAN4TRAFFIC extended permit ip object NACLAN4 any
access-list NACLAN5TRAFFIC extended permit ip object NACLAN5 any
access-list MPLS extended permit ip object NACLAN4 object MPLS-NETWORK
access-list OUTSIDE1_access_in extended permit object ESSL_WebPort any object
Biometric_NEW inactive
access-list OUTSIDE1_access_in extended permit object RDP_TSPlus236 any object
Tally_TSPlus
access-list OUTSIDE1_access_in extended permit ip any any
access-list OUTSIDE1_access_in extended permit object FTP_Server231_Webport any
object FTP_LocalServer231
access-list OUTSIDE1_access_in extended permit object FTP_Server231_Webport any
object FTP_Server_249 inactive
access-list OUTSIDE1_access_in extended deny ip object Unknown_IP any
access-list OUTSIDE1_access_in extended deny ip any object Aster_Dialer
access-list OUTSIDE2_access_in extended permit object-group DM_INLINE_SERVICE_1 any
object CO_Server_Productweb_Private inactive
access-list OUTSIDE2_access_in extended permit object http any object MIS-
Local_WebApp inactive
access-list OUTSIDE2_access_in extended permit object-group DM_INLINE_SERVICE_3 any
object Alive-Local inactive
access-list OUTSIDE2_access_in extended permit object Tcp_1627 any object Alive-
Local inactive
access-list OUTSIDE2_access_in extended permit object http any object NAC_Webapp-
Local inactive
access-list OUTSIDE2_access_in extended permit object SQL any object
SQL_Private_MobileApp inactive
access-list OUTSIDE2_access_in extended permit object SQL any object
Biometric_Local inactive
access-list OUTSIDE2_access_in extended permit object SQL_1434 any object
SyncServer-Local inactive
access-list OUTSIDE2_access_in extended permit object SQL any object TestingDB-
Local inactive
access-list OUTSIDE2_access_in extended permit object SQL any object CO_Server_New
inactive
access-list OUTSIDE2_access_in extended permit object-group DM_INLINE_SERVICE_6 any
object Tally_Server_Local inactive
access-list OUTSIDE2_access_in extended permit object-group DM_INLINE_SERVICE_7 any
object Infinity_Local inactive
access-list OUTSIDE2_access_in extended permit object RDP_4493 any object
TallyPrime_Private inactive
access-list OUTSIDE2_access_in extended permit object RDP_BUSY any object
BUSY_SERVER_PRIVATE inactive
access-list OUTSIDE2_access_in extended permit object TESTING_NAT any object
Testing_NAT inactive
access-list OUTSIDE2_access_in extended permit ip object Unknown_IP any
access-list MPLS_access_in extended permit ip any object-group DM_INLINE_NETWORK_1
access-list MPLS_access_in extended deny ip object Unknown_IP any
access-list MPLS_access_in extended deny ip any object Aster_Dialer
access-list MPLS_access_in extended deny ip object Aster_Dialer any
access-list MPLS_access_in extended deny ip object unknown_Ip2 any
access-list ACT2 extended permit ip host [Link] any
access-list MPLSNAC extended permit ip any [Link] [Link]
access-list MPLSTATA_access_in extended permit ip any object-group
DM_INLINE_NETWORK_2
access-list MPLSTATA_access_in extended deny ip object Unknown_IP any
access-list LAN_access_in extended permit ip [Link] [Link] object
Vijayawada
access-list LAN_access_in extended permit object-group DM_INLINE_SERVICE_4 any any
access-list LAN_access_in extended deny ip object Unknown_IP any
access-list LAN_access_in extended deny ip any object Aster_Dialer
access-list LAN_access_in extended deny ip object Aster_Dialer any
access-list HRMS_splitTunnelAcl standard permit host [Link]
access-list OUTSIDE2_cryptomap extended permit ip object-group DM_INLINE_NETWORK_5
object-group DM_INLINE_NETWORK_11
access-list OUTSIDE2_cryptomap extended permit ip object NACLAN4 object obj-
[Link]
access-list IPSEC extended permit ip object NACLAN4 object Vijayawada
access-list OUTSIDE2_cryptomap_1 extended permit ip object NACLAN4 object
Vijayawada
access-list Velocity_access_in_1 extended permit ip object NACVLAN169 any
access-list vlan169 extended permit ip object NACVLAN169 any
access-list Velocity_access_in_2 extended permit ip object NACVLAN160 any
access-list vlan160 extended permit ip object NACVLAN160 any
access-list INTERNAL_access_in extended permit object-group DM_INLINE_SERVICE_5 any
any
access-list INTERNAL_access_in extended permit icmp any any
access-list INTERNAL_access_in extended deny ip object Unknown_IP any
access-list INTERNAL_access_in extended deny ip any object Aster_Dialer
access-list INTERNAL_access_in extended deny ip object Aster_Dialer any
access-list INTERNAL_access_in extended deny ip object unknown_Ip2 any
access-list ASA2 extended permit ip [Link] [Link] [Link]
[Link]
access-list acttraffic extended deny ip host [Link] any
access-list acttraffic extended deny ip [Link] [Link] [Link]
[Link]
access-list acttraffic extended deny ip [Link] [Link] [Link]
[Link]
access-list acttraffic extended deny ip [Link] [Link] [Link]
[Link]
access-list acttraffic extended deny ip [Link] [Link] [Link]
[Link]
access-list acttraffic extended deny ip [Link] [Link] [Link]
[Link]
access-list acttraffic extended deny ip [Link] [Link] [Link]
[Link]
access-list acttraffic extended deny ip [Link] [Link] [Link]
