Help to correctly configure access lists and NAT in this project I use GRE tunnel and OSPF routing,
it is necessary to achieve a result in which the left and right networks will be pinged only through the tunnel (that is, direct traffic must be prohibited) and traffic from the upper network (Internet) must not pass to any of these LAN networks, but from the middle of the LAN access to the Internet must be.
