## Last changed: 2012-10-23 08:15:08 IST
version 10.2R4.8;
system {
    host-name RGIJ-engg;
    time-zone Asia/Calcutta;
    root-authentication {
        encrypted-password "$1$0CZPqkNy$HMxCP/PSUdLBEhMhmN5Ku1";
    }
    name-server {
        208.67.222.222;
        208.67.220.220;
    }
    login {
        user groundforce {
            uid 2000;
            class super-user;
            authentication {
                encrypted-password "$1$SQdYsFfm$wcb8av7KpgYWn2MsBn9SI.";
            }
        }
        user nishat {
            uid 2001;
            class super-user;
            authentication {
                encrypted-password "$1$H/Ex2rG3$5/WsjcLZbwWf1sZ0fo7/d.";
            }
        }
        user sysadmin {
            uid 2002;
            class super-user;
            authentication {
                encrypted-password "$1$aH2LlkMP$Ueip6BUpfgSBMzWzRcPj01";
            }
        }
    }
    services {
        ssh;
        telnet;
        xnm-clear-text;
        web-management {
            http {
                interface [ vlan.0 ge-0/0/15.0 ];
            }
            https {
                system-generated-certificate;
                interface [ vlan.0 ge-0/0/15.0 ];
            }
        }
        inactive: dhcp {
            propagate-settings ge-0/0/10.0;
        }
    }
    syslog {
        archive size 100k files 3;
        user * {
            any emergency;
        }
        file messages {
            any critical;
            authorization info;
        }
        file interactive-commands {
            interactive-commands error;
        }
    }
    max-configurations-on-flash 5;
    max-configuration-rollbacks 5;
    license {
        autoupdate {
            url https://ae1.juniper.net/junos/key_retrieval;
        }
    }
}
interfaces {
    interface-range interfaces-trust {
        member ge-0/0/1;
        member ge-0/0/2;
        member ge-0/0/3;
        member ge-0/0/8;
        member ge-0/0/9;
        member ge-0/0/11;
        member ge-0/0/12;
        member ge-0/0/13;
        unit 0 {
            family ethernet-switching {
                vlan {
                    members vlan-trust;
                }
            }
        }
    }
    ge-0/0/0 {
        unit 0;
    }
    ge-0/0/1 {
        unit 0 {
            family ethernet-switching {
                vlan {
                    members vlan-trust;
                }
            }
        }
    }
    ge-0/0/2 {
        unit 0 {
            family ethernet-switching {
                vlan {
                    members vlan-trust;
                }
            }
        }
    }
    ge-0/0/3 {
        unit 0 {
            family ethernet-switching {
                vlan {
                    members vlan-trust;
                }
            }
        }
    }
    ge-0/0/4 {
        unit 0 {
            family inet {
                address 172.16.200.254/24;
            }
            inactive: family ethernet-switching {
                vlan {
                    members vlan-trust;
                }
            }
        }
    }
    ge-0/0/5 {
        unit 0 {
            family inet {
                address 172.16.201.254/24;
            }
            inactive: family ethernet-switching {
                vlan {
                    members vlan-trust;
                }
            }
        }
    }
    ge-0/0/6 {
        unit 0 {
            family ethernet-switching {
                vlan {
                    members vlan-trust;
                }
            }
        }
    }
    ge-0/0/7 {
        unit 0 {
            family ethernet-switching {
                vlan {
                    members vlan-trust;
                }
            }
        }
    }
    ge-0/0/8 {
        unit 0 {
            family ethernet-switching {
                vlan {
                    members vlan-trust;
                }
            }
        }
    }
    ge-0/0/9 {
        unit 0 {
            family ethernet-switching {
                vlan {
                    members vlan-trust;
                }
            }
        }
    }
    ge-0/0/10 {
        unit 0 {
            encapsulation ppp-over-ether;
        }
    }
    ge-0/0/12 {
        unit 0 {
            family ethernet-switching {
                vlan {
                    members vlan-trust;
                }
            }
        }
    }
    ge-0/0/14 {
        unit 0 {
            family inet {
                address 10.10.20.253/30;
            }
            inactive: family ethernet-switching {
                vlan {
                    members vlan-trust;
                }
            }
        }
    }
    ge-0/0/15 {
        unit 0 {
            family inet {
                address 220.227.55.50/29;
            }
            inactive: family ethernet-switching {
                vlan {
                    members vlan-trust;
                }
            }
        }
    }
    pp0 {
        unit 0 {
            description PlusNet;
            ppp-options {
                chap {
                    default-chap-secret "$9$V9bgJGUHm5FjHBEyKx7jHq.PQ";
                    local-name "pr2572262741_vpn@nme.in";
                    no-rfc2486;
                    passive;
                }
            }
            pppoe-options {
                underlying-interface ge-0/0/10.0;
                idle-timeout 0;
                auto-reconnect 5;
                client;
            }
            family inet {
                mtu 1492;
                negotiate-address;
            }
        }
    }
    vlan {
        unit 0 {
            family inet {
                address 192.168.50.62/26;
            }