[Link] inactive
access-list acttraffic extended deny ip [Link] [Link] [Link]
[Link]
access-list acttraffic extended permit ip [Link] [Link] any
access-list acttraffic extended permit ip [Link] [Link] any
access-list acttraffic extended permit ip [Link] [Link] any
access-list acttraffic extended permit ip [Link] [Link] any
access-list acttraffic extended permit ip [Link] [Link] any
access-list acttraffic extended permit ip host [Link] any
access-list acttraffic extended permit ip [Link] [Link] any
access-list acttraffic extended permit ip [Link] [Link] any
access-list acttraffic extended permit ip [Link] [Link] any
access-list acttraffic extended permit ip [Link] [Link] any
access-list acttraffic extended permit ip [Link] [Link] any
access-list acttraffic extended permit ip [Link] [Link] any inactive
access-list acttraffic extended permit ip [Link] [Link] any
access-list acttraffic extended permit ip [Link] [Link] any inactive
access-list hathwaytraffic extended permit ip [Link] [Link] any
access-list hathwaytraffic extended permit ip host [Link] any inactive
access-list hathwaytraffic extended permit ip [Link] [Link] any
access-list hathwaytraffic extended permit ip [Link] [Link] any
access-list hathwaytraffic extended permit ip [Link] [Link] any
access-list hathwaytraffic extended permit ip [Link] [Link] any
access-list AnyConnect_Client_Local_Print extended deny ip any4 any4
access-list AnyConnect_Client_Local_Print extended permit tcp any4 any4 eq lpd
access-list AnyConnect_Client_Local_Print remark IPP: Internet Printing Protocol
access-list AnyConnect_Client_Local_Print extended permit tcp any4 any4 eq 631
access-list AnyConnect_Client_Local_Print remark Windows' printing port
access-list AnyConnect_Client_Local_Print extended permit tcp any4 any4 eq 9100
access-list AnyConnect_Client_Local_Print remark mDNS: multicast DNS protocol
access-list AnyConnect_Client_Local_Print extended permit udp any4 host [Link]
eq 5353
access-list AnyConnect_Client_Local_Print remark LLMNR: Link Local Multicast Name
Resolution protocol
access-list AnyConnect_Client_Local_Print extended permit udp any4 host [Link]
eq 5355
access-list AnyConnect_Client_Local_Print remark TCP/NetBIOS protocol
access-list AnyConnect_Client_Local_Print extended permit tcp any4 any4 eq 137
access-list AnyConnect_Client_Local_Print extended permit udp any4 any4 eq netbios-
ns
access-list sslvpn_access standard permit host [Link]
access-list sslvpn_access standard permit host [Link]
access-list sslvpn_access standard permit host [Link]
access-list JIO_access_in extended permit tcp any object
CO_Server_Productweb_Private object-group DM_INLINE_TCP_2
access-list JIO_access_in extended permit object-group DM_INLINE_SERVICE_11 any
object Alive-Local
access-list JIO_access_in extended permit object SQL any object Biometric_Local
access-list JIO_access_in extended permit object Tcp_1627 any object Alive-Local
access-list JIO_access_in extended permit object-group DM_INLINE_SERVICE_12 any
object Tally_Server_Local
access-list JIO_access_in extended permit object-group DM_INLINE_SERVICE_13 any
object Infinity_Local
access-list JIO_access_in extended permit object RDP any object Tally_TSPlus
inactive
access-list JIO_access_in extended permit object RDP_BUSY any object
BUSY_SERVER_PRIVATE
access-list JIO_access_in extended permit object RDP_BIOMETRIC_NEW any object
Biometric_NEW
access-list JIO_access_in extended permit tcp any object TestingDB-Local eq ftp
inactive
access-list JIO_access_in extended permit tcp any object NAP_Local eq www
access-list JIO_access_in extended permit object Tcp_FTP any object NAS_213
access-list JIO_access_in extended deny ip object Unknown_IP any
access-list JIO_access_in extended deny ip any object Aster_Dialer
access-list JIO_access_in extended deny ip object Aster_Dialer any
access-list JIO_access_in extended deny ip object unknown_Ip2 any
access-list OUTSIDE2_cryptomap_4 extended permit ip object-group
DM_INLINE_NETWORK_20 object-group DM_INLINE_NETWORK_21 access-list
Hathway_access_in extended permit ip any any
access-list Hathway_access_in extended permit object-group DM_INLINE_SERVICE_8 any
object Infinity_Local inactive
access-list Hathway_access_in extended permit icmp any any
access-list Hathway_access_in extended deny ip object Unknown_IP any
access-list Hathway_access_in extended deny ip any object Aster_Dialer
access-list Hathway_access_in extended deny ip object Aster_Dialer any
access-list Hathway_access_in extended deny ip object unknown_Ip2 any
access-list JIO extended permit tcp any object CO_Server_Productweb_Private object-
group DM_INLINE_TCP_1
access-list JIO extended permit object-group DM_INLINE_SERVICE_2 any object Alive-
Local
access-list JIO extended permit object Tcp_1627 any object Alive-Local
access-list JIO extended permit object SQL any object Biometric_Local
access-list JIO extended permit object-group DM_INLINE_SERVICE_9 any object
Tally_Server_Local
access-list JIO extended permit object-group DM_INLINE_SERVICE_10 any object
Infinity_Local
