NEC 業務用ルーター UNIVERGE IX2215（中古）自宅用ルーター IPv4 PPPoE ネットワーク設定メモ

ip access-list all-pass option optimize
ip access-list all-pass permit ip src any dest any
ip access-list in_out-block option optimize
ip access-list in_out-block deny tcp src any sport any dest any dport eq 135
ip access-list in_out-block deny udp src any sport any dest any dport eq 135
ip access-list in_out-block deny tcp src any sport any dest any dport eq 137
ip access-list in_out-block deny udp src any sport any dest any dport eq 137
ip access-list in_out-block deny udp src any sport any dest any dport eq 138
ip access-list in_out-block deny tcp src any sport any dest any dport eq 139
ip access-list in_out-block deny tcp src any sport any dest any dport eq 445
ip access-list in_out-block deny udp src any sport any dest any dport eq 445
ip access-list mynetwork option optimize
ip access-list mynetwork permit ip src 192.168.xxx.xxx/xx dest any
ip access-list r-list1 option optimize
ip access-list r-list1 deny ip src 10.0.0.0/8 dest any
ip access-list r-list1 deny ip src 172.16.0.0/12 dest any
ip access-list r-list1 deny ip src 192.168.0.0/16 dest any
ip access-list str-block option optimize
ip access-list str-block deny udp src any sport any dest any dport eq 161
ip access-list svr-block deny tcp src any sport any dest any dport eq 1
ip access-list svr-block deny udp src any sport any dest any dport eq 1
ip access-list svr-block deny tcp src any sport any dest any dport eq 11
ip access-list svr-block deny udp src any sport any dest any dport eq 11
ip access-list svr-block deny tcp src any sport any dest any dport eq 15
ip access-list svr-block deny udp src any sport any dest any dport eq 15
ip access-list svr-block deny tcp src any sport any dest any dport eq 20
ip access-list svr-block deny udp src any sport any dest any dport eq 20
ip access-list svr-block deny tcp src any sport any dest any dport eq 21
ip access-list svr-block deny udp src any sport any dest any dport eq 21
ip access-list svr-block deny tcp src any sport any dest any dport eq 23
ip access-list svr-block deny udp src any sport any dest any dport eq 23
ip access-list svr-block deny tcp src any sport any dest any dport eq 67
ip access-list svr-block deny udp src any sport any dest any dport eq 67
ip access-list svr-block deny tcp src any sport any dest any dport eq 68
ip access-list svr-block deny udp src any sport any dest any dport eq 68
ip access-list svr-block deny tcp src any sport any dest any dport eq 69
ip access-list svr-block deny udp src any sport any dest any dport eq 69
ip access-list svr-block deny tcp src any sport any dest any dport eq 70
ip access-list svr-block deny udp src any sport any dest any dport eq 70
ip access-list svr-block deny tcp src any sport any dest any dport eq 79
ip access-list svr-block deny udp src any sport any dest any dport eq 79
ip access-list svr-block deny tcp src any sport any dest any dport eq 87
ip access-list svr-block deny udp src any sport any dest any dport eq 87
ip access-list svr-block deny tcp src any sport any dest any dport eq 95
ip access-list svr-block deny udp src any sport any dest any dport eq 95
ip access-list svr-block deny tcp src any sport any dest any dport eq 111
ip access-list svr-block deny udp src any sport any dest any dport eq 111
ip access-list svr-block deny tcp src any sport any dest any dport eq 144
ip access-list svr-block deny udp src any sport any dest any dport eq 144
ip access-list svr-block deny tcp src any sport any dest any dport eq 161
ip access-list svr-block deny tcp src any sport any dest any dport eq 162
ip access-list svr-block deny udp src any sport any dest any dport eq 162
ip access-list svr-block deny tcp src any sport any dest any dport eq 177
ip access-list svr-block deny udp src any sport any dest any dport eq 177
ip access-list svr-block deny tcp src any sport any dest any dport eq 220
ip access-list svr-block deny udp src any sport any dest any dport eq 220
