version 15.2
service timestamps debug datetime msec
service timestamps log datetime localtime
service password-encryption
!
!
boot-start-marker
boot-end-marker
!
!
no logging console
no logging monitor
enable password 7 11080D111E1C0A08247B7977
!
no aaa new-model
!
!
!
!
no ip domain lookup
no ipv6 cef
multilink bundle-name authenticated
!
!
!
license udi pid CISCO1905/K9 sn FGL1803203B
!
!
username admin password 7 050A121B28424F0D39544541
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
 no ip address

!
interface GigabitEthernet0/0
 ip address x.x.x.x y.y.y.y
 ip access-group GRE in
 no ip redirects
 ip nat enable
 duplex auto
 speed auto
!
interface GigabitEthernet0/1
 ip address 192.168.2.1 255.255.254.0
 ip access-group gre-out in
 no ip redirects
 ip nat enable
 duplex auto
 speed auto
!
interface Serial0/0/0
 no ip address
 shutdown
 clock rate 2000000
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat source list 1 interface GigabitEthernet0/0 overload
ip nat source static tcp 192.168.2.223 8080 interface GigabitEthernet0/0 8080
ip nat source static tcp 192.168.2.103 8172 interface GigabitEthernet0/0 8172
ip nat source static tcp 192.168.2.103 8701 interface GigabitEthernet0/0 8701
ip nat source static tcp 192.168.2.103 8009 interface GigabitEthernet0/0 8009
ip nat source static tcp 192.168.2.103 27017 interface GigabitEthernet0/0 27017
ip nat source static tcp 192.168.2.103 3001 interface GigabitEthernet0/0 3001
ip nat source static tcp 192.168.2.103 1433 interface GigabitEthernet0/0 1433
ip nat source static tcp 192.168.2.103 6500 interface GigabitEthernet0/0 6500
ip nat source static tcp 192.168.2.103 9043 interface GigabitEthernet0/0 9043
ip nat source static tcp 192.168.2.103 9080 interface GigabitEthernet0/0 9080
ip nat source static tcp 192.168.2.103 81 interface GigabitEthernet0/0 81
ip nat source static tcp 192.168.2.103 444 interface GigabitEthernet0/0 444
ip nat source static tcp 192.168.2.103 8886 interface GigabitEthernet0/0 8886

ip route 0.0.0.0 0.0.0.0 x.x.x.x
!
ip access-list extended BLOCK_ROUTERACESS
 permit tcp 192.168.2.0 0.0.0.255 any eq telnet
 deny   ip any any
 
ip access-list extended GRE
 
 permit ip any any
ip access-list extended STOP_PING
 permit gre any any
 deny   icmp any any echo
 permit icmp any any echo-reply
 permit ip any any

!
no logging trap

access-list 1 permit 192.168.2.0 0.0.1.255
!
!
!
control-plane
 
!
!
line con 0
line aux 0
line 2
 no activation-character
 no exec
 transport preferred none
 transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
 stopbits 1
line vty 0 4
 access-class BLOCK_ROUTERACESS in
 exec-timeout 15 0
 login local
 transport input all
!
scheduler allocate 20000 1000
!
end