here is total config.........
Current configuration : 3742 bytes
!
! Last configuration change at 06:02:08 est Sun Jan 2 2005
! NVRAM config last updated at 06:02:09 est Sun Jan 2 2005
!
version 12.3
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname 1720_FW
!
boot-start-marker
boot-end-marker
!
logging count
logging buffered 4096 informational
logging monitor warnings
enable secret xxxx
enable password xxxx
!
memory-size iomem 20
clock timezone est 5
no aaa new-model
ip subnet-zero
no ip source-route
!
!
!
ip dhcp pool dhcppool
import all
network 10.10.10.0 255.255.255.0
default-router 10.10.10.200
lease 7
!
no ip bootp server
ip cef
!
!
!
!
interface Loopback0
ip address 10.10.20.1 255.255.255.0
!
interface Ethernet0
ip address dhcp
ip access-group 100 in
ip access-group 101 out
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
half-duplex
no cdp enable
!
interface FastEthernet0
ip address 10.10.10.1 255.255.255.0
ip nat inside
speed auto
no cdp enable
!
ip nat translation timeout 60
ip nat inside source list 1 interface Ethernet0 overload
ip nat inside source static tcp 10.10.10.60 21 interface Ethernet0 21
ip nat inside source static tcp 10.10.10.60 20 interface Ethernet0 20
ip nat inside source static tcp 10.10.10.60 3389 interface Ethernet0 3389
ip nat inside source static tcp 10.10.10.60 1494 interface Ethernet0 1494
ip classless
no ip http server
!
!
ip access-list extended internet-in
logging source-interface Ethernet0
logging 10.10.10.66
access-list 1 permit 10.0.0.0 0.255.255.255 log
access-list 100 permit tcp any host 10.10.10.60 range 13010 13015 log
access-list 100 permit tcp any host 10.10.10.60 eq 3389 log
access-list 100 permit tcp any any eq ftp log
access-list 100 permit tcp any eq ftp-data any gt 1023 log
access-list 100 permit tcp any eq ftp any gt 1023 log
access-list 100 permit tcp any any established log
access-list 100 permit tcp any any log
access-list 100 permit ip any any log
access-list 100 permit icmp any any net-unreachable
access-list 100 permit icmp any any host-unreachable
access-list 100 permit icmp any any port-unreachable
access-list 100 permit icmp any any parameter-problem
access-list 100 permit icmp any any packet-too-big
access-list 100 permit icmp any any administratively-prohibited
access-list 100 permit icmp any any source-quench
access-list 100 permit icmp any any echo-reply
access-list 100 permit icmp any any ttl-exceeded
access-list 100 permit tcp any host 10.10.10.60 eq 1494
access-list 101 permit ip any any log
access-list 101 permit tcp any any log
access-list 101 permit tcp any any established log
access-list 101 permit icmp any any net-unreachable
access-list 101 permit icmp any any host-unreachable
access-list 101 permit icmp any any port-unreachable
access-list 101 permit icmp any any parameter-problem
access-list 101 permit icmp any any packet-too-big
access-list 101 permit icmp any any administratively-prohibited
access-list 101 permit icmp any any source-quench
access-list 101 permit icmp any any echo-reply
access-list 101 permit icmp any any ttl-exceeded
access-list 101 deny ip 0.0.0.0 255.255.0.0 any
no cdp run
banner motd ^CC
****************************
* WARNING *
****************************
!
line con 0
line aux 0
line vty 0 3
access-class 1 in
password 7 1508
login
telnet refuse-negotiations
line vty 4
access-class 1 in
password 7
login
telnet refuse-negotiations
!
1720_FW#
