Tele Danmark standardkonfiguration efteråret 2000 a.b.c.d = den offentlige IP-adresse === VERSION === SpeedStream 5711 ATM25 Router (120-5711-001) Efficient-5000 BOOT/POST V5.9.3 (25-Apr-00 16:19) Software version v4.0.1 built Wed May 3 18:05:01 PDT 2000 Maximum users: unlimited Options: ATM25, RFC1483, IP ROUTING, IP FILTERING, WEB, ~IPSEC, ~3DES, ~L2TP, ~ENCRYPT, BRIDGE, IPX === SYSTEM === GENERAL INFORMATION FOR System started on.................... 1/2/2001 at 20:20 Authentication override.............. none Server(s) (IP Translation) .......... 192.168.1.4 proto-TCP port-FTP 192.168.1.2 proto-TCP port-SMTP 192.168.1.4 proto-TCP port-53 192.168.1.4 proto-UDP port-53 192.168.1.3 proto-TCP port-HTTP WAN to WAN Forwarding................ yes Block NetBIOS Default................ no BOOTP/DHCP Server address............ none Telnet Port.......................... default (23) Telnet Clients....................... all SNMP Port............................ disabled (0) SNMP Clients......................... all HTTP Port............................ disabled (0) HTTP Clients......................... all Syslog Port.......................... default (514) Allowed Syslog Servers............... all Default Syslog Servers............... none System message: Security timer....................... 10 minutes One WAN Dial Up...................... no === ETHERNET === GLOBAL BRIDGING/ROUTING SETTINGS: Bridging enabled..................... no Exchange spanning tree with dest... yes Bridge only PPPoE with dest........ no IP Routing enabled................... yes Multicast forwarding enabled....... no Firewall filter enabled ........... yes Directed Broadcasts Allowed........ no RIP Multicast address.............. default IPX Routing enabled.................. no ETHERNET INFORMATION FOR Hardware MAC address................. 00:20:6F:08:7C:9D Send IP RIP to the LAN............... rip-1 compatible Advertise me as default router..... yes Process IP RIP packets received...... rip-1 compatible Receive default route by RIP....... yes IP filters defined................... yes IP address/subnet mask............... 192.168.1.1/255.255.255.0 Management IP address/subnet mask.... 0.0.0.0/0.0.0.0 Static Ethernet routes defined....... none Virtual Ethernet routes defined...... none IPX External network number.......... 00000000 IPX Frame type....................... 802.2 MTU.................................. default === DHCP === BOOTP/DHCP Relay address ..... none bootp server ................. none bootp file ................... n/a DOMAINNAMESERVER|DNS (6) ..... 193.162.159.194 193.162.145.130 Subnet 192.168.1.0, enabled When DHCP servers are active . stop Mask ......................... 255.255.255.0 first ip address ............. 192.168.1.6 last ip address .............. 192.168.1.100 lease ........................ default bootp ........................ not allowed bootp server ................. none bootp file ................... n/a Client IP State Host Name Expires (mm/dd/yy) === REMOTE DATABASE === INFORMATION FOR Status............................... enabled Interface in use..................... HSD Protocol in use...................... RAW IP ATM traffic shaping...................no Connection Identifier (VPI*VCI)...... 0*101 IP address translation............... on IP filters defined................... yes Send/Receive Multicast............... off Block NetBIOS Packets................ off Source IP address/subnet mask........ a.b.c.d/255.255.255.255 Remote IP address/subnet mask........ 0.0.0.0/0.0.0.0 Management IP address/subnet mask.... 0.0.0.0/0.0.0.0 Send IP RIP to this dest............. no Send IP default route if known..... no Receive IP RIP from this dest........ no Receive IP default route by RIP.... no Keep this IP destination private..... yes Total IP remote routes............... 1 0.0.0.0/255.255.255.255/1 IPX network number................... 00000000 Use IPX RIP/SAP (negotiate with PPP): yes Total IPX remote routes.............. 0 Total IPX SAPs....................... 0 Bridging enabled..................... no Exchange spanning tree with dest... yes Bridge only PPPoE with dest........ no mtu.................................. 1500 === INTERFACES === Interface Speed In % Out % Protocol State Connection ETHERNET/0 10.0mb 0%/0% 0%/0% (Ethernet) OPENED ATM-25/0 8.0mb D 0%/0% (ATM) OPENED 253kb U 14%/3% (ATM) OPENED ATM-VC/1 8.0mb D 0%/0% (IP) OPENED to internet 253kb U 12%/2% (IP) OPENED to internet CONSOLE/0 9600 b 0%/0% 100%/20% (TTY) OPENED === PPP === === BRIDGING === Bridging is disabled === ARP TABLE === IP Addr Mac Address Interface 192.168.1.3 00:00:21:23:1D:13 ETHERNET/0 192.168.1.106 00:00:00:00:00:00 ETHERNET/0 224.0.0.9 01:00:5E:00:00:09 ETHERNET/0 === IP ROUTES === IP route / Mask --> Gateway Interface Hops Flags 0.0.0.0 /00000000 --> internet ATM-VC/1 1 NW FW PRM DOD RP1 RP2 192.168.1.0 /ffffff00 --> 0.0.0.0 ETHERNET/0 1 NW FW DIR PRM RP1 RP2 192.168.1.1 /ffffffff --> 0.0.0.0 ETHERNET/0 0 ME a.b.c.d/ffffffff --> internet ATM-VC/1 0 ME 224.0.0.9 /ffffffff --> 0.0.0.0 [none] 0 ME 255.255.255.255/ffffffff --> 0.0.0.0 [none] 0 NW PRM === IP IFS === ATM-VC/1 a.b.c.d (FFFFFFFF) dest 0.0.0.0 sub a.b.c.d net a.b.c.0 (FFFFFF00) Point-To-Point mtu 1500 ETHERNET/0 192.168.1.1 (FFFFFF00) dest 0.0.0.0 sub 192.168.1.0 net 192.168.1.0 (FFFFFF00) BROADCAST mtu 1500 === IPX ROUTES === No IPX sessions are active. === IPX SAPS === No IPX sessions are active. === L2TP TUNNELS === L2TP is not allowed === IP FILTERS === Begin IPFilters for internet # watching for dropped/rejected packets is OFF # Begin rules for input list remote ipfilter flush input internet remote ipfilter insert 0 input accept -c 0 -p tcp -sa 193.162.146.71:193.162.146.72 -da a.b.c.d -dp 23 internet remote ipfilter insert 1 input drop -c 0 -p tcp -da a.b.c.d -dp 23 internet # End rules for input list # Begin rules for output list remote ipfilter flush output internet # End rules for output list # Begin rules for forward list remote ipfilter flush forward internet # End rules for forward list End IPFilters for internet Begin IPFilters for (ETHERNET/0) # watching for dropped/rejected packets is OFF # Begin rules for input list eth ip filter flush input 0 eth ip filter insert 0 input accept -c 0 -p icmp -sp 0 -da 192.168.1.1 0 eth ip filter insert 1 input accept -c 0 -p icmp -sp 8 -da 192.168.1.1 0 eth ip filter insert 2 input drop -c 0 -da 192.168.1.1 0 eth ip filter insert 3 input drop -c 0 -da a.b.c.d 0 eth ip filter insert 4 input drop -c 0 -da 193.162.146.71:193.162.146.72 0 # End rules for input list # Begin rules for output list eth ip filter flush output 0 # End rules for output list # Begin rules for forward list eth ip filter flush forward 0 # End rules for forward list End IPFilters for (ETHERNET/0)