ip access-list svr-block deny tcp src any sport any dest any dport eq 512
ip access-list svr-block deny udp src any sport any dest any dport eq 512
ip access-list svr-block deny tcp src any sport any dest any dport eq 513
ip access-list svr-block deny udp src any sport any dest any dport eq 513
ip access-list svr-block deny tcp src any sport any dest any dport eq 514
ip access-list svr-block deny udp src any sport any dest any dport eq 514
ip access-list svr-block deny tcp src any sport any dest any dport eq 515
ip access-list svr-block deny udp src any sport any dest any dport eq 515
ip access-list svr-block deny tcp src any sport any dest any dport eq 517
ip access-list svr-block deny udp src any sport any dest any dport eq 517
ip access-list svr-block deny tcp src any sport any dest any dport eq 518
ip access-list svr-block deny udp src any sport any dest any dport eq 518
ip access-list svr-block deny tcp src any sport any dest any dport eq 520
ip access-list svr-block deny udp src any sport any dest any dport eq 520
ip access-list svr-block deny tcp src any sport any dest any dport eq 540
ip access-list svr-block deny udp src any sport any dest any dport eq 540
ip access-list svr-block deny tcp src any sport any dest any dport eq 1025
ip access-list svr-block deny udp src any sport any dest any dport eq 1025
ip access-list svr-block deny tcp src any sport any dest any dport eq 2000
ip access-list svr-block deny udp src any sport any dest any dport eq 2000
ip access-list svr-block deny tcp src any sport any dest any dport eq 2049
ip access-list svr-block deny udp src any sport any dest any dport eq 2049
ip access-list svr-block deny tcp src any sport any dest any dport eq 2766
ip access-list svr-block deny udp src any sport any dest any dport eq 2766
ip access-list svr-block deny tcp src any sport any dest any dport range 6000 6063
ip access-list svr-block deny udp src any sport any dest any dport range 6000 6063
ip access-list svr-block deny tcp src any sport any dest any dport eq 6257
ip access-list svr-block deny udp src any sport any dest any dport eq 6257
ip access-list svr-block deny tcp src any sport any dest any dport eq 6665
ip access-list svr-block deny udp src any sport any dest any dport eq 6665
ip access-list svr-block deny tcp src any sport any dest any dport eq 6666
ip access-list svr-block deny udp src any sport any dest any dport eq 6666
ip access-list svr-block deny tcp src any sport any dest any dport eq 6667
ip access-list svr-block deny udp src any sport any dest any dport eq 6667
ip access-list svr-block deny tcp src any sport any dest any dport eq 6668
ip access-list svr-block deny udp src any sport any dest any dport eq 6668
ip access-list svr-block deny tcp src any sport any dest any dport eq 6669
ip access-list svr-block deny udp src any sport any dest any dport eq 6669
ip access-list svr-block deny tcp src any sport any dest any dport eq 6699
ip access-list svr-block deny udp src any sport any dest any dport eq 6699
ip access-list svr-block deny tcp src any sport any dest any dport eq 7743
ip access-list svr-block deny udp src any sport any dest any dport eq 7743
ip access-list svr-block deny tcp src any sport any dest any dport eq 12345
ip access-list svr-block deny udp src any sport any dest any dport eq 12345
ip filter forced-reassembly

interface GigaEthernet0.1
  ip filter in_out-block 1 in
  ip filter svr-block 100 in
  ip filter r-list1 110 in
  ip filter all-pass 65000 in
  ip filter in_out-block 1 out
  ip filter mynetwork 50 out
  ip filter svr-block 100 out
  ip filter r-list1 110 out
  ip filter all-pass 65000 out

service password-encryption
!
hostname HOSTNAME
!
logging buffered 4096
logging subsystem all warn
logging timestamp timeofday
!
username USER-NAME password { plain [MODE] | hash } PASSWORD [LEVEL]
!
ntp server 210.173.160.27
ntp server 210.173.160.57
ntp server 210.173.160.87
ntp retry 10
ntp interval 86400
!
!
