version 15.5 ! ! ! ! interface Port-channel1 description *** to IGRsw via Port-Channel 1 (G0/0+G0/1), G1/0/23-24 *** no ip address hold-queue 300 in ! interface Port-channel1.10 description *** expanding the servers VLAN, SubIntf *** encapsulation dot1Q 10 ip address 10.0.0.254 255.255.255.0 ip nat inside ip virtual-reassembly in ip policy route-map 10.0.0.X_hosts_PBR ! interface Port-channel1.11 description *** expanding the local VLAN, SubIntf *** encapsulation dot1Q 11 ip address 10.0.1.254 255.255.255.0 ip nat inside ip virtual-reassembly in ! interface Port-channel1.12 description *** expanding the guest VLAN, SubIntf *** encapsulation dot1Q 12 ip address 10.0.2.254 255.255.255.0 ip nat inside ip virtual-reassembly in ! interface Port-channel1.13 description *** expanding the home VLAN, SubIntf *** encapsulation dot1Q 13 ip address 10.0.3.254 255.255.255.0 ip nat inside ip virtual-reassembly in ! interface Port-channel1.64 description *** OxygenPub SubIntf *** encapsulation dot1Q 64 ip address 212.251.64.154 255.255.255.248 ip nat outside ip virtual-reassembly in ! interface Port-channel1.71 description *** AdminVLAN Subintf *** encapsulation dot1Q 71 native ip address 192.168.71.254 255.255.255.0 ip nat inside ip virtual-reassembly in ! interface Port-channel1.84 description *** forthnetHomePub SubIntf *** encapsulation dot1Q 84 ip address 194.219.84.249 255.255.255.248 ip nat outside ip virtual-reassembly in ! interface Port-channel1.204 description *** SAT20priv SubIntf *** encapsulation dot1Q 204 ip address 172.16.204.254 255.255.255.0 ip nat outside ip virtual-reassembly in ! interface Embedded-Service-Engine0/0 no ip address shutdown ! interface GigabitEthernet0/0 description *** to IGRsw via Port-Channel 1 (G1/0/23) *** no ip address duplex auto speed auto channel-group 1 ! interface GigabitEthernet0/1 description *** to IGRsw via Port-Channel 1 (G1/0/24) *** no ip address duplex auto speed auto channel-group 1 ! interface ATM0/0/0 no ip address no atm ilmi-keepalive ! interface ATM0/0/0.1 point-to-point pvc 8/35 pppoe-client dial-pool-number 1 ! ! interface ATM0/1/0 no ip address shutdown no atm ilmi-keepalive dsl operating-mode adsl2+ ! interface ATM0/1/0.1 point-to-point pvc 3/85 pppoe-client dial-pool-number 1 ! ! interface Dialer0 description *** 212.251.106.84 *** mtu 1492 ip address negotiated ip nat outside ip virtual-reassembly in encapsulation ppp dialer pool 1 dialer-group 1 ppp authentication chap callin ppp chap hostname ppp chap password 7 ! ip forward-protocol nd ! no ip http server ip http authentication local ip http secure-server ! ip nat pool srv1.local.domain_Pub 194.219.84.251 194.219.84.251 prefix-length 29 ip nat pool srv2.local.domain_Pub 194.219.84.252 194.219.84.252 prefix-length 29 ip nat pool srv3.local.domain_Pub 194.219.84.253 194.219.84.253 prefix-length 29 ip nat pool srv4.local.domain_Pub 194.219.84.254 194.219.84.254 prefix-length 29 ip nat pool srv5.local.domain_Pub 212.251.64.157 212.251.64.157 prefix-length 29 ip nat pool srv6.local.domain_Pub 212.251.64.158 212.251.64.158 prefix-length 29 ip nat pool srv7.local.domain_Pub 172.16.204.60 172.16.204.60 prefix-length 24 ip nat pool test_Pub 212.251.64.154 212.251.64.154 prefix-length 29 ip nat inside source list Other_NATted_nets interface Port-channel1.64 overload ip nat inside source list srv5.local.domain_Priv pool srv5.local.domain_Pub ip nat inside source list srv4.local.domain_Priv pool srv4.local.domain_Pub ip nat inside source list srv6.local.domain_Priv pool srv6.local.domain_Pub ip nat inside source list srv7.local.domain_Priv pool srv7.local.domain_Pub ip nat inside source list srv3.local.domain_Priv pool srv3.local.domain_Pub ip nat inside source list srv2.local.domain_Priv pool srv2.local.domain_Pub ip nat inside source list srv1.local.domain_Priv pool srv1.local.domain_Pub ip route 0.0.0.0 0.0.0.0 212.251.64.153 name Oxygen ip route 0.0.0.0 0.0.0.0 Dialer0 5 name forthent ! ip access-list standard Other_NATted_nets deny 10.0.0.9 deny 10.0.0.13 deny 10.0.0.30 deny 10.0.0.20 deny 10.0.0.40 deny 10.0.0.60 deny 10.0.0.50 permit 10.0.0.0 0.0.0.255 permit 10.0.1.0 0.0.0.255 permit 10.0.2.0 0.0.0.255 permit 10.0.3.0 0.0.0.255 permit 192.168.71.0 0.0.0.255 ip access-list standard srv5.local.domain_Priv permit 10.0.0.50 ip access-list standard srv4.local.domain_Priv permit 10.0.0.13 ip access-list standard srv6.local.domain_Priv permit 10.0.0.9 ip access-list standard rest_of_10.0.0.x permit any ip access-list standard srv7.local.domain_Priv permit 10.0.0.60 ip access-list standard srv3.local.domain_Priv permit 10.0.0.40 ip access-list standard srv2.local.domain_Priv permit 10.0.0.30 ip access-list standard srv1.local.domain_Priv permit 10.0.0.20 ! dialer-list 1 protocol ip permit ! route-map 10.0.0.X_hosts_PBR permit 9 description *** 10.0.0.9 --> Oxygen *** match ip address srv6.local.domain_Priv set ip next-hop 212.251.64.153 ! route-map 10.0.0.X_hosts_PBR permit 13 description *** 10.0.0.13 --> forthnet *** match ip address srv4.local.domain_Priv set default interface Dialer0 ! route-map 10.0.0.X_hosts_PBR permit 20 description *** 10.0.0.20 --> forthnet *** match ip address srv1.local.domain_Priv set default interface Dialer0 ! route-map 10.0.0.X_hosts_PBR permit 30 description *** 10.0.0.30 --> forthnet *** match ip address srv2.local.domain_Priv set default interface Dialer0 ! route-map 10.0.0.X_hosts_PBR permit 40 description *** 10.0.0.40 --> forthnet *** match ip address srv3.local.domain_Priv set default interface Dialer0 ! route-map 10.0.0.X_hosts_PBR permit 50 description *** 10.0.0.50 --> Oxygen *** match ip address srv5.local.domain_Priv set ip next-hop 212.251.64.153 ! route-map 10.0.0.X_hosts_PBR permit 60 description *** 10.0.0.60 --> SAT20 *** match ip address srv7.local.domain_Pri set ip next-hop 172.16.204.52 ! route-map 10.0.0.X_hosts_PBR permit 70 description *** rest of 10.0.0.x net --> Oxygen *** match ip address rest_of_10.0.0.x set ip next-hop 212.251.64.153 ! ! ! !