!
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
!
no aaa new-model
!
resource policy
!
clock timezone Pacific -8
clock summer-time Pacific date Apr 6 2003 2:00 Oct 26 2003 2:00
ip subnet-zero
no ip source-route
ip tcp synwait-time 10
!
ip dhcp excluded-address 172.25.36.1 172.25.36.19
ip dhcp pool internalnet
 network 172.25.36.0 255.255.255.192
 default-router 172.25.36.1
 dns-server 68.87.xx.xx 68.87.xx.xx
!
ip cef
!
no ip bootp server
ip ssh time-out 60
ip ssh authentication-retries 2
!
interface Null0
 no ip unreachables
!
interface FastEthernet0/0
 description connection to LAN
 ip address 172.25.36.1 255.255.255.192
 ip nat inside
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip route-cache flow
 duplex auto
 speed auto
 no mop enabled
!
interface FastEthernet0/1
 no ip address
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip route-cache flow
 shutdown
 duplex auto
 speed auto
 no mop enabled
!
interface FastEthernet0/0/0
 description Comcast
 switchport mode access
 switchport access vlan 10
 duplex auto
 speed auto
!
interface FastEthernet0/0/1
 description Sonic.net
 switchport mode access
 switchport access vlan 20
 duplex auto
 speed auto
!
interface FastEthernet0/0/2
!
interface FastEthernet0/0/3
!
interface Serial0/1/0
 no ip address
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 shutdown
!
interface Vlan 10
 description Comcast
 ip dhcp client request dns-nameserver
 ip address dhcp
 ip nat outside
!
interface Vlan 20
 description Sonic.net
 ip address 64.142.xx.xx 255.255.255.0
 ip nat outside
 no ip redirects
 no ip unreachables
 no ip proxy-arp
!
ip classless
!ip route 0.0.0.0 0.0.0.0 FastEthernet0/0/0
!
ip http server
ip http access-class 1
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip nat inside source list 15 interface FastEthernet0/0/0 overload
!
logging trap debugging
access-list 1 remark HTTP Access-class list
access-list 1 remark SDM_ACL Category=1
access-list 1 permit 172.25.36.0 0.0.0.63
access-list 1 deny   any
access-list 15 permit 172.25.36.0 0.0.0.63
access-list 109 remark ssh access
access-list 109 permit ip 172.25.36.0 0.0.0.63 any
access-list 109 deny   ip any any
no cdp run
!
end