ip ufs-cache max-entries 20000
ip ufs-cache enable
ip route default GigaEthernet0.1
ip access-list all-pass option optimize
ip access-list all-pass permit ip src any dest any
ip access-list in_out-block option optimize
ip access-list in_out-block deny tcp src any sport any dest any dport eq 135
ip access-list in_out-block deny udp src any sport any dest any dport eq 135
ip access-list in_out-block deny tcp src any sport any dest any dport eq 137
ip access-list in_out-block deny udp src any sport any dest any dport eq 137
ip access-list in_out-block deny udp src any sport any dest any dport eq 138
ip access-list in_out-block deny tcp src any sport any dest any dport eq 139
ip access-list in_out-block deny tcp src any sport any dest any dport eq 445
ip access-list in_out-block deny udp src any sport any dest any dport eq 445
ip access-list ipv4_udp_range option optimize
ip access-list ipv4_udp_range permit udp src any sport range 1024 65535 dest any dport range 1024 65535
ip access-list mynetwork1 option optimize
ip access-list mynetwork1 permit ip src 192.168.1.2/32 dest any
ip access-list mynetwork2 option optimize
ip access-list mynetwork2 permit ip src 192.168.1.2/32 dest any
ip access-list r-list1 option optimize
ip access-list r-list1 deny ip src 10.0.0.0/8 dest any
ip access-list r-list1 deny ip src 172.16.0.0/12 dest any
ip access-list r-list1 deny ip src 192.168.0.0/16 dest any
ip access-list str-block option optimize
ip access-list str-block deny udp src any sport any dest any dport eq 161
ip access-list svr-block deny tcp src any sport any dest any dport eq 1
ip access-list svr-block deny udp src any sport any dest any dport eq 1
ip access-list svr-block deny tcp src any sport any dest any dport eq 11
ip access-list svr-block deny udp src any sport any dest any dport eq 11
ip access-list svr-block deny tcp src any sport any dest any dport eq 15
ip access-list svr-block deny udp src any sport any dest any dport eq 15
ip access-list svr-block deny tcp src any sport any dest any dport eq 20
ip access-list svr-block deny udp src any sport any dest any dport eq 20
ip access-list svr-block deny tcp src any sport any dest any dport eq 21
ip access-list svr-block deny udp src any sport any dest any dport eq 21
ip access-list svr-block deny tcp src any sport any dest any dport eq 23
ip access-list svr-block deny udp src any sport any dest any dport eq 23
ip access-list svr-block deny tcp src any sport any dest any dport eq 67
ip access-list svr-block deny udp src any sport any dest any dport eq 67
ip access-list svr-block deny tcp src any sport any dest any dport eq 68
ip access-list svr-block deny udp src any sport any dest any dport eq 68
ip access-list svr-block deny tcp src any sport any dest any dport eq 69
ip access-list svr-block deny udp src any sport any dest any dport eq 69
ip access-list svr-block deny tcp src any sport any dest any dport eq 70
ip access-list svr-block deny udp src any sport any dest any dport eq 70
ip access-list svr-block deny tcp src any sport any dest any dport eq 79
ip access-list svr-block deny udp src any sport any dest any dport eq 79
ip access-list svr-block deny tcp src any sport any dest any dport eq 87
ip access-list svr-block deny udp src any sport any dest any dport eq 87
ip access-list svr-block deny tcp src any sport any dest any dport eq 95
ip access-list svr-block deny udp src any sport any dest any dport eq 95
ip access-list svr-block deny tcp src any sport any dest any dport eq 111
ip access-list svr-block deny udp src any sport any dest any dport eq 111
ip access-list svr-block deny tcp src any sport any dest any dport eq 144
ip access-list svr-block deny udp src any sport any dest any dport eq 144
ip access-list svr-block deny tcp src any sport any dest any dport eq 161
ip access-list svr-block deny tcp src any sport any dest any dport eq 162
ip access-list svr-block deny udp src any sport any dest any dport eq 162
ip access-list svr-block deny tcp src any sport any dest any dport eq 177
ip access-list svr-block deny udp src any sport any dest any dport eq 177
ip access-list svr-block deny tcp src any sport any dest any dport eq 220
ip access-list svr-block deny udp src any sport any dest any dport eq 220
ip access-list svr-block deny tcp src any sport any dest any dport eq 512
ip access-list svr-block deny udp src any sport any dest any dport eq 512
ip access-list svr-block deny tcp src any sport any dest any dport eq 513
ip access-list svr-block deny udp src any sport any dest any dport eq 513
ip access-list svr-block deny tcp src any sport any dest any dport eq 514