        }
    }
}
snmp {
    view jweb-view-all {
        oid .1 include;
    }
    community public {
        view jweb-view-all;
        authorization read-write;
    }
}
routing-options {
    static {
        route 0.0.0.0/0 next-hop 220.227.55.49;
        route 192.168.0.0/16 next-hop 192.168.50.60;
    }
}
protocols {
    pppoe {
        traceoptions {
            file ppoe files 3 world-readable;
            level all;
            flag all;
        }
    }
    stp;
}
security {
    nat {
        source {
            rule-set trust-to-untrust {
                from zone trust;
                to zone untrust;
                rule source-nat-rule {
                    match {
                        source-address 0.0.0.0/0;
                    }
                    then {
                        source-nat {
                            interface;
                        }
                    }
                }
            }
        }
        static {
            rule-set static-nat {
                from zone untrust;
                rule rule1 {
                    match {
                        destination-address 220.227.55.51/32;
                    }
                    then {
                        static-nat prefix 192.168.50.21/32;
                    }
                }
            }
        }
        proxy-arp {
            interface ge-0/0/15.0 {
                address {
                    220.227.55.51/32;
                }
            }
        }
    }
    screen {
        ids-option untrust-screen {
            icmp {
                ping-death;
            }
            ip {
                source-route-option;
                tear-drop;
            }
            tcp {
                syn-flood {
                    alarm-threshold 1024;
                    attack-threshold 200;
                    source-threshold 1024;
                    destination-threshold 2048;
                    timeout 20;
                }
                land;
            }
        }
    }
    zones {
        security-zone trust {
            address-book {
                address Director 192.168.53.11/32;
                address Secretory 192.168.53.4/32;
                address ICARD 192.168.55.7/32;
                address Proxy_Server 192.168.50.1/32;
                address DNS_Server 192.168.50.5/32;
                address Registrar 192.168.53.12/32;
                address wipro-msdn 192.168.52.196/32;
                address raisoni 192.168.50.24/32;
                address trendav 192.168.50.8/32;
                address ITESERVER 192.168.50.17/32;
                address ITECLIENT 192.168.50.18/32;
                address eclient 192.168.50.20/32;
                address eserver 192.168.50.19/32;
                address blade5 192.168.53.1/32;
                address blade1 192.168.52.216/32;
                address blade2 192.168.50.11/32;
                address blade3 192.168.55.20/32;
                address blade4 192.168.50.14/32;
                address server-2 192.168.55.239/32;
                address acc-srv 192.168.50.42/32;
                address PritamSir_Laptop 192.168.55.121/32;
                address Tejal_oza 192.168.51.129/32;
                address wad 192.168.55.112/32;
                address sugandhi-sir 192.168.55.105/32;
                address Rajesh 192.168.53.15/32;
                address wds 192.168.50.65/32;
                address abhi 192.168.50.50/32;
                address cctv 192.168.53.38/32;
                address sharma 192.168.53.8/32;
                address principal 192.168.53.32/32;
                address lib 192.168.53.17/32;
                address manish 192.168.54.27/32;
                address m 192.168.55.64/32;
                address smahajan 192.168.55.55/32;
                address Language 192.168.55.73/32;
                address video_conf 192.168.50.22/32;
                address store 192.168.53.21/32;
                address office-aicte-desk 192.168.53.29/32;
                address Niranjan 192.168.53.27/32;
                address manish_note 192.168.55.220/32;
                address account 192.168.53.19/32;
                address savita_mam 192.168.53.16/32;
                address ID 192.168.50.53/32;
                address prashant_acc 192.168.53.26/32;
                address sushil_acc 192.168.53.35/32;
                address bhole_sir 192.168.53.22/32;
                address vijay_ani 192.168.52.1/32;
                address aims 192.168.53.24/32;
                address sp 192.168.52.207/32;
                address Lib_Server 192.168.50.11/32;
                address Kavi_Rajput 192.168.53.12/32;
                address Shital 192.168.54.10/32;
                address Hod_Rajput 192.168.53.91/32;
                address Director_IT 192.168.53.39/32;
                address pr 192.168.5.0/32;
                address IIT 192.168.53.18/32;
                address-set All_Open-Port {
                    address Director;
                    address Secretory;
                    address Proxy_Server;
                    address ICARD;
                    address DNS_Server;
                    address Registrar;
                    address wipro-msdn;
                    address raisoni;
                    address trendav;
                    address office-aicte-desk;
                    address ITESERVER;
                    address ITECLIENT;
                    address eclient;
                    address eserver;
                    address blade5;
                    address blade1;
                    address blade2;
                    address blade3;
