I would appreciate an example config of how to setup the router without NAT. I found this was possible when I had a PIX 506E but cannot seem to get it working on the ISR.
Steps so far.
The internal LAB is a /24 subnet of public IP addresses
create a vlan for the 8 ports with the IP set to xxx.xxx.68.254
added a static route to send traffic to the next hop
ip route 0.0.0.0 0.0.0.0 xxx.xxx.253.13
added an IP on the GigabitEthernet0/0/0 xxx.xxx.253.10 mask 255.255.255.240
no ACLs - simply want to get the traffic moving first
PCs on the VLAN ports can talk to each other and the ISR
PC traffic sent to the Internet but no return traffic to the PC
I guess there is a need to route the traffic from GigabitEthernet0/0/0 to the VLAN, but how?