ip access-list svr-block deny udp src any sport any dest any dport eq 514
ip access-list svr-block deny tcp src any sport any dest any dport eq 515
ip access-list svr-block deny udp src any sport any dest any dport eq 515
ip access-list svr-block deny tcp src any sport any dest any dport eq 517
ip access-list svr-block deny udp src any sport any dest any dport eq 517
ip access-list svr-block deny tcp src any sport any dest any dport eq 518
ip access-list svr-block deny udp src any sport any dest any dport eq 518
ip access-list svr-block deny tcp src any sport any dest any dport eq 520
ip access-list svr-block deny udp src any sport any dest any dport eq 520
ip access-list svr-block deny tcp src any sport any dest any dport eq 540
ip access-list svr-block deny udp src any sport any dest any dport eq 540
ip access-list svr-block deny tcp src any sport any dest any dport eq 1025
ip access-list svr-block deny udp src any sport any dest any dport eq 1025
ip access-list svr-block deny tcp src any sport any dest any dport eq 2000
ip access-list svr-block deny udp src any sport any dest any dport eq 2000
ip access-list svr-block deny tcp src any sport any dest any dport eq 2049
ip access-list svr-block deny udp src any sport any dest any dport eq 2049
ip access-list svr-block deny tcp src any sport any dest any dport eq 2766
ip access-list svr-block deny udp src any sport any dest any dport eq 2766
ip access-list svr-block deny tcp src any sport any dest any dport range 6000 6063
ip access-list svr-block deny udp src any sport any dest any dport range 6000 6063
ip access-list svr-block deny tcp src any sport any dest any dport eq 6257
ip access-list svr-block deny udp src any sport any dest any dport eq 6257
ip access-list svr-block deny tcp src any sport any dest any dport eq 6665
ip access-list svr-block deny udp src any sport any dest any dport eq 6665
ip access-list svr-block deny tcp src any sport any dest any dport eq 6666
ip access-list svr-block deny udp src any sport any dest any dport eq 6666
ip access-list svr-block deny tcp src any sport any dest any dport eq 6667
ip access-list svr-block deny udp src any sport any dest any dport eq 6667
ip access-list svr-block deny tcp src any sport any dest any dport eq 6668
ip access-list svr-block deny udp src any sport any dest any dport eq 6668
ip access-list svr-block deny tcp src any sport any dest any dport eq 6669
ip access-list svr-block deny udp src any sport any dest any dport eq 6669
ip access-list svr-block deny tcp src any sport any dest any dport eq 6699
ip access-list svr-block deny udp src any sport any dest any dport eq 6699
ip access-list svr-block deny tcp src any sport any dest any dport eq 7743
ip access-list svr-block deny udp src any sport any dest any dport eq 7743
ip access-list svr-block deny tcp src any sport any dest any dport eq 12345
ip access-list svr-block deny udp src any sport any dest any dport eq 12345
ip filter forced-reassembly
!
!
!
!
!
!
!
!
!
!
!
ip name-server 1.1.1.1
ip name-server 1.0.0.1
!
proxy-dns ip enable
proxy-dns ip query-response 20
proxy-dns ip query-interval 1
proxy-dns interface GigaEthernet0.1 ignore
proxy-dns interface GigaEthernet0.2 ignore
proxy-dns server 1.1.1.1 priority 254
proxy-dns server 1.0.0.1 priority 254
!
telnet-server ip enable
!
http-server username USER-NAME
http-server ip enable
!
nm ip enable
nm account GROUPID password { plain | secret } PASSWORD
!
!
route-map rmap permit 10
  match ip address access-list mynetwork1
  set interface GigaEthernet0.1
!
route-map rmap permit 20
  match ip address access-list mynetwork2
  set interface GigaEthernet0.2
!
ppp profile PROFILE-NAME1
  authentication myname NAME1
  authentication password NAME1 PASSWORD1
!
ppp profile PROFILE-NAME2
  authentication myname NAME2
  authentication password NAME2 PASSWORD2
!
class-map match-any udp-port
  match ip access-list ipv4_udp_range normal
!
policy-map output-policy
  class udp-port
    set ip dscp 48
  class class-local
  class class-default
!
device GigaEthernet0
!
device GigaEthernet1
  shutdown
!
device GigaEthernet2
  port 2 shutdown
  port 3 shutdown
  port 4 shutdown
  port 5 shutdown
  port 6 shutdown
  port 7 shutdown
  port 8 shutdown
!
device BRI0
  isdn switch-type hsd128k
!
device USB0
  shutdown
!
interface GigaEthernet0.0
  no ip address
  shutdown
!
interface GigaEthernet1.0
  no ip address
  shutdown
!
interface GigaEthernet2.0
  ip address 192.168.1.1/24
  ip policy route-map rmap
  service-policy enable
  service-policy input output-policy
  service-policy output output-policy
  no shutdown
!
