ip source-route
!
!
ip cef
!
ip vrf ISP2-inet
 rd 65531:1
 route-target export 65531:1
 route-target import 65531:1
!
ip vrf ISP1-inet
 rd 65531:900
 route-target export 65531:900
 route-target import 65531:900
!



!
interface FastEthernet0/0
 no ip address
 load-interval 30
 duplex full
 speed 100
!
interface FastEthernet0/0.1
 encapsulation dot1Q 1 native
 ip vrf receive ISP1-inet
 ip vrf receive ISP2-inet
 ip address 10.3.2.33 255.255.255.224
 ip flow ingress
 ip flow egress
 ip nat inside
 ip virtual-reassembly in
 ip policy route-map vrf_selection
!
interface FastEthernet0/0.2
 encapsulation dot1Q 20
 ip vrf receive ISP1-inet
 ip vrf receive ISP2-inet
 ip address 10.0.20.1 255.255.255.0
 ip flow ingress
 ip flow egress
 ip nat inside
 ip virtual-reassembly in
 ip policy route-map vrf_selection
!
interface FastEthernet0/0.3
 encapsulation dot1Q 30
 ip vrf receive ISP1-inet
 ip vrf receive ISP2-inet
 ip address 192.168.20.1 255.255.255.0
 ip flow ingress
 ip flow egress
 ip nat inside
 ip inspect MANAGE out
 ip virtual-reassembly in
 ip policy route-map vrf_selection
!
interface FastEthernet0/0.900
 description ISP1-inet [MAIN]
 encapsulation dot1Q 200
 ip vrf forwarding ISP1-inet
 ip address <ISP1-ip-address> 255.255.255.252
 ip access-group isp2_inbound in
 ip flow ingress
 ip flow egress
 ip nat outside
 ip inspect ISP1_Inspect out
 ip virtual-reassembly in
!
interface FastEthernet0/1
 no ip address
 load-interval 30
 duplex auto
 speed auto
!
interface FastEthernet0/1.1
 description ISP2-inet [RESERVED]
 encapsulation dot1Q 300 
 ip vrf forwarding ISP2-inet
 ip address <bee-ip-address> 255.255.255.248
 ip access-group isp_inbound in
 ip flow ingress
 ip flow egress
 ip nat outside
 ip inspect ISP2_Inspect out
 ip virtual-reassembly in
!


ip nat inside source route-map nat_map interface FastEthernet0/1.1 vrf ISP2-inet overload
ip nat inside source route-map nat_map interface FastEthernet0/0.900 vrf ISP1-inet overload
ip route vrf ISP2-inet 0.0.0.0 0.0.0.0 <ISP2-default-gateway>
ip route vrf ISP1-inet 0.0.0.0 0.0.0.0 <ISP1-default-gateway>
!
ip access-list extended NAT_all
 permit ip 10.3.2.32 0.0.0.31 any
 permit ip 192.168.20.0 0.0.0.255 any
 permit ip 10.0.20.0 0.0.0.255 any
 permit ip 10.20.112.0 0.0.0.255 any

ip access-list extended int2inet
 permit ip 10.20.112.0 0.0.0.255 any
 deny   ip any 10.0.0.0 0.255.255.255
 deny   ip any 172.16.0.0 0.15.255.255
 deny   ip any 192.168.0.0 0.0.255.255
 deny   ip any 127.0.0.0 0.255.255.255
 deny   ip any 224.0.0.0 15.255.255.255
 deny   ip any 240.0.0.0 7.255.255.255
 permit ip 10.3.2.32 0.0.0.31 any
 permit ip 10.3.2.0 0.0.0.3 any
 permit ip 10.0.20.0 0.0.0.255 any
 permit ip 192.168.20.0 0.0.0.255 any


!
route-map nat_map permit 10
 match ip address NAT_all
 match interface FastEthernet0/0.900
!
route-map nat_map permit 20
 match ip address NAT_all
 match interface FastEthernet0/1.1
!
route-map iFork permit 10
!
route-map vrf_selection permit 10
 match ip address int2inet
 set vrf ISP1-inet
!