пардон:
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname neocisco
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
!
dot11 syslog
ip cef
!
!
!
!
ip ddns update method no-ip.org
HTTP
  add http://xxxxxxxxxxxxxx@dynupdate.no-ip.com/nic/updatehos...
  remove http://xxxxxxxxxxxxxxx@dynupdate.no-ip.com/nic/updateho...
interval maximum 20 0 0 0
interval minimum 0 0 20 0
!
!
multilink bundle-name authenticated
!
!
username Cisco privilege 15 password 0 xxxxxxxxxxxxx
!
!
archive
log config
  hidekeys
!
!
pseudowire-class class1
encapsulation l2tpv2
ip local interface FastEthernet0
!
!
!
!
interface Tunnel1
description tunnel to Kolia
ip address 10.10.20.20 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1436
tunnel source Virtual-PPP1
tunnel destination xxxxxxxxxxxxxx
!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
dsl operating-mode auto
!
interface FastEthernet0
!
interface FastEthernet1
switchport access vlan 300
!
interface FastEthernet2
switchport access vlan 300
!
interface FastEthernet3
switchport access vlan 300
!
interface Virtual-PPP1
ip ddns update hostname xxxxxxxxxxxxxxxxx
ip ddns update no-ip.org host xxxxxxxxxxxxxxx
ip address negotiated
ip nat outside
ip virtual-reassembly
no cdp enable
ppp chap hostname xxxxxxxxxxxxxxx
ppp chap password 0 xxxxxxxxxxxxxx
pseudowire 10.255.255.253 10 pw-class class1
!
interface Vlan1
ip address dhcp
ip nat outside
ip virtual-reassembly
ip tcp adjust-mss 1400
!
interface Vlan300
ip address 10.10.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1400
!
interface Vlan100
no ip address
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Virtual-PPP1
ip route 192.168.0.0 255.255.255.0 Tunnel1
ip route 192.168.1.0 255.255.255.0 Tunnel1
ip route 192.168.5.0 255.255.255.0 Tunnel1
ip route 10.0.0.0 255.0.0.0 dhcp
ip route 85.21.72.83 255.255.255.255 dhcp
!
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface Tunnel1 overload
ip nat inside source list 100 interface Tunnel1 overload
ip nat inside source list LAN interface Vlan1 overload
ip nat inside source list TUN interface Tunnel1 overload
ip nat inside source list WAN interface Virtual-PPP1 overload
ip nat inside source static tcp 10.10.10.1 23 interface Virtual-PPP1 22
ip nat inside source static udp 10.10.10.10 3002 interface Vlan1 3002
ip nat inside source static udp 192.168.5.5 60000 interface Vlan1 60000
ip nat inside source static tcp 10.10.10.10 3001 interface Vlan1 3001
!
ip access-list extended LAN
permit ip 10.10.10.0 0.0.0.255 10.0.0.0 0.255.255.255
permit ip 10.10.10.0 0.0.0.255 83.102.146.0 0.0.0.231
permit ip 10.10.10.0 0.0.0.255 host 85.21.29.242
permit ip 10.10.10.0 0.0.0.255 85.21.79.0 0.0.0.255
permit ip 10.10.10.0 0.0.0.255 85.21.90.0 0.0.0.255
permit ip 10.10.10.0 0.0.0.255 host 195.14.50.16
permit ip 10.10.10.0 0.0.0.255 host 195.14.50.26
permit ip 10.10.10.0 0.0.0.255 0.0.0.0 255.255.255.0
permit ip 10.10.10.0 0.0.0.255 host 85.21.72.83
permit ip 10.10.10.0 0.0.0.255 85.21.72.0 0.0.0.255
permit ip 10.10.11.0 0.0.0.255 10.0.0.0 0.255.255.255
permit ip 10.10.255.0 0.0.0.255 10.0.0.0 0.255.255.255
permit ip 10.0.0.0 0.255.255.255 10.0.0.0 0.0.0.255
permit ip 0.0.0.21 255.255.255.0 any
permit ip 192.0.0.0 0.255.255.255 any
ip access-list extended TUN
permit ip 10.10.10.0 0.0.0.255 192.168.0.0 0.0.0.255
permit ip 10.10.10.0 0.0.0.255 192.168.1.0 0.0.0.255
ip access-list extended WAN
permit ip 10.10.10.0 0.0.0.255 any
!
!
!
!
!
control-plane
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
password xxxxxxxxxxxxxxx
login local
!
scheduler max-task-time 5000
end