interface FastEthernet0/0 description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FE 0/0$$FW_INSIDE$ no ip address ip access-group 111 in ip access-group 150 out no ip redirects duplex full speed 100 ! interface FastEthernet0/0.1 description $FW_INSIDE$ encapsulation dot1Q 1 native ip address 10.1.1.7 255.255.255.0 ip access-group 104 in ip access-group 150 out no ip redirects ip nat inside ip virtual-reassembly no snmp trap link-status ! interface FastEthernet0/1 description $ES_LAN$$FW_DMZ$ ip address 10.1.10.1 255.255.255.0 ip access-group blockall in ip nat inside ip inspect shahed out ip virtual-reassembly duplex full speed 100 ! interface ATM0/0/0 no ip address no atm ilmi-keepalive dsl operating-mode auto pvc 0/38 encapsulation aal5mux ppp dialer dialer pool-member 1 ! ! interface Dialer0 description $FW_OUTSIDE$ ip address 81.xx.xx.114 255.255.255.240 ip access-group 108 in no ip redirects ip mtu 1472 ip nat outside ip inspect SDM_XXX out ip virtual-reassembly encapsulation ppp dialer pool 1 ppp authentication chap callin ppp chap hostname xxx ppp chap password 0 xxx crypto map SDM_CMAP_1 ! ip route 0.0.0.0 0.0.0.0 Dialer0 ! ip nat inside source route-map SDM_RMAP_1 interface Dialer0 overload ip nat inside source static 10.1.10.10 81.xx.xx.115 route-map SDM_RMAP_4 access-list 103 remark SDM_ACL Category=2 access-list 103 deny ip host 10.1.10.10 any access-list 103 permit ip 10.1.1.0 0.0.0.255 any access-list 110 remark SDM_ACL Category=2 access-list 110 permit ip host 10.1.10.10 any route-map SDM_RMAP_4 permit 1 match ip address 110 ! route-map SDM_RMAP_1 permit 2 match ip address 103 !