All pastes #777186 Raw Edit

Stuff

public text v1 · immutable
·published 2007-11-16 16:38 UTC
rendered paste body
no ip dhcp use vrf connected
no ip dhcp conflict logging
ip dhcp excluded-address 10.10.6.0 10.10.6.9
ip dhcp excluded-address 10.10.7.0 10.10.7.254
ip dhcp excluded-address 172.16.0.0 172.16.0.9
!
ip dhcp pool 0
   network 10.10.6.0 255.255.254.0
   domain-name lmm.local
   netbios-name-server 10.10.7.200 
   netbios-node-type h-node
   default-router 10.10.6.1 
   dns-server 10.10.7.200 
   lease 30
!
ip dhcp pool 1
   network 172.16.0.0 255.255.255.0
   default-router 172.16.0.1 
   dns-server 167.206.251.14 167.206.251.78 
   lease 30
!
!
interface FastEthernet0/0
 description OPTONLINE - CABLE MODEM
 ip address 75.127.175.2 255.255.255.248
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
 crypto map mymap
!
interface FastEthernet0/1
 description AT&T - T1
 ip address 12.171.215.194 255.255.255.240
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface FastEthernet0/1/0
!         
interface FastEthernet0/1/1
 switchport access vlan 2
!
interface FastEthernet0/1/2
 shutdown
!
interface FastEthernet0/1/3
 shutdown
!
interface Vlan1
 ip address 10.10.6.1 255.255.254.0
 ip nat inside
 ip virtual-reassembly
!
interface Vlan2
 ip address 172.16.0.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 ip access-group TVLAND-OUT out
!
router rip
 network 10.0.0.0
 network 172.16.0.0
!         
ip classless
ip route 0.0.0.0 0.0.0.0 75.127.175.1
ip route 192.168.1.0 255.255.255.0 FastEthernet0/0
!
ip nat inside source list INSIDE_NAT_ADDRESSES interface FastEthernet0/0 overload
ip nat inside source static tcp 10.10.6.47 60432 interface FastEthernet0/0 60432
ip nat inside source static tcp 10.10.7.200 1723 interface FastEthernet0/0 1723
!
ip access-list extended ACL_VPN
 permit icmp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255
 permit udp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255 eq snmp
 permit tcp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255 eq 22
ip access-list extended INSIDE_NAT_ADDRESSES
 deny   ip 172.16.0.0 0.0.255.255 192.168.1.0 0.0.0.255
 deny   ip 10.10.0.0 0.0.255.255 192.168.1.0 0.0.0.255
 permit ip 10.10.6.0 0.0.1.255 any
 permit ip 172.16.0.0 0.0.0.255 any
!         
ip access-list extended TVLAN-OUT
 deny   ip 171.16.0.0 0.0.255.255 10.10.0.0 0.0.255.255
 permit ip 171.16.0.0 0.0.255.255 any