access-list JIO extended permit object RDP_4493 any object TallyPrime_Private
access-list JIO extended permit object RDP_BUSY any object BUSY_SERVER_PRIVATE
access-list OUTSIDE1_cryptomap_4 extended permit ip object-group
DM_INLINE_NETWORK_27 object-group DM_INLINE_NETWORK_28 access-list
OUTSIDE1_cryptomap_3 extended permit ip object-group DM_INLINE_NETWORK_13 object-
group DM_INLINE_NETWORK_14 access-list OUTSIDE1_cryptomap extended permit ip
object-group DM_INLINE_NETWORK_29 object-group DM_INLINE_NETWORK_30
access-list Divert_BACKUP extended permit ip object-group DIVERT_BACKUP any
pager lines 24
logging enable
logging asdm informational
logging from-address itnetworking@[Link]
logging recipient-address itnetworking@[Link] level alerts
mtu INTERNAL 1500
mtu OUTSIDE1 1500
mtu OUTSIDE2 1500
mtu BUDANTA 1500
mtu JIO 1500
mtu MPLSTATA 1500
mtu Hathway 1500
mtu LAN 1500
mtu management 1500
no failover
no failover wait-disable
no monitor-interface service-module
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/[Link]
no asdm history enable
arp timeout 14400
no arp permit-nonconnected
arp rate-limit 16384
nat (LAN,OUTSIDE1) source static ESSL_Webserver interface service any Essl_Web
inactive
nat (LAN,OUTSIDE1) source static Tally_TSPlus interface service any
RDP_TSPlus10163236
nat (LAN,OUTSIDE1) source static DM_INLINE_NETWORK_15 DM_INLINE_NETWORK_15
destination static DM_INLINE_NETWORK_16 DM_INLINE_NETWORK_16 no-proxy-arp route-
lookup
nat (LAN,OUTSIDE1) source static DM_INLINE_NETWORK_17 DM_INLINE_NETWORK_17
destination static DM_INLINE_NETWORK_18 DM_INLINE_NETWORK_18 no-proxy-arp route-
lookup inactive
nat (LAN,OUTSIDE1) source static DM_INLINE_NETWORK_5 DM_INLINE_NETWORK_5
destination static DM_INLINE_NETWORK_3 DM_INLINE_NETWORK_3 no-proxy-arp route-
lookup
nat (LAN,OUTSIDE1) source static DM_INLINE_NETWORK_4 DM_INLINE_NETWORK_4
destination static DM_INLINE_NETWORK_3 DM_INLINE_NETWORK_3 no-proxy-arp route-
lookup
nat (LAN,OUTSIDE1) source static NETWORK_OBJ_10.4.200.0_24
NETWORK_OBJ_10.4.200.0_24 destination static DM_INLINE_NETWORK_3
DM_INLINE_NETWORK_3 no-proxy-arp route-lookup
nat (LAN,JIO) source static NETWORK_OBJ_10.4.200.0_24 NETWORK_OBJ_10.4.200.0_24
destination static DM_INLINE_NETWORK_19 DM_INLINE_NETWORK_19 no-proxy-arp route-
lookup
nat (LAN,JIO) source static DM_INLINE_NETWORK_22 DM_INLINE_NETWORK_22 destination
static DM_INLINE_NETWORK_23 DM_INLINE_NETWORK_23 no-proxy-arp route-lookup
nat (LAN,JIO) source static DM_INLINE_NETWORK_24 DM_INLINE_NETWORK_24 destination
static DM_INLINE_NETWORK_25 DM_INLINE_NETWORK_25 no-proxy-arp route-lookup
nat (LAN,JIO) source static NETWORK_OBJ_10.4.200.0_24 NETWORK_OBJ_10.4.200.0_24
destination static DM_INLINE_NETWORK_26 DM_INLINE_NETWORK_26 no-proxy-arp route-
lookup
nat (OUTSIDE2,LAN) source static any any destination static MIS-Public_WebApp MIS-
Local_WebApp service http http unidirectional inactive
nat (LAN,LAN) source dynamic any interface destination static MIS-Public_WebApp
MIS-Local_WebApp inactive
nat (INTERNAL,INTERNAL) source dynamic any interface destination static MIS-
Public_WebApp MIS-Local_WebApp inactive
nat (JIO,LAN) source static any any destination static Webapp-Public
CO_Server_Productweb_Private service http http unidirectional
nat (LAN,LAN) source dynamic any interface destination static Webapp-Public Webapp-
Local service http http inactive
nat (OUTSIDE2,LAN) source dynamic any interface destination static interface Alive-
Local inactive
nat (LAN,LAN) source dynamic any interface destination static HRMS-Public HRMS-
Local inactive
nat (LAN,INTERNAL) source dynamic any interface destination static Webapp-Public
Webapp-Local inactive
nat (OUTSIDE2,LAN) source static any any destination static interface SyncServer-
Local service SQL SQL unidirectional no-proxy-arp inactive
nat (LAN,Hathway) source dynamic any interface
nat (JIO,LAN) source static any any destination static ALIVE_JIO Alive-Local
unidirectional no-proxy-arp
nat (LAN,JIO) source dynamic any interface
nat (LAN,OUTSIDE1) source dynamic any interface
nat (INTERNAL,OUTSIDE1) source static NETWORK_OBJ_10.4.160.0_24
NETWORK_OBJ_10.4.160.0_24 destination static NETWORK_OBJ_192.168.60.0
NETWORK_OBJ_192.168.60.0 no-proxy-arp route-lookup
nat (INTERNAL,OUTSIDE2) source static NETWORK_OBJ_10.4.160.0_24
NETWORK_OBJ_10.4.160.0_24 destination static NETWORK_OBJ_192.168.60.0
NETWORK_OBJ_192.168.60.0 no-proxy-arp route-lookup inactive
nat (INTERNAL,OUTSIDE1) source static NETWORK_OBJ_10.4.160.0_24
NETWORK_OBJ_10.4.160.0_24 destination static NETWORK_OBJ_192.168.61.0_24
NETWORK_OBJ_192.168.61.0_24 no-proxy-arp route-lookup
nat (INTERNAL,OUTSIDE2) source static NETWORK_OBJ_10.4.200.0_24
NETWORK_OBJ_10.4.200.0_24 destination static NETWORK_OBJ_192.168.61.0_24
NETWORK_OBJ_192.168.61.0_24 no-proxy-arp route-lookup inactive
nat (OUTSIDE2,OUTSIDE2) source static NETWORK_OBJ_10.4.200.0_24
NETWORK_OBJ_10.4.200.0_24 destination static NETWORK_OBJ_192.168.61.0_24
NETWORK_OBJ_192.168.61.0_24 no-proxy-arp route-lookup inactive
nat (LAN,OUTSIDE1) source static DM_INLINE_NETWORK_6 DM_INLINE_NETWORK_8
