no ip dhcp use vrf connected no ip dhcp conflict logging ip dhcp excluded-address 10.10.6.0 10.10.6.9 ip dhcp excluded-address 10.10.7.0 10.10.7.254 ip dhcp excluded-address 172.16.0.0 172.16.0.9 ! ip dhcp pool 0 network 10.10.6.0 255.255.254.0 domain-name lmm.local netbios-name-server 10.10.7.200 netbios-node-type h-node default-router 10.10.6.1 dns-server 10.10.7.200 lease 30 ! ip dhcp pool 1 network 172.16.0.0 255.255.255.0 default-router 172.16.0.1 dns-server 167.206.251.14 167.206.251.78 lease 30 ! ! interface FastEthernet0/0 description OPTONLINE - CABLE MODEM ip address 75.127.175.2 255.255.255.248 ip nat outside ip virtual-reassembly duplex auto speed auto crypto map mymap ! interface FastEthernet0/1 description AT&T - T1 ip address 12.171.215.194 255.255.255.240 ip virtual-reassembly duplex auto speed auto ! interface FastEthernet0/1/0 ! interface FastEthernet0/1/1 switchport access vlan 2 ! interface FastEthernet0/1/2 shutdown ! interface FastEthernet0/1/3 shutdown ! interface Vlan1 ip address 10.10.6.1 255.255.254.0 ip nat inside ip virtual-reassembly ! interface Vlan2 ip address 172.16.0.1 255.255.255.0 ip nat inside ip virtual-reassembly ip access-group TVLAND-OUT out ! router rip network 10.0.0.0 network 172.16.0.0 ! ip classless ip route 0.0.0.0 0.0.0.0 75.127.175.1 ip route 192.168.1.0 255.255.255.0 FastEthernet0/0 ! ip nat inside source list INSIDE_NAT_ADDRESSES interface FastEthernet0/0 overload ip nat inside source static tcp 10.10.6.47 60432 interface FastEthernet0/0 60432 ip nat inside source static tcp 10.10.7.200 1723 interface FastEthernet0/0 1723 ! ip access-list extended ACL_VPN permit icmp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255 permit udp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255 eq snmp permit tcp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255 eq 22 ip access-list extended INSIDE_NAT_ADDRESSES deny ip 172.16.0.0 0.0.255.255 192.168.1.0 0.0.0.255 deny ip 10.10.0.0 0.0.255.255 192.168.1.0 0.0.0.255 permit ip 10.10.6.0 0.0.1.255 any permit ip 172.16.0.0 0.0.0.255 any ! ip access-list extended TVLAN-OUT deny ip 171.16.0.0 0.0.255.255 10.10.0.0 0.0.255.255 permit ip 171.16.0.0 0.0.255.255 any