RouterA#show ru Building configuration... Current configuration : 4231 bytes ! ! Last configuration change at 11:26:19 ADT Wed Apr 28 1993 ! NVRAM config last updated at 11:28:09 ADT Wed Apr 28 1993 ! version 12.2 service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname RouterA ! no logging console aaa new-model ! ! aaa authentication login userauthen local aaa authorization network groupauthor local aaa session-id common enable secret 5 $1$q1a8$L4bOrM9fhMkI6oI.O7lEb/ enable password ***** ! username mickymouse password 0 magic memory-size iomem 25 clock timezone AST -4 clock summer-time ADT recurring ip subnet-zero ! ! ip domain-list pluto.COM ip domain-list goofy.COM ip name-server 654.321.1.2 ip name-server 123.345.567.7 ! ip audit notify log ip audit po max-events 100 ! crypto isakmp policy 3 encr 3des authentication pre-share group 2 ! crypto isakmp client configuration group biovectra key traveller dns 123.345.567.7 wins 123.345.567.7 domain pluto.com pool ippool ! ! crypto ipsec transform-set myset esp-3des esp-sha-hmac ! crypto dynamic-map dynmap 10 set transform-set myset ! ! crypto map clientmap client authentication list userauthen crypto map clientmap isakmp authorization list groupauthor crypto map clientmap client configuration address respond crypto map clientmap 10 ipsec-isakmp dynamic dynmap ! ! ! ! interface Ethernet0 ip address 290.098.207.226 255.255.255.248 ip access-group 120 in ip nat outside no ip mroute-cache full-duplex no cdp enable crypto map clientmap ! interface FastEthernet0 ip address 123.345.567.44 255.255.255.0 ip nat inside no ip mroute-cache speed auto full-duplex no cdp enable ! ip local pool ippool 203.302.1.1 203.302.1.10 ip nat pool every 290.098.207.227 290.098.207.229 netmask 255.255.255.248 ip nat inside source route-map nonat pool every overload ip nat inside source static 123.345.567.13 290.098.207.230 route-map nonat ip classless ip route 0.0.0.0 0.0.0.0 290.098.207.225 ip route 201.351.381.0 255.255.255.0 123.345.567.1 no ip http server ip pim bidir-enable ! ! access-list 7 permit 0.0.0.0 123.345.567.255 access-list 7 permit 0.0.0.0 201.351.381.255 access-list 110 deny ip 123.345.567.0 0.0.0.255 203.302.1.0 0.0.0.255 access-list 110 permit ip 123.345.567.0 0.0.0.255 any access-list 110 deny ip 201.351.381.0 0.0.0.255 203.302.1.0 0.0.0.255 access-list 110 permit ip 201.351.381.0 0.0.0.255 any access-list 120 permit tcp any host 290.098.207.230 eq smtp access-list 120 permit tcp any host 290.098.207.230 eq pop3 access-list 120 permit icmp any any echo access-list 120 permit icmp any any echo-reply access-list 120 permit udp any host 290.098.207.226 eq isakmp access-list 120 permit esp any host 290.098.207.226 access-list 120 permit ip 203.302.1.0 0.0.0.255 123.345.567.0 0.0.0.255 access-list 120 permit ip 203.302.1.0 0.0.0.255 201.351.381.0 0.0.0.255 access-list 120 permit tcp any any established no cdp run ! route-map nonat permit 10 match ip address 110 ! snmp-server community public RO snmp-server community Bio RO ! line con 0 exec-timeout 0 0 line aux 0 line vty 0 4 password ****** ! no scheduler allocate ntp authenticate ntp clock-period 17176255 ntp source Ethernet0 ntp master ntp server 122.5.43.36 end RouterA#show in Ethernet0 is up, line protocol is up Hardware is PQUICC Ethernet, address is ******* Internet address is 290.098.207.226/29 MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec, reliability 254/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 10BaseT ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:03, output 00:00:00, output hang never Last clearing of "show interface" counters never Input queue: 0/75/44/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue :0/40 (size/max) 5 minute input rate 54000 bits/sec, 2 packets/sec 5 minute output rate 2000 bits/sec, 2 packets/sec 67641162 packets input, 4148335564 bytes, 0 no buffer Received 790329 broadcasts, 0 runts, 3116 giants, 0 throttles 1168610 input errors, 183876 CRC, 981617 frame, 1 overrun, 0 ignored 0 input packets with dribble condition detected 120509095 packets output, 579558301 bytes, 0 underruns 0 output errors, 0 collisions, 1 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out FastEthernet0 is up, line protocol is up Hardware is PQUICC_FEC, address is ****** Internet address is 123.345.567.44/24 MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, 100BaseTX/FX ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:00, output 00:00:00, output hang never Last clearing of "show interface" counters never Input queue: 0/75/1348/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue :0/40 (size/max) 5 minute input rate 7000 bits/sec, 8 packets/sec 5 minute output rate 60000 bits/sec, 5 packets/sec 136735821 packets input, 1739174092 bytes Received 16454189 broadcasts, 0 runts, 0 giants, 0 throttles 1157 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog 0 input packets with dribble condition detected 67732035 packets output, 3950168351 bytes, 0 underruns 0 output errors, 0 collisions, 1 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out RouterA#show ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static route Gateway of last resort is 290.098.207.225 to network 0.0.0.0 C 123.345.567.0/24 is directly connected, FastEthernet0 S 201.351.381.0/24 [1/0] via 123.345.567.1 290.098.0.0/29 is subnetted, 1 subnets C 290.098.207.224 is directly connected, Ethernet0 S* 0.0.0.0/0 [1/0] via 290.098.207.225