destination static DM_INLINE_NETWORK_7 DM_INLINE_NETWORK_9 no-proxy-arp
nat (OUTSIDE2,LAN) source static any any destination static SQL_Public_MobileApp
SQL_Private_MobileApp service SQL SQL unidirectional inactive
nat (OUTSIDE2,LAN) source static any any destination static HRMS-Public HRMS-Local
service SQL SQL unidirectional no-proxy-arp inactive
nat (LAN,OUTSIDE2) source static HRMS-Local HRMS-Local destination static
NETWORK_OBJ_192.168.21.0_24 NETWORK_OBJ_192.168.21.0_24 no-proxy-arp route-lookup
inactive
nat (LAN,OUTSIDE1) source static NETWORK_OBJ_10.4.160.0_24
NETWORK_OBJ_10.4.160.0_24 destination static NETWORK_OBJ_172.31.1.0_24
NETWORK_OBJ_172.31.1.0_24 no-proxy-arp route-lookup
nat (OUTSIDE2,LAN) source static any any destination static TestingDB-Public
TestingDB-Local service SQL SQL unidirectional no-proxy-arp inactive
nat (OUTSIDE2,LAN) source static any any destination static Testing_SyncPublic
SyncServer-Local service SQL_1434 SQL_1434 no-proxy-arp inactive
nat (INTERNAL,OUTSIDE1) source static NACLAN4 NACLAN4 destination static
AzureNetworks AzureNetworks no-proxy-arp route-lookup
nat (OUTSIDE2,LAN) source static any any destination static Tally_Server_Public
Tally_Server_Local service TCP_1723 TCP_1723 unidirectional no-proxy-arp inactive
nat (JIO,LAN) source static any any destination static BIOMETRIC_JIO
Biometric_Local service SQL SQL unidirectional no-proxy-arp
nat (JIO,LAN) source static any any destination static CLOUDSYNC_JIO CO_Server_New
service SQL SQL unidirectional no-proxy-arp
nat (JIO,LAN) source static any any destination static INFINIY_JIO Infinity_Local
service infinity_8443 infinity_8443 unidirectional inactive
nat (JIO,LAN) source static any any destination static INFINIY_JIO Infinity_Local
service Infinity_3306 Infinity_3306 unidirectional inactive
nat (JIO,LAN) source static any any destination static ALIVE_JIO Alive-Local
service http http unidirectional no-proxy-arp
nat (OUTSIDE1,LAN) source static any any destination static interface Alive-Local
service http http unidirectional no-proxy-arp inactive
nat (INTERNAL,LAN) source static any any destination static interface Alive-Local
service http http unidirectional no-proxy-arp inactive
nat (OUTSIDE1,LAN) source static any any destination static TallyPrime_Private
TallyPrime_Public service RDP_4493 RDP_4493 inactive
nat (OUTSIDE1,LAN) source static any any destination static Tally_TSPlus
Tally_TSPlus service RDP RDP unidirectional
nat (JIO,LAN) source static any any destination static BUSY_SERVER_PUBLIC_YOUILL
BUSY_SERVER_PRIVATE service RDP_BUSY RDP_BUSY unidirectional inactive
nat (OUTSIDE1,LAN) source static any any destination static Infinity_Local
Infinity_public_Act service infinity_8443 infinity_8443 unidirectional inactive
nat (OUTSIDE1,LAN) source static any any destination static Infinity_Local
Infinity_Local service Infinity_3306 Infinity_3306 unidirectional inactive
nat (Hathway,LAN) source static any any destination static Infinity_Local
infinity_hathway service infinity_8443 infinity_8443 unidirectional inactive
nat (OUTSIDE2,LAN) source static NETWORK_OBJ_192.168.40.0 NETWORK_OBJ_192.168.40.0
destination static Infinity_Public Infinity_Local service infinity_8443
infinity_8443 unidirectional inactive
nat (OUTSIDE2,LAN) source static any any destination static TESTING_NAT_ILL
Testing_NAT service TESTING_NAT TESTING_NAT unidirectional inactive
nat (INTERNAL,JIO) source dynamic any interface
nat (INTERNAL,OUTSIDE1) source static DM_INLINE_NETWORK_10 DM_INLINE_NETWORK_10
destination static DM_INLINE_NETWORK_12 DM_INLINE_NETWORK_12 no-proxy-arp route-
lookup
nat (JIO,LAN) source static any any destination static BIOMETRIC_JIO Biometric_NEW
service RDP_BIOMETRIC_NEW RDP_BIOMETRIC_NEW unidirectional no-proxy-arp
nat (JIO,LAN) source static any any destination static BIOMETRIC_JIO Biometric_NEW
service SQL SQL unidirectional no-proxy-arp
nat (JIO,LAN) source static any any destination static JIO_nat TestingDB-Local
service Tcp_FTP Tcp_FTP unidirectional inactive
nat (JIO,LAN) source static any any destination static NAP_JIO NAP_Local service
http http unidirectional no-proxy-arp
nat (JIO,LAN) source static any any destination static JIO_nat NAS_213 service
Tcp_FTP Tcp_FTP
nat (OUTSIDE1,LAN) source static any any destination static Biometric_NEW
Biometric_NEW service RDP_BIOMETRIC_NEW RDP_BIOMETRIC_NEW unidirectional no-proxy-
arp inactive
nat (OUTSIDE1,LAN) source static any any destination static BioMetric_ACT
BioMetric_ACT service SQL SQL unidirectional no-proxy-arp inactive
nat (OUTSIDE1,LAN) source static any any destination static Biometric_HW
Biometric_NEW service RDP_BIOMETRIC_NEW RDP_BIOMETRIC_NEW unidirectional no-proxy-
arp inactive
nat (OUTSIDE1,LAN) source static any any destination static Biometric_HW
Biometric_NEW service SQL SQL unidirectional no-proxy-arp inactive
nat (LAN,OUTSIDE1) source static ACT interface service any FTP_Server231_Webport
nat (LAN,BUDANTA) source dynamic any interface
nat (LAN,BUDANTA) source static any interface service any FTP_Server231_Webport
!
