RTR2#sh run Building configuration... Current configuration : 9419 bytes ! ! Last configuration change at 14:22:21 UTC Wed Mar 14 2018 by alexius ! version 15.4 no service pad service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! ! boot-start-marker boot system flash c860vae-advsecurityk9-mz.154-3.M8.bin boot-end-marker ! ! ! no aaa new-model wan mode dsl no ip source-route ! ! ! ! ! ! ! ! ip cef no ipv6 cef ! ! vpdn enable ! vpdn-group 1 ! ! ! ! ! ! ! ! ! ! ! ! archive log config hidekeys vtp mode transparent ! ! controller VDSL 0 ! vlan 10 name DATA ! vlan 20 name GUEST ! vlan 30 name VOIP ! vlan 40 name FG ! track 1 ip sla 1 reachability ! ! ! ! ! ! crypto isakmp policy 1 encr aes 256 authentication pre-share group 2 ! ! crypto ipsec transform-set ESP-AES-256-SHA esp-aes 256 esp-sha-hmac mode tunnel ! ! ! crypto map CRYPTO 10 ipsec-isakmp set transform-set ESP-AES-256-SHA ! ! ! ! ! interface ATM0 no ip address shutdown no atm ilmi-keepalive ! interface Ethernet0 no ip address ip tcp adjust-mss 1452 ! interface Ethernet0.101 encapsulation dot1Q 101 ip virtual-reassembly in ip tcp adjust-mss 1452 pppoe-client dial-pool-number 1 ! interface FastEthernet0 switchport access vlan 60 no ip address ! interface FastEthernet1 switchport access vlan 60 no ip address ! interface FastEthernet2 switchport access vlan 60 no ip address ! interface FastEthernet3 switchport access vlan 60 no ip address ! interface GigabitEthernet0 switchport mode trunk no ip address ! interface GigabitEthernet1 no ip address shutdown duplex auto speed auto ! interface Vlan1 ip address 192.168.1.2 255.255.255.0 ip helper-address 10.0.20.32 ip nat inside ip virtual-reassembly in standby version 2 standby 1 ip 192.168.1.254 standby 1 priority 110 standby 1 preempt delay minimum 20 standby 1 track 1 decrement 50 ! interface Vlan10 ip address 10.0.20.2 255.255.255.0 ip nat inside ip virtual-reassembly in standby version 2 standby 10 ip 10.0.20.1 standby 10 priority 115 standby 10 preempt ! interface Vlan20 ip address 172.16.1.2 255.255.255.0 ip helper-address 10.0.20.32 ip nat inside ip virtual-reassembly in standby version 2 standby 20 ip 172.16.1.1 standby 20 preempt standby 20 track 1 decrement 90 ! interface Vlan30 ip address 10.0.21.2 255.255.255.0 ip helper-address 10.0.20.32 ip nat inside ip virtual-reassembly in standby version 2 standby 30 ip 10.0.21.1 standby 30 preempt ! interface Vlan40 ip address 10.0.22.2 255.255.255.0 ip helper-address 10.0.22.5 ip nat inside ip virtual-reassembly in standby version 2 ! interface Dialer0 no ip address ! interface Dialer1 ip address negotiated no ip unreachables ip mtu 1492 ip nat outside ip virtual-reassembly in encapsulation ppp dialer pool 1 ppp authentication chap pap callin ppp ipcp dns request no cdp enable crypto map CRYPTO ! ip forward-protocol nd no ip http server no ip http secure-server ! ! ip nat inside source list NAT interface Dialer1 overload ip nat inside source static udp 192.168.1.205 15000 interface Dialer1 15000 ip nat inside source static udp 192.168.1.205 15001 interface Dialer1 15001 ip nat inside source static udp 192.168.1.205 15002 interface Dialer1 15002 ip nat inside source static udp 192.168.1.205 15003 interface Dialer1 15003 ip nat inside source static udp 192.168.1.205 15004 interface Dialer1 15004 ip nat inside source static udp 192.168.1.205 15005 interface Dialer1 15005 ip nat inside source static udp 192.168.1.205 15006 interface Dialer1 15006 ip nat inside source static udp 192.168.1.205 15007 interface Dialer1 15007 ip nat inside source static udp 192.168.1.205 15008 interface Dialer1 15008 ip nat inside source static udp 192.168.1.205 15009 interface Dialer1 15009 ip nat inside source static udp 192.168.1.205 15010 interface Dialer1 15010 ip nat inside source static udp 192.168.1.205 15011 interface Dialer1 15011 ip nat inside source static udp 192.168.1.205 15012 interface Dialer1 15012 ip nat inside source static udp 192.168.1.205 15013 interface Dialer1 15013 ip nat inside source static udp 192.168.1.205 15014 interface Dialer1 15014 ip nat inside source static udp 192.168.1.205 15015 interface Dialer1 15015 ip nat inside source static udp 192.168.1.205 15016 interface Dialer1 15016 ip nat inside source static udp 192.168.1.205 15017 interface Dialer1 15017 ip nat inside source static udp 192.168.1.205 15018 interface Dialer1 15018 ip nat inside source static udp 192.168.1.205 15019 interface