>sh run не хватает...

version 12.4
service nagle
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname xxx
!
boot-start-marker
boot system flash:c2800nm-advipservicesk9-mz.124-13b.bin
boot-end-marker
!
card type e1 0 0
logging count
logging userinfo
enable secret 5 xxx
!
aaa new-model
!
!
!
aaa session-id common
network-clock-participate wic 0
!
!
ip cef
!
!
no ip domain lookup
ip domain name xxx.ru
ip sla monitor 11
type echo protocol ipIcmpEcho xxx source-interface GigabitEthernet0/0.5
timeout 1000
threshold 10
frequency 5
ip sla monitor schedule 11 life forever start-time now
ip sla monitor 12
type echo protocol ipIcmpEcho xxx2 source-interface GigabitEthernet0/0.5
frequency 30
ip sla monitor schedule 12 life forever start-time now
!
isdn switch-type primary-net5
!
voice-card 0
codec complexity high
no dspfarm
!
!
!
!
!
!
!
!
!
!
!
!
!
!
username xxxxxxxxxxxxxxxx
!
!
controller E1 0/0/0
clock source internal
pri-group timeslots 1-12,16
!
ip ssh logging events
!
track 11 rtr 11 reachability
delay down 10 up 30
!
track 12 rtr 12 reachability
delay down 10 up 30
!
interface GigabitEthernet0/0
no ip address
no ip route-cache cef
no ip route-cache
logging event subif-link-status
duplex auto
speed auto
!
interface GigabitEthernet0/0.1
description management if
encapsulation dot1Q 6
ip address 192.168.xx.xx 255.255.255.0
no ip route-cache
!
interface GigabitEthernet0/0.2
description LAN
encapsulation dot1Q 2
ip address 192.168.xx.xx 255.255.252.0
ip access-group locint in
ip access-group locint out
ip nat inside
ip virtual-reassembly
no ip route-cache
ip policy route-map squid
traffic-shape group 190 2048000 51200 51200 1000
no cdp enable
!
interface GigabitEthernet0/0.3
description INET
encapsulation dot1Q 3
ip address 84.xx.xx.47 255.255.255.224 secondary
ip address 84.xx.xx.57 255.255.255.224
ip nat outside
ip virtual-reassembly
no ip route-cache
crypto map mymap
!
interface GigabitEthernet0/0.4
encapsulation dot1Q 4
ip address 10.xx.xx.254 255.255.0.0
ip virtual-reassembly
no ip route-cache
no cdp enable
!
interface GigabitEthernet0/0.5
encapsulation dot1Q 5
ip address 192.168.xx.1 255.255.255.248
ip virtual-reassembly
no ip route-cache
no cdp enable
!
interface GigabitEthernet0/1
no ip address
logging event subif-link-status
shutdown
duplex auto
speed auto
!
interface Serial0/0/0:15
no ip address
encapsulation hdlc
isdn switch-type primary-dpnss
isdn incoming-voice voice
no cdp enable
!
router rip
version 2
passive-interface default
no passive-interface Tunnel0
network 10.xx.xx.0
network 192.168.xx.0
network 192.168.xx.0
network 192.168.xx.0
!
ip local pool ippool 192.168.xx.1 192.168.xx.254
ip route 0.0.0.0 0.0.0.0 84.xx.xx.62
!
!
no ip http server
no ip http secure-server
ip nat inside source static tcp 192.168.xx.169 3389 interface GigabitEthernet0/0.3 3390
ip nat inside source route-map nonat interface GigabitEthernet0/0.3 overload
ip nat inside source static tcp 192.168.xx.2 80 84.204.44.47 80 extendable
ip nat inside source static udp 192.168.2.165 5060 84.204.44.57 5060 extendable
!
ip access-list extended locint
permit ip any any

access-list 190 deny   ip 192.168.0.0 0.0.3.255 10.0.0.0 0.0.255.255
access-list 190 deny   ip 192.168.0.0 0.0.3.255 192.168.0.0 0.0.255.255
access-list 190 permit ip 192.168.0.0 0.0.3.255 any
no cdp run
!
route-map nonat permit 10
match ip address LAN-NAT
!
!
control-plane
!
!
!
voice-port 0/0/0:15
!
!
!
!
!
!
!
!
line con 0
password 7 xxx
logging synchronous
line aux 0
line vty 0 4
exec-timeout 30 0
transport preferred ssh
!
scheduler allocate 20000 1000
!
end

Кое что удалено(Vpn и прочее) и заменено(имена пароли, адреса).
Если что непонятно, пишите.