nat (INTERNAL,OUTSIDE1) after-auto source dynamic any interface
nat (INTERNAL,OUTSIDE2) after-auto source dynamic any interface
nat (INTERNAL,Hathway) after-auto source dynamic any interface
access-group INTERNAL_access_in in interface INTERNAL
access-group OUTSIDE1_access_in in interface OUTSIDE1
access-group OUTSIDE2_access_in in interface OUTSIDE2
access-group MPLS_access_in in interface BUDANTA
access-group JIO_access_in in interface JIO
access-group MPLSTATA_access_in in interface MPLSTATA
access-group Hathway_access_in in interface Hathway
access-group LAN_access_in in interface LAN
!
route-map nactraffic permit 5
match ip address IPSEC
set ip next-hop [Link]

!
route-map nactraffic permit 10
match ip address MPLSNAC
set ip next-hop verify-availability [Link] 1 track 50
set ip next-hop verify-availability [Link] 254 track 40

!
route-map nactraffic permit 20
match ip address ACT2
set ip next-hop verify-availability [Link] 1 track 30

!
route-map nactraffic permit 30
match ip address NACLAN4TRAFFIC
set ip next-hop verify-availability [Link] 1 track 10
set ip next-hop verify-availability [Link] 2 track 20

!
route-map nactraffic permit 40
match ip address NACLAN5TRAFFIC
set ip next-hop verify-availability [Link] 1 track 20
set ip next-hop verify-availability [Link] 2 track 10

!
route-map test permit 10
match ip address vlan169
set ip next-hop verify-availability [Link] 1 track 20
set ip next-hop verify-availability [Link] 2 track 20

!
route-map Traffic_to_BACKUP_ISP permit 10
match ip address Divert_BACKUP
set ip next-hop verify-availability [Link] 1 track 10
set ip next-hop verify-availability [Link] 2 track 50
set ip next-hop [Link]

!
route-map pbr1 permit 10
set ip next-hop verify-availability [Link] 1 track 10
set ip next-hop verify-availability [Link] 2 track 30

!
route-map pbr1 permit 20
set ip next-hop verify-availability [Link] 1 track 30
set ip next-hop verify-availability [Link] 2 track 10

!
route-map PBR2 permit 10
set ip next-hop verify-availability [Link] 1 track 50
set ip next-hop verify-availability [Link] 2 track 10

!
route-map PBR3 permit 10
set ip next-hop verify-availability [Link] 1 track 10
set ip next-hop verify-availability [Link] 2 track 50

!
route-map PBR4 permit 10
set ip next-hop verify-availability [Link] 1 track 30
set ip next-hop verify-availability [Link] 2 track 10

!
router bgp 64516
bgp log-neighbor-changes
bgp bestpath compare-routerid
address-family ipv4 unicast
neighbor [Link] remote-as 9583
neighbor [Link] activate
network [Link] mask [Link]
no auto-summary
no synchronization
exit-address-family
!