Dialer1 15019 ip nat inside source static udp 192.168.1.205 15020 interface Dialer1 15020 ip nat inside source static tcp 192.168.1.205 15000 interface Dialer1 15000 ip nat inside source static tcp 192.168.1.205 15001 interface Dialer1 15001 ip nat inside source static tcp 192.168.1.205 15002 interface Dialer1 15002 ip nat inside source static tcp 192.168.1.205 15003 interface Dialer1 15003 ip nat inside source static tcp 192.168.1.205 15004 interface Dialer1 15004 ip nat inside source static tcp 192.168.1.205 15005 interface Dialer1 15005 ip nat inside source static tcp 192.168.1.205 15006 interface Dialer1 15006 ip nat inside source static tcp 192.168.1.205 15007 interface Dialer1 15007 ip nat inside source static tcp 192.168.1.201 23 interface Dialer1 23 ip nat inside source static tcp 192.168.1.201 5201 interface Dialer1 5201 ip nat inside source static tcp 192.168.1.201 5920 interface Dialer1 5920 ip nat inside source static tcp 192.168.1.201 5921 interface Dialer1 5921 ip nat inside source static udp 192.168.1.201 1025 interface Dialer1 1025 ip nat inside source static udp 192.168.1.201 5920 interface Dialer1 5920 ip nat inside source static udp 192.168.1.201 5921 interface Dialer1 5921 ip nat inside source static udp 192.168.1.201 2074 interface Dialer1 2074 ip nat inside source static udp 192.168.1.201 2075 interface Dialer1 2075 ip nat inside source static tcp 192.168.1.202 8000 interface Dialer1 8000 ip nat inside source static tcp 192.168.1.202 5922 interface Dialer1 5922 ip nat inside source static tcp 192.168.1.202 5923 interface Dialer1 5923 ip nat inside source static udp 192.168.1.202 8000 interface Dialer1 8000 ip nat inside source static udp 192.168.1.202 5922 interface Dialer1 5922 ip nat inside source static udp 192.168.1.202 5923 interface Dialer1 5923 ip nat inside source static tcp 192.168.1.204 10001 interface Dialer1 10001 ip nat inside source static tcp 192.168.1.204 10002 interface Dialer1 10002 ip nat inside source static tcp 192.168.1.204 5926 interface Dialer1 5926 ip nat inside source static tcp 192.168.1.204 5927 interface Dialer1 5927 ip nat inside source static udp 192.168.1.204 10001 interface Dialer1 10001 ip nat inside source static udp 192.168.1.204 10002 interface Dialer1 10002 ip nat inside source static udp 192.168.1.204 5926 interface Dialer1 5926 ip nat inside source static udp 192.168.1.204 5927 interface Dialer1 5927 ip nat inside source static tcp 192.168.1.203 4000 interface Dialer1 4000 ip nat inside source static tcp 192.168.1.203 5924 interface Dialer1 5924 ip nat inside source static tcp 192.168.1.203 5925 interface Dialer1 5925 ip nat inside source static udp 192.168.1.203 4000 interface Dialer1 4000 ip nat inside source static udp 192.168.1.203 5924 interface Dialer1 5924 ip nat inside source static udp 192.168.1.203 5925 interface Dialer1 5925 ip nat inside source static tcp 192.168.1.12 3389 interface Dialer1 9644 ip route 0.0.0.0 0.0.0.0 Dialer1 ! ip access-list extended Alexius_KB permit ip 192.168.1.0 0.0.0.255 10.10.10.0 0.0.0.255 permit ip 10.0.20.0 0.0.0.255 10.10.10.0 0.0.0.255 ip access-list extended Falcon_to_All permit ip 10.0.22.0 0.0.0.255 10.0.22.0 0.0.0.255 deny ip 10.0.22.0 0.0.0.255 192.168.0.0 0.0.255.255 deny ip 10.0.22.0 0.0.0.255 172.160.0.0 0.0.255.255 deny ip 10.0.22.0 0.0.0.255 10.0.0.0 0.255.255.255 permit ip any any ip access-list extended NAT deny ip 10.0.20.0 0.0.0.255 10.10.10.0 0.0.0.255 deny ip 192.168.1.0 0.0.0.255 10.10.10.0 0.0.0.255 permit ip 192.168.1.0 0.0.0.255 any permit ip 10.0.0.0 0.255.255.255 any permit ip 172.16.1.0 0.0.0.255 any ip access-list extended SSH permit ip 10.10.20.0 0.0.0.255 any permit ip host 212.159.18.167 any permit ip 10.10.10.0 0.0.0.255 any permit ip 192.168.1.0 0.0.0.255 any permit ip host 80.229.155.154 any ! ip sla 1 icmp-echo 8.8.8.8 frequency 5 ip sla schedule 1 life forever start-time now mac-address-table aging-time 10 mac-address-table static 0000.0c9f.f001 interface CPU-MIPS-PORT vlan 1 mac-address-table static 0000.0c9f.f014 interface CPU-MIPS-PORT vlan 20 mac-address-table static 0000.0c9f.f00a interface CPU-MIPS-PORT vlan 10 mac-address-table static 0000.0c9f.f01e interface CPU-MIPS-PORT vlan 30 ! access-list 1 permit any ! ! line con 0 logging synchronous login local no modem enable line aux 0 line vty 0 4 access-class SSH in exec-timeout 0 0 logging synchronous login local transport input all ! scheduler allocate 60000 1000 ! end