version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname router1841
!
boot-start-marker
boot-end-marker
!
logging buffered 52000 debugging
aaa new-model
!
!
aaa authentication login clientauth local
aaa authorization network groupauthor local 
!
aaa session-id common
!
resource policy
!
clock timezone EST -5
clock summer-time EDT recurring
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip subnet-zero
ip cef
!
!
no ip dhcp use vrf connected
no ip dhcp conflict logging
ip dhcp excluded-address 10.10.6.0 10.10.6.9
ip dhcp excluded-address 10.10.7.0 10.10.7.254
ip dhcp excluded-address 172.16.0.0 172.16.0.9
!
ip dhcp pool 0
   network 10.10.6.0 255.255.254.0
   domain-name lmm.local
   netbios-name-server 10.10.7.200 
   netbios-node-type h-node
   default-router 10.10.6.1 
   dns-server 10.10.7.200 
   lease 30
!
ip dhcp pool 1
   network 172.16.0.0 255.255.255.0
   default-router 172.16.0.1 
   dns-server 167.206.251.14 167.206.251.78 
   lease 30
!
!
no ip domain lookup
ip domain name lmm.local
!
!
!
archive
 log config
  logging enable
  logging size 500
  notify syslog
  hidekeys
!
! 
!
crypto isakmp policy 10
 encr 3des
 hash md5
 authentication pre-share
 group 2
!
!
crypto ipsec transform-set myset esp-3des esp-md5-hmac 
!
crypto map mymap 10 ipsec-isakmp 
 set peer 69.20.72.8
 set transform-set myset 
 match address ACL_VPN
!
!
!
interface FastEthernet0/0
 description OPTONLINE - CABLE MODEM
 ip address 75.127.175.2 255.255.255.248
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
 crypto map mymap
!
interface FastEthernet0/1
 description AT&T - T1
 ip address 12.171.215.194 255.255.255.240
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface FastEthernet0/1/0
!         
interface FastEthernet0/1/1
 switchport access vlan 2
!
interface FastEthernet0/1/2
 shutdown
!
interface FastEthernet0/1/3
 shutdown
!
interface Vlan1
 ip address 10.10.6.1 255.255.254.0
 ip nat inside
 ip virtual-reassembly
!
interface Vlan2
 ip address 172.16.0.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
!
router rip
 network 10.0.0.0
 network 172.16.0.0
!         
ip classless
ip route 0.0.0.0 0.0.0.0 75.127.175.1
ip route 192.168.1.0 255.255.255.0 FastEthernet0/0
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list INSIDE_NAT_ADDRESSES interface FastEthernet0/0 overload
ip nat inside source static tcp 10.10.6.47 60432 interface FastEthernet0/0 60432
ip nat inside source static tcp 10.10.7.200 1723 interface FastEthernet0/0 1723
!
ip access-list extended ACL_VPN
 permit icmp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255
 permit udp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255 eq snmp
 permit tcp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255 eq 22
ip access-list extended INSIDE_NAT_ADDRESSES
 deny   ip 172.16.0.0 0.0.255.255 192.168.1.0 0.0.0.255
 deny   ip 10.10.0.0 0.0.255.255 192.168.1.0 0.0.0.255
 permit ip 10.10.6.0 0.0.1.255 any
 permit ip 172.16.0.0 0.0.0.255 any
!