route OUTSIDE1 [Link] [Link] [Link] 1 track 1
route Hathway [Link] [Link] [Link] 3 track 30
route MPLSTATA [Link] [Link] [Link] 254 track 40
route MPLSTATA [Link] [Link] [Link] 254 track 40
route MPLSTATA [Link] [Link] [Link] 254 track 40
route MPLSTATA [Link] [Link] [Link] 254 track 40
route MPLSTATA [Link] [Link] [Link] 254 track 40
route MPLSTATA [Link] [Link] [Link] 254 track 40
route MPLSTATA [Link] [Link] [Link] 254 track 40
route MPLSTATA [Link] [Link] [Link] 254 track 40
route MPLSTATA [Link] [Link] [Link] 254 track 40
route MPLSTATA [Link] [Link] [Link] 254 track 40
route MPLSTATA [Link] [Link] [Link] 254 track 40
route MPLSTATA [Link] [Link] [Link] 1 track 40
route BUDANTA [Link] [Link] [Link] 2 track 50
route BUDANTA [Link] [Link] [Link] 100
route JIO [Link] [Link] [Link] 254
route LAN [Link] [Link] [Link] 1
route LAN [Link] [Link] [Link] 1
route LAN [Link] [Link] [Link] 1
route LAN [Link] [Link] [Link] 1
route LAN [Link] [Link] [Link] 1
route LAN [Link] [Link] [Link] 1
route LAN [Link] [Link] [Link] 1
route LAN [Link] [Link] [Link] 1
route LAN [Link] [Link] [Link] 1
route LAN [Link] [Link] [Link] 1
route LAN [Link] [Link] [Link] 1
route LAN [Link] [Link] [Link] 1
route LAN [Link] [Link] [Link] 1
route LAN [Link] [Link] [Link] 1
route JIO [Link] [Link] [Link] 4
route JIO [Link] [Link] [Link] 4
route LAN [Link] [Link] [Link] 1
route INTERNAL [Link] [Link] [Link] 1
route LAN [Link] [Link] [Link] 1
route JIO [Link] [Link] [Link] 4
route JIO [Link] [Link] [Link] 4
route LAN [Link] [Link] [Link] 1
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 sctp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
timeout conn-holddown 0:00:15
timeout igp stale-route 0:01:10
user-identity default-domain LOCAL
aaa authentication telnet console LOCAL
aaa authentication ssh console LOCAL
aaa authentication login-history
http server enable
http [Link] [Link] INTERNAL
http [Link] [Link] LAN
http [Link] [Link] LAN
no snmp-server location
no snmp-server contact
sysopt connection tcpmss 1350
sysopt connection preserve-vpn-flows
sla monitor 1
type echo protocol ipIcmpEcho [Link] interface OUTSIDE1
 timeout 1000
threshold 500
frequency 20
sla monitor schedule 1 life forever start-time now
sla monitor 10
type echo protocol ipIcmpEcho [Link] interface OUTSIDE1
frequency 5
sla monitor schedule 10 life forever start-time now
sla monitor 20
type echo protocol ipIcmpEcho [Link] interface OUTSIDE2
timeout 2000
threshold 1000
frequency 2
sla monitor schedule 20 life forever start-time now
sla monitor 30
type echo protocol ipIcmpEcho [Link] interface Hathway
timeout 2000
threshold 1000
frequency 2
sla monitor schedule 30 life forever start-time now
sla monitor 40
type echo protocol ipIcmpEcho [Link] interface MPLSTATA
frequency 5
sla monitor schedule 40 life forever start-time now
sla monitor 50
type echo protocol ipIcmpEcho [Link] interface BUDANTA
frequency 5
sla monitor schedule 50 life forever start-time now
service sw-reset-button
crypto ipsec ikev1 transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-128-SHA-TRANS esp-aes esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-128-SHA-TRANS mode transport
crypto ipsec ikev1 transform-set ESP-AES-128-MD5-TRANS esp-aes esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-AES-128-MD5-TRANS mode transport
crypto ipsec ikev1 transform-set ESP-AES-192-SHA-TRANS esp-aes-192 esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-192-SHA-TRANS mode transport
crypto ipsec ikev1 transform-set ESP-AES-192-MD5-TRANS esp-aes-192 esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-AES-192-MD5-TRANS mode transport
crypto ipsec ikev1 transform-set ESP-AES-256-SHA-TRANS esp-aes-256 esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-256-SHA-TRANS mode transport
crypto ipsec ikev1 transform-set ESP-AES-256-MD5-TRANS esp-aes-256 esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-AES-256-MD5-TRANS mode transport
crypto ipsec ikev1 transform-set ESP-3DES-SHA-TRANS esp-3des esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-3DES-SHA-TRANS mode transport
crypto ipsec ikev1 transform-set ESP-3DES-MD5-TRANS esp-3des esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-3DES-MD5-TRANS mode transport
crypto ipsec ikev1 transform-set ESP-DES-SHA-TRANS esp-des esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-DES-SHA-TRANS mode transport
crypto ipsec ikev1 transform-set ESP-DES-MD5-TRANS esp-des esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-DES-MD5-TRANS mode transport
crypto ipsec ikev2 ipsec-proposal PROP2
protocol esp encryption aes-256
protocol esp integrity sha-256
crypto ipsec ikev2 ipsec-proposal DES
protocol esp encryption des
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal 3DES
protocol esp encryption 3des
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES
protocol esp encryption aes
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES192
protocol esp encryption aes-192
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES256
protocol esp encryption aes-256
protocol esp integrity sha-1 md5
crypto ipsec security-association lifetime seconds 3600
crypto ipsec security-association lifetime kilobytes 102400000
