@echo off rem ** Kompletní cesta k JavaW set JAVA=C:\Program Files\Java\jre1.6.0_07\bin\javaw.exe rem ** Adresář, kde je nainstaovaný ASDM set DIR_ASDM=C:\Program Files\Cisco Systems\ASDM rem ***** start "ASDM" "%JAVA%" -classpath "%DIR_ASDM%\lzma.jar;%DIR_ASDM%\jploader.jar;%DIR_ASDM%\asdm-launcher.jar" -Xms64m -Xmx256m -Dsun.swing.enableImprovedDragGesture=true -ea:mainclass com.cisco.launcher.Launcher rem *****
rommon #1> confreg
Current Configuration Register: 0x00000011 Configuration Summary: boot TFTP image, boot default image from Flash on netboot failure Do you wish to change this configuration? y/n [n]:
0x11disable system configuration?
kde se zadá Y
rommon #2> boot
hostname> enable hostname# copy startup-config running-config hostname# configure terminal hostname(config)# password password hostname(config)# enable password password hostname(config)# username name password password hostname(config)# config-register <původní_hodnota> hostname(config)# copy running-config startup-config
crypto isakmp enable outside
crypto isakmp policy 10 authentication pre-share encryption 3des hash sha group 2 lifetime 86400
tunnel-group 10.151.31.2 type ipsec-l2l tunnel-group 10.151.31.2 ipsec-attributes pre-shared-key *****
crypto isakmp am-disable
crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
object network Nectec-10.151.1.0 subnet 10.151.1.0 255.255.255.0 object network Nectec-10.151.31.0 subnet 10.151.31.0 255.255.255.0 object network Nectec-10.151.50.0 subnet 10.151.50.0 255.255.255.0 object-group network Nectec description areal Delphi network-object object Nectec-10.151.1.0 network-object object Nectec-10.151.31.0 network-object object Nectec-10.151.50.0
access-list inside_cryptomap_1 line 1 extended permit ip interface inside object-group Nectec clear xlate crypto map inside_map 1 match address inside_cryptomap_1 crypto map inside_map 1 set peer 10.151.31.2 crypto map inside_map 1 set transform-set ESP-AES-256-MD5 crypto map inside_map interface outside