Firewall Configuration for the Reston Headquarters
interface Ethernet 0
nameif outside
security-level 0
ip address 192.168.1.2 255.255.255.0
speed 100
duplex full
interface Ethernet 1
nameif inside
security-level 100
ip address 10.10.10.1 255.255.255.0
speed 100
duplex full
interface Ethernet 2
nameif DMZ
security-level 80
ip address 172.16.31.1 255.255.255.0
speed 100
duplex full
interface Ethernet 3
nameif failover
security-level 90
ip address 1.1.1.1 255.255.255.0
speed 100 duplex full
hostname HQ-PIX
nat (inside) 1 10.10.10.0 255.255.255.0
global (outside) 1 192.168.1.12-192.168.1.150 netmask 255.255.255.0
global (outside) 1 192.168.1.152 netmask 255.255.255.0
global (DMZ) 1 172.16.31.12-172.16.31.100 netmask 255.255.255.0
static (DMZ,outside) 192.168.1.4 172.16.31.4 netmask 255.255.255.255 0 0
static (DMZ,outside) 192.168.1.5 172.16.31.5 netmask 255.255.255.255 0 0
static (DMZ,outside) 192.168.1.6 172.16.31.6 netmask 255.255.255.255 0 0
route outside 0.0.0.0 0.0.0.0 192.168.1.1