version 12.4 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname AKS-DSL01-XPCS ! boot-start-marker boot-end-marker ! logging buffered 64000 warnings ! resource policy ! ! ! ip cef no ip dhcp use vrf connected ip dhcp excluded-address 10.0.0.1 10.0.0.10 ip dhcp excluded-address 10.0.1.1 10.0.1.10 ip dhcp excluded-address 10.0.2.1 10.0.2.10 ! ip dhcp pool VoIP network 10.0.0.0 255.255.255.0 default-router 10.0.0.1 dns-server 217.13.4.24 217.13.7.140 domain-name voip.xpcs.no lease 0 1 ! ip dhcp pool Client network 10.0.1.0 255.255.255.0 default-router 10.0.1.1 dns-server 217.13.4.24 217.13.7.140 domain-name clients.xpcs.no lease 0 0 30 ! ip dhcp pool Workshop network 10.0.2.0 255.255.255.0 default-router 10.0.2.1 dns-server 217.13.4.24 217.13.7.140 domain-name workshop.xpcs.no lease 0 0 30 ! ! no ip domain lookup ip domain name gateway.xpcs.no ! ! ! ! ! class-map match-any voice match protocol rtp match protocol sip ! ! policy-map voice-priority class voice priority percent 100 class class-default ! ! ! ! ! ! interface FastEthernet0 description *** Outside Interface *** ip address 217.13.8.204 255.255.255.248 ip nbar protocol-discovery ip nat outside ip virtual-reassembly duplex auto speed auto max-reserved-bandwidth 100 service-policy output voice-priority ! interface FastEthernet1 description *** VoIP Network *** ip address 10.0.0.1 255.255.255.0 ip nbar protocol-discovery ip nat inside ip virtual-reassembly duplex auto speed auto max-reserved-bandwidth 100 service-policy output voice-priority ! interface BRI0 no ip address encapsulation hdlc shutdown ! interface FastEthernet2 description *** Client Network *** switchport access vlan 10 ! interface FastEthernet3 description *** Client Network *** switchport access vlan 10 ! interface FastEthernet4 description *** Client Network *** switchport access vlan 10 ! interface FastEthernet5 description *** Client Network *** switchport access vlan 10 ! interface FastEthernet6 description *** Workshop Network *** switchport access vlan 20 ! interface FastEthernet7 description *** Workshop Network *** switchport access vlan 20 ! interface FastEthernet8 description *** Workshop Network *** switchport access vlan 20 ! interface FastEthernet9 description *** Workshop Network *** switchport access vlan 20 ! interface Vlan1 no ip address shutdown ! interface Vlan10 description *** Client Network *** ip address 10.0.1.1 255.255.255.0 ip nat inside ip virtual-reassembly ! interface Vlan20 description *** Workshop Network *** ip address 10.0.2.1 255.255.255.0 ip nat inside ip virtual-reassembly ! ip route 0.0.0.0 0.0.0.0 217.13.8.201 ! ! no ip http server no ip http secure-server ip nat translation timeout 30 ip nat inside source list 120 interface FastEthernet0 overload ip nat inside source list 121 interface FastEthernet0 overload ip nat inside source list 122 interface FastEthernet0 overload ! access-list 120 remark *** NAT - VoIP Network *** access-list 120 deny ip 10.0.0.0 0.0.0.255 10.0.1.0 0.0.0.255 access-list 120 deny ip 10.0.0.0 0.0.0.255 10.0.2.0 0.0.0.255 access-list 120 permit ip 10.0.0.0 0.0.0.255 any access-list 120 deny ip any any access-list 121 remark *** NAT - Client Network *** access-list 121 deny ip 10.0.1.0 0.0.0.255 10.0.0.0 0.0.0.255 access-list 121 deny ip 10.0.1.0 0.0.0.255 10.0.2.0 0.0.0.255 access-list 121 permit ip 10.0.1.0 0.0.0.255 any access-list 121 deny ip any any access-list 122 remark *** NAT - Workshop *** access-list 122 permit ip 10.0.2.0 0.0.0.255 any access-list 122 deny ip any any ! control-plane ! banner login ^C ================================================================= This system is for the use of authorized users only. Individuals using this computer system without authority, or in excess of their authority, are subject to having all of their activities on this system monitored and recorded by system personnel. In the course of monitoring individuals improperly using this system, or in the course of system maintenance, the activities of authorized users may also be monitored. Anyone using this system expressly consents to such monitoring and is advised that if such monitoring reveals possible evidence of criminal activity, system personnel may provide the evidence of such monitoring to law enforcement officials. ================================================================= ^C ! line con 0 line aux 0 line vty 0 4 ! ! webvpn context Default_context ssl authenticate verify all ! no inservice ! end