version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname AKS-DSL01-XPCS
!
boot-start-marker
boot-end-marker
!
logging buffered 64000 warnings
!
resource policy
!
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.0.0.1 10.0.0.10
ip dhcp excluded-address 10.0.1.1 10.0.1.10
ip dhcp excluded-address 10.0.2.1 10.0.2.10
!
ip dhcp pool VoIP
network 10.0.0.0 255.255.255.0
default-router 10.0.0.1
dns-server 217.13.4.24 217.13.7.140
domain-name voip.xpcs.no
lease 0 1
!
ip dhcp pool Client
network 10.0.1.0 255.255.255.0
default-router 10.0.1.1
dns-server 217.13.4.24 217.13.7.140
domain-name clients.xpcs.no
lease 0 0 30
!
ip dhcp pool Workshop
network 10.0.2.0 255.255.255.0
default-router 10.0.2.1
dns-server 217.13.4.24 217.13.7.140
domain-name workshop.xpcs.no
lease 0 0 30
!
!
no ip domain lookup
ip domain name gateway.xpcs.no
!
!
!
!
!
class-map match-any voice
match protocol rtp
match protocol sip
!
!
policy-map voice-priority
class voice
priority percent 100
class class-default
!
!
!
!
!
!
interface FastEthernet0
description *** Outside Interface ***
ip address 217.13.8.204 255.255.255.248
ip nbar protocol-discovery
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
max-reserved-bandwidth 100
service-policy output voice-priority
!
interface FastEthernet1
description *** VoIP Network ***
ip address 10.0.0.1 255.255.255.0
ip nbar protocol-discovery
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
max-reserved-bandwidth 100
service-policy output voice-priority
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
!
interface FastEthernet2
description *** Client Network ***
switchport access vlan 10
!
interface FastEthernet3
description *** Client Network ***
switchport access vlan 10
!
interface FastEthernet4
description *** Client Network ***
switchport access vlan 10
!
interface FastEthernet5
description *** Client Network ***
switchport access vlan 10
!
interface FastEthernet6
description *** Workshop Network ***
switchport access vlan 20
!
interface FastEthernet7
description *** Workshop Network ***
switchport access vlan 20
!
interface FastEthernet8
description *** Workshop Network ***
switchport access vlan 20
!
interface FastEthernet9
description *** Workshop Network ***
switchport access vlan 20
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
description *** Client Network ***
ip address 10.0.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface Vlan20
description *** Workshop Network ***
ip address 10.0.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
ip route 0.0.0.0 0.0.0.0 217.13.8.201
!
!
no ip http server
no ip http secure-server
ip nat translation timeout 30
ip nat inside source list 120 interface FastEthernet0 overload
ip nat inside source list 121 interface FastEthernet0 overload
ip nat inside source list 122 interface FastEthernet0 overload
!
access-list 120 remark *** NAT - VoIP Network ***
access-list 120 deny ip 10.0.0.0 0.0.0.255 10.0.1.0 0.0.0.255
access-list 120 deny ip 10.0.0.0 0.0.0.255 10.0.2.0 0.0.0.255
access-list 120 permit ip 10.0.0.0 0.0.0.255 any
access-list 120 deny ip any any
access-list 121 remark *** NAT - Client Network ***
access-list 121 deny ip 10.0.1.0 0.0.0.255 10.0.0.0 0.0.0.255
access-list 121 deny ip 10.0.1.0 0.0.0.255 10.0.2.0 0.0.0.255
access-list 121 permit ip 10.0.1.0 0.0.0.255 any
access-list 121 deny ip any any
access-list 122 remark *** NAT - Workshop ***
access-list 122 permit ip 10.0.2.0 0.0.0.255 any
access-list 122 deny ip any any
!
control-plane
!
banner login ^C
=================================================================
This system is for the use of authorized users only. Individuals
using this computer system without authority, or in excess of their
authority, are subject to having all of their activities on this
system monitored and recorded by system personnel.
In the course of monitoring individuals improperly using this
system, or in the course of system maintenance, the activities of
authorized users may also be monitored.
Anyone using this system expressly consents to such monitoring and
is advised that if such monitoring reveals possible evidence of
criminal activity, system personnel may provide the evidence of
such monitoring to law enforcement officials.
=================================================================
^C
!
line con 0
line aux 0
line vty 0 4
!
!
webvpn context Default_context
ssl authenticate verify all
!
no inservice
!
end