crypto ipsec security-association pmtu-aging infinite
crypto ipsec inner-routing-lookup
crypto map OUTSIDE2_map 1 match address OUTSIDE2_cryptomap
crypto map OUTSIDE2_map 1 set peer [Link] [Link]
crypto map OUTSIDE2_map 1 set ikev1 transform-set ESP-AES-256-SHA
crypto map OUTSIDE2_map 1 set security-association lifetime seconds 3600
crypto map OUTSIDE2_map 2 match address OUTSIDE1_cryptomap_3
crypto map OUTSIDE2_map 2 set peer [Link]
crypto map OUTSIDE2_map 2 set ikev1 transform-set ESP-AES-256-SHA
crypto map OUTSIDE2_map 3 match address OUTSIDE1_cryptomap
crypto map OUTSIDE2_map 3 set peer [Link]
crypto map OUTSIDE2_map 5 match address OUTSIDE1_cryptomap_4
crypto map OUTSIDE2_map 5 set peer [Link]
crypto map OUTSIDE2_map 5 set ikev1 transform-set ESP-AES-256-SHA
crypto map OUTSIDE2_map interface OUTSIDE1
crypto map OUTSIDE2_map interface BUDANTA
crypto map OUTSIDE2_map1 3 match address OUTSIDE2_cryptomap_4
crypto map OUTSIDE2_map1 3 set peer [Link]
crypto map OUTSIDE2_map1 3 set ikev1 transform-set ESP-AES-256-SHA
crypto map OUTSIDE2_map1 interface OUTSIDE2
crypto ca trustpoint ASDM_TrustPoint0
enrollment self
subject-name CN=ciscoasa
crl configure
crypto ca trustpool policy
crypto ca certificate chain ASDM_TrustPoint0
certificate 875a035c
308202d4 308201bc a0030201 02020487 5a035c30 0d06092a 864886f7 0d01010b
0500302c 3111300f 06035504 03130863 6973636f 61736131 17301506 092a8648
86f70d01 09021608 63697363 6f617361 301e170d 31393032 31383030 31343337
5a170d32 39303231 35303031 3433375a 302c3111 300f0603 55040313 08636973
636f6173 61311730 1506092a 864886f7 0d010902 16086369 73636f61 73613082
0122300d 06092a86 4886f70d 01010105 00038201 0f003082 010a0282 0101009f
81e227b1 b351f769 c8c63263 b1af9036 b7117196 9323e18b c920a782 f0e49417
8a84ae6a 796854b5 19d6f548 4ebecc20 c7102407 60e532a1 814e1ec5 66b2b1e4
a64058c5 8f0f32ca 51ccfb7c a5038170 37b6de0c 2eade1f0 d7194a81 85e81117
1dde3a03 e159d33b 4f88ddd2 6797fa26 efc1fd50 e7a83f57 ccbca92f abeee678
b5d64309 36b2744c 5bbef562 aaa79bee 7f95aecc 9d08fe3d cf4e810c 1270b8de
e8ca4e8b d2dc4f57 0c1d38fa f313d04b ff9a1d40 092035f0 82414c5c 9cbcc068
 ecf3c13e c9ea128f 46d495a2 c81c67c3 981fa0ba b1ae14a6 766fd25c f9c5ac8e
e43745cb 35d41d2c 6046937f 3ab1fd2b a0044ae7 df7cd0e8 e901bd3c 6e6e5902
03010001 300d0609 2a864886 f70d0101 0b050003 82010100 9747639b f0de9ff8
05ccf9a6 20fedb6a e6b84631 a60728a3 2646e19f 866f577b 8a329834 326d6f9c
c9bf7cb6 a5672728 309f1d48 78aaea73 db88eab3 e6d42480 5718e97a a65233ec
bb6185ba 7e7e69c2 ac69d629 94d889ac b3840e52 863d489b 309fdc78 1e9652b8
2ad4a17a 74c45984 23dbb0c8 5738a5d0 9b41c5a1 aafa744c c176877d c63c6940
40ea06fe 2557c440 1abd9826 5cd5e986 d6e14286 36a69c0c 167ba7d6 c9c14667
07ff810a 559cf0eb 10ab9a5b 7a2229d9 fd390e01 866354f9 ed38103b 3ece1b4c
be4fdd8f e8a18b7a c8055416 9bcadb5a 84818daf cbc3f1bb 00b66dd7 a7e9ebf7
a7efae8f c9d1a368 77e2ece4 82a2287a 5eeb65ae af0d611c
quit
crypto ikev2 policy 1
encryption aes-256
integrity sha256
group 2
prf sha256
lifetime seconds 28800
crypto ikev2 policy 2
encryption aes-256
integrity sha
group 2
prf sha
lifetime seconds 28800
crypto ikev2 policy 3
encryption aes-256
integrity sha256
group 2
prf sha
lifetime seconds 28800
crypto ikev2 policy 10
encryption aes-256
integrity sha256
group 5
prf sha256
lifetime seconds 3600
crypto ikev2 policy 20
encryption aes
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 30
encryption 3des
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 40
encryption des
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 enable OUTSIDE1
crypto ikev1 enable OUTSIDE1
crypto ikev1 enable BUDANTA
crypto ikev1 enable JIO
crypto ikev1 enable LAN
crypto ikev1 policy 1
authentication pre-share
encryption aes-256
hash sha
group 2
lifetime 28800
crypto ikev1 policy 10
authentication pre-share
encryption aes-256
hash sha
group 2
lifetime 86400
crypto ikev1 policy 20
authentication rsa-sig
encryption aes-256
hash sha
group 2
lifetime 86400
crypto ikev1 policy 40
authentication pre-share
encryption aes-192
hash sha
group 2
lifetime 86400
crypto ikev1 policy 50
authentication rsa-sig
encryption aes-192
hash sha
group 2
lifetime 86400
crypto ikev1 policy 70
authentication pre-share
encryption aes
hash sha
group 2
lifetime 86400
crypto ikev1 policy 80
authentication rsa-sig
encryption aes
hash sha
group 2
lifetime 86400
crypto ikev1 policy 100
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
crypto ikev1 policy 110
authentication rsa-sig
encryption 3des
hash sha
group 2
lifetime 86400
crypto ikev1 policy 130
authentication pre-share
encryption des
hash sha
group 2
 lifetime 86400
crypto ikev1 policy 140
authentication rsa-sig
encryption des
hash sha
group 2
lifetime 86400
!
track 1 rtr 1 reachability
!
track 10 rtr 10 reachability
!
track 20 rtr 20 reachability
!
track 30 rtr 30 reachability
!
track 40 rtr 40 reachability
!
track 50 rtr 50 reachability
telnet [Link] [Link] LAN
telnet timeout 5
ssh stricthostkeycheck
ssh timeout 5
ssh version 1 2
ssh key-exchange group dh-group1-sha1
ssh [Link] [Link] OUTSIDE1
ssh [Link] [Link] OUTSIDE1
ssh [Link] [Link] LAN
console timeout 0
management-access LAN
dhcpd auto_config INTERNAL
!
