C3620#sh run
Building configuration...

Current configuration : 6052 bytes
!
version 12.3
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname C3620
!
boot-start-marker
boot system slot0:c3620-ik9o3s6-mz.123-22.bin
boot system slot1:c3620-ik9o3s6-mz.123-22.bin
boot system tftp c3620-ik9o3s6-mz.123-22.bin 192.168.0.4
boot-end-marker
!
logging buffered 51200 warnings

!
aaa new-model
!
!
aaa session-id common
ip subnet-zero
no ip source-route
!
!
ip cef
ip domain name themattreid.com
ip name-server 192.168.0.4
ip name-server 64.105.172.26
ip dhcp excluded-address 192.168.0.1 192.168.0.100
ip dhcp excluded-address 192.168.1.1 192.168.1.100
ip dhcp binding cleanup interval 10
!
ip dhcp pool dhcp-pool
   network 192.168.0.0 255.255.255.0
   default-router 192.168.0.1 
   dns-server 192.168.0.4 
   lease 7
!
ip dhcp pool dhcp-pool-1
   network 192.168.1.0 255.255.255.0
   default-router 192.168.1.1 
   dns-server 192.168.0.4 
   lease infinite
!
no ip bootp server
ip inspect audit-trail
ip inspect max-incomplete low 500
ip inspect max-incomplete high 1000
ip inspect one-minute low 500
ip inspect one-minute high 1000
ip inspect name SPI-0 tcp
ip inspect name SPI-0 udp
ip inspect name SPI-0 icmp
ip inspect name SPI-0 ftp
ip inspect name SPI-0 rcmd
ip inspect name SPI-0 smtp
ip inspect name SPI-0 fragment maximum 256 timeout 1
ip inspect name SPI-0 http
ip audit attack action alarm drop reset
ip audit po max-events 100
ip audit protected 192.168.0.4
ip audit smtp spam 50
ip audit name INFO info list 99 action alarm
ip audit name ATTACK attack list 98 action alarm drop reset
!
!
!
!
!
!
!
!         
!
!
!
!

!
!
ip tcp synwait-time 100
ip ssh time-out 60
ip ssh authentication-retries 2
!
class-map match-any SDMScave-FastEthernet0/1
  match protocol napster
  match protocol fasttrack
  match protocol gnutella
class-map match-any SDMTrans-FastEthernet0/1
  match protocol citrix
  match protocol finger
  match protocol notes
  match protocol novadigm
  match protocol pcanywhere
  match protocol secure-telnet
  match protocol sqlnet
  match protocol sqlserver
  match protocol ssh
  match protocol telnet
  match protocol xwindows
class-map match-any SDMVoice-FastEthernet0/1
  match protocol rtp audio 
class-map match-any SDMSVideo-FastEthernet0/1
  match protocol cuseeme
  match protocol netshow
  match protocol rtspplayer
  match protocol streamwork
  match protocol vdolive
class-map match-any SDMIVideo-FastEthernet0/1
  match protocol rtp video 
class-map match-any SDMManage-FastEthernet0/1
  match protocol dhcp
  match protocol dns
  match protocol imap
  match protocol kerberos
  match protocol ldap
  match protocol secure-imap
  match protocol secure-ldap
  match protocol snmp
  match protocol socks
  match protocol syslog
class-map match-any SDMRout-FastEthernet0/1
  match protocol bgp
  match protocol egp
  match protocol eigrp
  match protocol rip
  match protocol rsvp
class-map match-any SDMBulk-FastEthernet0/1
  match protocol exchange
  match protocol ftp
  match protocol irc
  match protocol nntp
  match protocol pop3
  match protocol printer
  match protocol secure-ftp
  match protocol secure-irc
  match protocol secure-nntp
  match protocol secure-pop3
  match protocol smtp
  match protocol tftp
!
!
policy-map SDM-Pol-FastEthernet0/1
  class SDMManage-FastEthernet0/1
   bandwidth remaining percent 8
   set dscp cs2
  class SDMVoice-FastEthernet0/1
   priority percent 49
   set dscp ef
  class SDMRout-FastEthernet0/1
   bandwidth remaining percent 8
   set dscp cs6
  class SDMTrans-FastEthernet0/1
   set dscp af21
   bandwidth remaining percent 50
  class SDMBulk-FastEthernet0/1
   bandwidth remaining percent 34
   set dscp default
!
! 
!
!
!
!
interface Null0
 no ip unreachables
!
interface FastEthernet0/0
 ip address dhcp
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip nat outside
 ip route-cache flow
 duplex auto
 speed auto
!
interface FastEthernet0/1
 ip address 192.168.0.1 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip nat inside
 ip nbar protocol-discovery
 ip inspect SPI-0 in
 ip inspect SPI-0 out
 ip audit ATTACK in
 ip audit ATTACK out
 ip route-cache flow
 duplex auto
 speed auto
 service-policy output SDM-Pol-FastEthernet0/1
!
interface FastEthernet1/0
 ip address 192.168.1.1 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip nat inside
 ip route-cache flow
 duplex auto
 speed auto
!
router rip
 version 2
 redistribute connected
 redistribute static
 network 192.168.0.0
 network 192.168.1.0
!
ip nat inside source list 120 interface FastEthernet0/0 overload
ip nat inside source static tcp 192.168.0.4 9601 interface FastEthernet0/0 9601
ip nat inside source static tcp 192.168.0.4 9600 interface FastEthernet0/0 9600
ip nat inside source static tcp 192.168.0.104 2234 interface FastEthernet0/0 2234
ip nat inside source static tcp 192.168.0.4 9599 interface FastEthernet0/0 9599
no ip http server
no ip http secure-server
ip classless
!
!
logging facility syslog
logging 192.168.0.4
access-list 98 deny   192.168.0.0 0.0.255.255
access-list 98 permit any
access-list 99 deny   192.168.0.0 0.0.255.255
access-list 99 permit any
access-list 120 permit ip 192.168.0.0 0.0.255.255 any
access-list 125 permit ip 192.168.0.0 0.0.0.255 any
no cdp run
!
snmp-server community public RO
!
!
!
gateway 
!
!
banner login ^CWelcome to here. Go away.^C
!
line con 0
 transport output none
line aux 0
 transport output none
line vty 0 4
 transport input none
line vty 5 15
 access-class 125 in
 privilege level 15
 transport input ssh
!
scheduler allocate 4000 1000
ntp server 198.144.202.250
ntp server 140.192.21.130
!
end