sh start
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
boot-start-marker
boot-end-marker
!
ip domain name *.ru
ip name-server Мои ДНС
ip name-server Мои ДНС
ip name-server 212.45.2.5 ДНС КОМКОР
ip name-server 212.45.0.3 ДНС КОМКОР
ip ssh version 2
ip sla monitor 213
type echo protocol ipIcmpEcho 213.171.*.*
ip sla monitor schedule 213 life forever start-time now
!
track 1 rtr 213 reachability
!
track 2 rtr 195 reachability
!
bridge irb
!
interface Loopback0
ip address 172.17.0.1 255.255.255.255
ip nat inside
ip virtual-reassembly
ip policy route-map nexthop
!
interface Loopback1
ip address 87.245.*.* 255.255.255.0
ip nat outside
ip virtual-reassembly
!
interface GigabitEthernet0/0  Комкор
ip address 213.171.*.* 255.255.255.252
ip access-group no_icmp in
no ip unreachables
ip nat outside
ip virtual-reassembly max-reassemblies 64
duplex full
speed 100
media-type rj45
negotiation auto
!
interface GigabitEthernet0/1  Вестколл
ip address 195.94.*.* 255.255.255.252
ip access-group no_icmp in
no ip unreachables
ip nat outside
ip virtual-reassembly
duplex full
speed 100
media-type rj45
negotiation auto
!
interface FastEthernet0/0/0
switchport access vlan 10
duplex full
speed 100
!
interface FastEthernet0/0/1
!
interface FastEthernet0/0/2
!
interface FastEthernet0/0/3
!
interface Vlan1
no ip address
!
interface Vlan10
ip address 172.16.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip policy route-map nexthop
!
router eigrp 100
passive-interface GigabitEthernet0/0
network 172.16.0.0
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 213.171.*.* track 1
ip route 0.0.0.0 0.0.0.0 195.94.*.* 2 track 2
!
no ip http server
no ip http secure-server
ip nat inside source list nat_control interface Loopback1 overload
ip nat inside source route-map RM1 interface GigabitEthernet0/0 overload
ip nat inside source route-map RM2 interface GigabitEthernet0/1 overload
!
ip access-list standard vty_control
permit 87.245.*.*
permit 87.245.*.*
!
ip access-list extended nat_control
permit ip 10.0.0.0 0.255.255.255 any
permit ip 172.16.0.0 0.0.255.255 any
ip access-list extended no_icmp
deny   icmp any host 213.171.*.* echo
deny   icmp any host 195.94.*.* echo
permit ip any any
!
access-list 100 permit ip 10.0.0.0 0.255.255.255 any
access-list 100 deny   ip any any
snmp-server community public RO 20
no cdp run
!
route-map ISP1-NAT permit 10
match ip address ISP2
match interface GigabitEthernet0/0
!
route-map ISP2-NAT permit 10
match ip address ISP1
match interface GigabitEthernet0/1
!
route-map RM2 permit 10
match ip address 100
match interface GigabitEthernet0/1
!
route-map RM1 permit 10
match ip address 100
match interface GigabitEthernet0/0
!
route-map nexthop permit 10
set ip next-hop verify-availability 213.171.*.* 1 track 1
set ip next-hop verify-availability 195.94.*.* 2 track 2
!
end