interface GigabitEthernet0/0 description TO_TTK_06K5158 ip address 217.[[[.[[[.109 255.255.255.252 ip access-group 120 in ip nat outside ip virtual-reassembly ip route-cache flow duplex full speed 100 negotiation auto no cdp enable ! interface GigabitEthernet0/1 description switch Cisco 500 no ip address no ip unreachables ip virtual-reassembly ip route-cache flow no ip mroute-cache duplex full speed 100 negotiation auto no cdp enable ! interface GigabitEthernet0/1.1 description RTV+ arena encapsulation dot1Q 1 native ip address 192.168.1.1 255.255.255.0 no ip redirects no ip unreachables no ip proxy-arp ip nat inside ip virtual-reassembly no ip mroute-cache no snmp trap link-status no cdp enable ! interface GigabitEthernet0/1.2 description link to server encapsulation dot1Q 2 ip address 80.[[[.[[[.65 255.255.255.192 no ip redirects no ip unreachables no ip proxy-arp ip nat outside ip virtual-reassembly no ip mroute-cache no snmp trap link-status no cdp enable ! interface Serial0/0 no ip address shutdown clockrate 2000000 no fair-queue ! interface Serial0/1 no ip address shutdown clockrate 2000000 ! interface Serial3/0:15 no ip address encapsulation ppp isdn switch-type primary-net5 isdn incoming-voice modem isdn send-alerting isdn sending-complete no cdp enable ! interface Serial3/1:15 no ip address shutdown isdn switch-type primary-net5 no cdp enable ! interface Group-Async0 description modem pool ip unnumbered Loopback1 ip nat inside ip virtual-reassembly encapsulation ppp async mode dedicated peer default ip address pool DialUp compress mppc ppp authentication chap pap callin group-range 1/00 1/59 ! ip local pool DialUp 10.10.10.2 10.10.10.254 ! ip classless ip route 0.0.0.0 0.0.0.0 217.150.54.110 no ip http server ! ip nat inside source list 50 interface GigabitEthernet0/0 overload ip nat inside source list 102 interface GigabitEthernet0/0 overload ip nat inside source list 104 interface GigabitEthernet0/1.2 overload ip nat inside source static tcp 192.168.1.200 25 80.[[[.[[[.65 25 extendable ip nat inside source static tcp 192.168.1.200 53 80.[[[.[[[.65 53 extendable ip nat inside source static udp 192.168.1.200 53 80.[[[.[[[.65 53 extendable ip nat inside source static tcp 192.168.1.200 80 80.[[[.[[[.65 80 extendable ip nat inside source static tcp 192.168.1.200 110 80.[[[.[[[.65 110 extendable ! ip radius source-interface GigabitEthernet0/1 access-list 50 permit 10.10.10.0 0.0.0.255 access-list 102 permit ip 192.168.1.0 0.0.0.255 any access-list 103 permit ip 10.10.10.0 0.0.0.255 any access-list 104 permit ip 192.168.1.0 0.0.0.255 any access-list 120 deny tcp any 217.[[[.[[[.1 0.0.0.252 eq 445 access-list 120 deny tcp any 217.[[[.[[[.1 0.0.0.252 eq 1720 access-list 120 deny tcp any 217.[[[.[[[.1 0.0.0.252 eq 5060 access-list 120 permit ip any any snmp-server community public RO Gateway# show ip nat translations Pro Inside global Inside local Outside local Outside global tcp 80.[[[.[[[.65:25 192.168.1.200:25 --- --- tcp 80.[[[.[[[.65:53 192.168.1.200:53 --- --- udp 80.[[[.[[[.65:53 192.168.1.200:53 62.[[[.[[[.10:1305 62.[[[.[[[.10:1305 udp 80.[[[.[[[.65:53 192.168.1.200:53 62.[[[.[[[.10:1306 62.[[[.[[[.10:1306 udp 80.[[[.[[[.65:53 192.168.1.200:53 --- --- tcp 80.[[[.[[[.65:80 192.168.1.200:80 --- --- tcp 80.[[[.[[[.65:110 192.168.1.200:110 --- ---