PLANTILLA ROUTER 1811

hostname NOMBRE_DE_CLIENTE
enable password cisco
username cisco password cisco
aaa new-model
aaa authentication login default group tacacs+ local
aaa authorization exec default group tacacs+ local
aaa authorization commands 5 default group tacacs+
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+

ip domain name inacap.cl

service password-encryption
ip cef
ip inspect name Firewall tcp
ip inspect name Firewall udp
ip inspect name Firewall cuseeme
ip inspect name Firewall ftp
ip inspect name Firewall h323
ip inspect name Firewall rcmd
ip inspect name Firewall realaudio
ip inspect name Firewall streamworks
ip inspect name Firewall vdolive
ip inspect name Firewall sqlnet
ip inspect name Firewall tftp
!
interface FastEthernet0
description Internet
ip address DIRECION_IP_PUBLICA MASCARA
ip access-group FILTRO in
no ip proxy-arp
no ip redirects
no ip unreachables
ip nat outside
no cdp enable
!
interface FastEthernet1
ip address DIRECION_IP_PRIVADA MASCARA
ip nat inside
no cdp enable
ip access-group VIRUS in
ip inspect Firewall in
no ip proxy-arp

!
ip classless
ip route 0.0.0.0 0.0.0.0 DEFAULT_GATEWAY

ip nat inside source list NAT interface FastEthernet0 overload

ip access-list extended FILTRO

permit tcp 200.75.15.0 0.0.0.255 host DIRECION_IP_PUBLICA eq 22
permit tcp 200.75.19.192 0.0.0.63 host DIRECION_IP_PUBLICA eq 22
permit ip host 200.75.0.32 host DIRECION_IP_PUBLICA
permit icmp any any

ip access-list extended VIRUS

deny udp any any eq netbios-ns
deny tcp any any eq 445
deny tcp any any eq 135
deny udp any any eq 1434
permit ip any any

ip access-list extended NAT

permit ip DIRECION_IP_PRIVADA WILDCARD any
ip access-list standard ADMIN
permit 200.75.15.0 0.0.0.63
permit 200.75.19.192 0.0.0.63
no cdp run
!
!
tacacs-server host 200.75.0.10 key seguridadenredes
tacacs-server directed-request
banner motd ^

##################################################
# Seguridad en Redes #
# Solo acceso a Personas autorizadas. #
##################################################

^
!
line con 0
line aux 0
line vty 0 4
access-class ADMIN in
transport input ssh

¡
crypto key generate rsa
1024