                    address blade4;
                    address server-2;
                    address principal;
                    address ID;
                    address Kavi_Rajput;
                }
            }
            host-inbound-traffic {
                system-services {
                    all;
                }
                protocols {
                    all;
                }
            }
            interfaces {
                vlan.0;
            }
        }
        security-zone untrust {
            screen untrust-screen;
            interfaces {
                ge-0/0/0.0 {
                    host-inbound-traffic {
                        system-services {
                            dhcp;
                            tftp;
                        }
                    }
                }
                ge-0/0/15.0 {
                    host-inbound-traffic {
                        system-services {
                            https;
                        }
                    }
                }
                ge-0/0/10.0 {
                    host-inbound-traffic {
                        system-services {
                            dhcp;
                            tftp;
                        }
                    }
                }
                pp0.0;
            }
        }
        security-zone MPLS {
            interfaces {
                ge-0/0/14.0;
            }
        }
        security-zone servers {
            interfaces {
                ge-0/0/4.0;
            }
        }
        security-zone Admin {
            interfaces {
                ge-0/0/5.0;
            }
        }
    }
    policies {
        from-zone trust to-zone untrust {
            policy video_conf {
                match {
                    source-address video_conf;
                    destination-address any;
                    application any;
                }
                then {
                    reject;
                }
            }
            policy trust-to-untrust {
                match {
                    source-address [ DNS_Server Proxy_Server ];
                    destination-address any;
                    application [ junos-ftp junos-http junos-https junos-dns-udp junos-dns-tcp ];
                }
                then {
                    permit;
                }
            }
            policy Proxy_LAN {
                match {
                    source-address [ DNS_Server Proxy_Server ];
                    destination-address any;
                    application [ junos-dns-tcp junos-http junos-https junos-dns-udp junos-ftp ];
                }
                then {
                    permit;
                    log {
                        session-init;
                        session-close;
                    }
                    count;
                }
            }
            policy RGIJ_ALL_OPEN {
                match {
                    source-address [ Director Secretory Registrar DNS_Server Proxy_Server trendav PritamSir_Laptop Rajesh sharma principal acc-srv sugandhi-sir Director_IT account savita_mam store bhole_sir Tejal_oza wad sushil_acc prashant_acc sp cctv blade4 blade1 Niranjan Hod_Rajput eserver ICARD smahajan abhi server-2 ];
                    destination-address any;
                    application any;
                }
                then {
                    permit;
                }
            }
        }
        from-zone untrust to-zone trust {
            policy static-nat {
                match {
                    source-address any;
                    destination-address video_conf;
                    application any;
                }
                then {
                    reject;
                }
            }
        }
    }
    utm {
        custom-objects {
            url-pattern {
                White_List {
                    value [ mysms.co.in www.bsnl.co.in www.rapidshare.com ];
                }
                Black_List {
                    value [ http://www.youtube.com/ http://www.facebook.com/ http://www.orkut.com ];
                }
            }
            custom-url-category {
                RGIJ_White_List {
                    value White_List;
                }
                RGIJ_Black_List {
                    value Black_List;
                }
            }
        }
        feature-profile {
            web-filtering {
                surf-control-integrated {
                    profile junos-wf-cpa-default {
                        category {
                            RGIJ_White_List {
                                action permit;
                            }
                            RGIJ_Black_List {
                                action block;
                            }
                        }
                    }
                }
            }
        }
        utm-policy RGIJ_web_filter {
            anti-virus {
                http-profile junos-av-defaults;
                ftp {
                    upload-profile junos-av-defaults;
                }
            }
            web-filtering {
                http-profile junos-wf-cpa-default;
            }
            traffic-options {
                sessions-per-client {
                    over-limit log-and-permit;
                }
            }
        }
    }
}
access {
    profile jweb-pp0 {
        client "pr2572262741_vpn@nme.in" chap-secret "$9$9iktC0IhSeMLxyraZDjq.0B1ElKWLxsgo7NjHmT6/M8XxVYq.5TQ3ZUz69A1ILx7-b2.mT";
    }
}
vlans {
    vlan-trust {
        vlan-id 3;
        l3-interface vlan.0;
    }
}