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
ssl trust-point ASDM_TrustPoint0 INTERNAL
ssl trust-point ASDM_TrustPoint0 OUTSIDE1
ssl trust-point ASDM_TrustPoint0 OUTSIDE2
ssl trust-point ASDM_TrustPoint0 BUDANTA
ssl trust-point ASDM_TrustPoint0 MPLSTATA
ssl trust-point ASDM_TrustPoint0 Hathway
ssl trust-point ASDM_TrustPoint0 LAN
webvpn
enable OUTSIDE1
hsts
enable
max-age 31536000
include-sub-domains
no preload
http-headers
x-content-type-options
x-xss-protection
content-security-policy
anyconnect image disk0:/[Link] 1
anyconnect enable
tunnel-group-list enable
cache
disable
error-recovery disable
group-policy DfltGrpPolicy attributes
vpn-tunnel-protocol ikev2 l2tp-ipsec ssl-clientless
group-policy GroupPolicy_Kanchipuram internal
group-policy GroupPolicy_Kanchipuram attributes
vpn-idle-timeout none
vpn-session-timeout none
vpn-tunnel-protocol ikev1
periodic-authentication certificate none
group-policy GroupPolicy_202.83.28.189 internal
group-policy GroupPolicy_202.83.28.189 attributes
vpn-idle-timeout none
vpn-session-timeout none
vpn-tunnel-protocol ikev1
periodic-authentication certificate none
group-policy GroupPolicy_MD_Residence internal
group-policy GroupPolicy_MD_Residence attributes
vpn-idle-timeout none
vpn-session-timeout none
vpn-tunnel-protocol l2tp-ipsec
periodic-authentication certificate none
group-policy GroupPolicy_NAC internal
group-policy GroupPolicy_NAC attributes
wins-server none
dns-server value [Link] [Link]
vpn-tunnel-protocol ssl-client
split-tunnel-policy tunnelspecified
split-tunnel-network-list value sslvpn_access
default-domain none
group-policy GroupPolicy_Tiruvallur internal
group-policy GroupPolicy_Tiruvallur attributes
vpn-idle-timeout none
vpn-session-timeout none
vpn-tunnel-protocol ikev1
periodic-authentication certificate none
group-policy HRMS internal
group-policy HRMS attributes
dns-server value [Link] [Link]
vpn-tunnel-protocol ikev2
split-tunnel-policy tunnelspecified
split-tunnel-network-list value HRMS_splitTunnelAcl
dynamic-access-policy-record DfltAccessPolicy
dynamic-access-policy-record DfltAccessPolic
username admin password WMllcEL9tdjyMuD1 encrypted privilege 15
username HRMSKN password /pNh94cAQqEYEtg0 encrypted privilege 0
username HRMSKN attributes
vpn-group-policy HRMS
username cisco password JhY5aAERT8Em74cm encrypted
username nacvpn password pCK/xw5IBq3BOECo encrypted
tunnel-group HRMS type remote-access
tunnel-group HRMS general-attributes
address-pool VPNPOOL
default-group-policy HRMS
tunnel-group HRMS ipsec-attributes
ikev1 pre-shared-key NacToKnack
tunnel-group [Link] type ipsec-l2l
tunnel-group [Link] general-attributes
default-group-policy GroupPolicy_202.83.28.189
tunnel-group [Link] ipsec-attributes
ikev1 pre-shared-key Limited@12345678900987654321
 ikev2 remote-authentication pre-shared-key vjco1234
ikev2 local-authentication pre-shared-key vjco1234
tunnel-group NAC type remote-access
tunnel-group NAC general-attributes
address-pool SSLVPN_POOL
default-group-policy GroupPolicy_NAC
tunnel-group NAC webvpn-attributes
group-alias NAC enable
tunnel-group [Link] type ipsec-l2l
tunnel-group [Link] general-attributes
default-group-policy GroupPolicy_202.83.28.189
tunnel-group [Link] ipsec-attributes
ikev1 pre-shared-key Cotovijayawada@Tunnel2
tunnel-group [Link] type ipsec-l2l
tunnel-group [Link] general-attributes
default-group-policy GroupPolicy_Kanchipuram
tunnel-group [Link] ipsec-attributes
ikev1 pre-shared-key N@c09876543211234567890!@#$ecur1ty
tunnel-group [Link] type ipsec-l2l
tunnel-group [Link] general-attributes
default-group-policy GroupPolicy_Kanchipuram
tunnel-group [Link] ipsec-attributes
ikev1 pre-shared-key N@c09876543211234567890!@#$ecur1ty
tunnel-group [Link] type ipsec-l2l
tunnel-group [Link] general-attributes
default-group-policy GroupPolicy_Tiruvallur
tunnel-group [Link] ipsec-attributes
ikev1 pre-shared-key N@C$ecur1ty@123456789987654321
tunnel-group [Link] type ipsec-l2l
tunnel-group [Link] general-attributes
default-group-policy GroupPolicy_MD_Residence
tunnel-group [Link] ipsec-attributes
ikev1 pre-shared-key $ecur1tyN@C
no tunnel-group-map enable peer-ip
tunnel-group-map default-group [Link]
!
class-map sfr
match access-list sfr_redirect
class-map inspection_default
match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
no tcp-inspection
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
 inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
inspect icmp
class sfr
sfr fail-open
class class-default
user-statistics accounting
!
service-policy global_policy global
smtp-server [Link]
prompt hostname context
no call-home reporting anonymous
Cryptochecksum:cff1475544f14dd33161b1302aa65bb6
: end