{\rtf1\mac\ansicpg10000\cocoartf824\cocoasubrtf480
{\fonttbl\f0\fswiss\fcharset77 Helvetica;}
{\colortbl;\red255\green255\blue255;}
\margl1440\margr1440\vieww11180\viewh14280\viewkind0
\pard\tx720\tx1440\tx2160\tx2880\tx3600\tx4320\tx5040\tx5760\tx6480\tx7200\tx7920\tx8640\ql\qnatural\pardirnatural

\f0\fs24 \cf0 set clock timezone 0\
set vrouter trust-vr sharable\
set vrouter "untrust-vr"\
exit\
set vrouter "trust-vr"\
unset auto-route-export\
exit\
set alg appleichat enable\
unset alg appleichat re-assembly enable\
set alg sctp enable\
set auth-server "Local" id 0\
set auth-server "Local" server-name "Local"\
set auth default auth server "Local"\
set auth radius accounting port 1646\
set admin name "netscreen"\
set admin password "nKVUM2rwMUzPcrkG5sWIHdCtqkAibn"\
set admin auth web timeout 10\
set admin auth dial-in timeout 3\
set admin auth server "Local"\
set admin format dos\
set zone "Trust" vrouter "trust-vr"\
set zone "Untrust" vrouter "trust-vr"\
set zone "DMZ" vrouter "trust-vr"\
set zone "VLAN" vrouter "trust-vr"\
set zone "Untrust-Tun" vrouter "trust-vr"\
set zone "Trust" tcp-rst \
set zone "Untrust" block \
unset zone "Untrust" tcp-rst \
set zone "MGT" block \
set zone "DMZ" tcp-rst \
set zone "VLAN" block \
unset zone "VLAN" tcp-rst \
set zone "Untrust" screen tear-drop\
set zone "Untrust" screen syn-flood\
set zone "Untrust" screen ping-death\
set zone "Untrust" screen ip-filter-src\
set zone "Untrust" screen land\
set zone "V1-Untrust" screen tear-drop\
set zone "V1-Untrust" screen syn-flood\
set zone "V1-Untrust" screen ping-death\
set zone "V1-Untrust" screen ip-filter-src\
set zone "V1-Untrust" screen land\
set interface "ethernet0/0" zone "Untrust"\
set interface "ethernet0/1" zone "DMZ"\
set interface "wireless0/0" zone "Trust"\
set interface "bgroup0" zone "Trust"\
set interface bgroup0 port ethernet0/2\
set interface bgroup0 port ethernet0/3\
set interface bgroup0 port ethernet0/4\
set interface bgroup0 port ethernet0/5\
set interface bgroup0 port ethernet0/6\
unset interface vlan1 ip\
set interface wireless0/0 ip 192.168.2.1/24\
set interface wireless0/0 nat\
set interface bgroup0 ip 192.168.1.1/24\
set interface bgroup0 nat\
unset interface vlan1 bypass-others-ipsec\
unset interface vlan1 bypass-non-ip\
set interface wireless0/0 ip manageable\
set interface bgroup0 ip manageable\
set interface wireless0/0 dhcp server service\
set interface bgroup0 dhcp server service\
set interface wireless0/0 dhcp server auto\
set interface bgroup0 dhcp server auto\
set interface wireless0/0 dhcp server option gateway 192.168.2.1 \
set interface wireless0/0 dhcp server option netmask 255.255.255.0 \
set interface bgroup0 dhcp server option gateway 192.168.1.1 \
set interface bgroup0 dhcp server option netmask 255.255.255.0 \
set interface wireless0/0 dhcp server ip 192.168.2.33 to 192.168.2.126 \
set interface bgroup0 dhcp server ip 192.168.1.33 to 192.168.1.126 \
unset interface wireless0/0 dhcp server config next-server-ip\
unset interface bgroup0 dhcp server config next-server-ip\
set interface "serial0/0" modem settings "USR" init "AT&F"\
set interface "serial0/0" modem settings "USR" active\
set interface "serial0/0" modem speed 115200\
set interface "serial0/0" modem retry 3\
set interface "serial0/0" modem interval 10\
set interface "serial0/0" modem idle-time 10\
set flow tcp-mss\
unset flow no-tcp-seq-check\
set flow tcp-syn-check\
unset flow tcp-syn-bit-check\
set flow reverse-route clear-text prefer\
set flow reverse-route tunnel always\
set pki authority default scep mode "auto"\
set pki x509 default cert-path partial\
set ike respond-bad-spi 1\
set ike ikev2 ike-sa-soft-lifetime 60\
unset ike ikeid-enumeration\
unset ike dos-protection\
unset ipsec access-session enable\
set ipsec access-session maximum 5000\
set ipsec access-session upper-threshold 0\
set ipsec access-session lower-threshold 0\
set ipsec access-session dead-p2-sa-timeout 0\
unset ipsec access-session log-error\
unset ipsec access-session info-exch-connected\
unset ipsec access-session use-error-log\
set vrouter "untrust-vr"\
exit\
set vrouter "trust-vr"\
exit\
set url protocol websense\
exit\
set policy id 1 from "Trust" to "Untrust"  "Any" "Any" "ANY" permit \
set policy id 1\
exit\
set nsmgmt bulkcli reboot-timeout 60\
set ssh version v2\
set config lock timeout 5\
unset license-key auto-update\
set wlan 0 channel auto\
set wlan 1 channel auto\
set snmp port listen 161\
set snmp port trap 162\
set vrouter "untrust-vr"\
exit\
set vrouter "trust-vr"\
unset add-default-route\
exit\
set vrouter "untrust-vr"\
exit\
set vrouter "trust-vr"\
exit\
}