interface BRI0.0
  encapsulation ppp
  no auto-connect
  no ip address
  shutdown
!
interface USB-Serial0.0
  encapsulation ppp
  no auto-connect
  no ip address
  shutdown
!
interface GigaEthernet0.1
  encapsulation pppoe
  auto-connect
  ppp binding pppoe1
  ip address ipcp
  ip mtu 1454
  ip tcp adjust-mss auto
  ip napt enable
  ip napt hairpinning
  ip napt static GigaEthernet0.1 1
  ip napt static 192.168.1.2 tcp xxxxx
  ip napt static 192.168.1.2 udp xxxxx
  ip filter in_out-block 1 in
  ip filter svr-block 100 in
  ip filter r-list1 110 in
  ip filter all-pass 65000 in
  ip filter in_out-block 1 out
  ip filter mynetwork1 50 out
  ip filter svr-block 100 out
  ip filter r-list1 110 out
  ip filter all-pass 65000 out
  no shutdown
!
interface GigaEthernet0.2
  encapsulation pppoe
  auto-connect
  ppp binding pppoe2
  ip address ipcp
  ip mtu 1454
  ip tcp adjust-mss auto
  ip napt enable
  ip napt static GigaEthernet0.2 1
  ip napt static 192.168.1.2 tcp xxxxx
  ip napt static 192.168.1.2 udp xxxxx
  ip filter in_out-block 1 in
  ip filter svr-block 100 in
  ip filter r-list1 110 in
  ip filter all-pass 65000 in
  ip filter in_out-block 1 out
  ip filter mynetwork2 50 out
  ip filter svr-block 100 out
  ip filter r-list1 110 out
  ip filter all-pass 65000 out
  shutdown
!
interface Loopback0.0
  no ip address
!
interface Null0.0
  no ip address
!

service password-encryption
!
hostname HOSTNAME
!
logging buffered 4096
logging subsystem all warn
logging timestamp timeofday
!
username USER-NAME password { plain [MODE] | hash } PASSWORD [LEVEL]
!
ntp server 210.173.160.27
ntp server 210.173.160.57
ntp server 210.173.160.87
ntp retry 10
ntp interval 86400
!
!
ip ufs-cache max-entries 20000
ip ufs-cache enable
ip route default GigaEthernet0.1
ip dhcp enable
ip dhcp excluded-address 192.168.1.98 192.168.1.127
ip access-list all-pass option optimize
ip access-list all-pass permit ip src any dest any
ip access-list in_out-block option optimize
ip access-list in_out-block deny tcp src any sport any dest any dport eq 135
ip access-list in_out-block deny udp src any sport any dest any dport eq 135
ip access-list in_out-block deny tcp src any sport any dest any dport eq 137
ip access-list in_out-block deny udp src any sport any dest any dport eq 137
ip access-list in_out-block deny udp src any sport any dest any dport eq 138
ip access-list in_out-block deny tcp src any sport any dest any dport eq 139
ip access-list in_out-block deny tcp src any sport any dest any dport eq 445
ip access-list in_out-block deny udp src any sport any dest any dport eq 445
ip access-list ipv4_udp_range option optimize
ip access-list ipv4_udp_range permit udp src any sport range 1024 65535 dest any dport range 1024 65535
ip access-list mynetwork1 option optimize
ip access-list mynetwork1 permit ip src 192.168.1.96/27 dest any
ip access-list mynetwork1 permit ip src 192.168.1.128/26 dest any
ip access-list mynetwork2 option optimize
ip access-list mynetwork2 permit ip src 192.168.1.96/27 dest any
ip access-list mynetwork2 permit ip src 192.168.1.128/26 dest any
ip access-list r-list1 option optimize
ip access-list r-list1 deny ip src 10.0.0.0/8 dest any
ip access-list r-list1 deny ip src 172.16.0.0/12 dest any
ip access-list r-list1 deny ip src 192.168.0.0/16 dest any
ip access-list str-block option optimize
ip access-list str-block deny udp src any sport any dest any dport eq 161
ip access-list svr-block deny tcp src any sport any dest any dport eq 1
ip access-list svr-block deny udp src any sport any dest any dport eq 1
ip access-list svr-block deny tcp src any sport any dest any dport eq 11
ip access-list svr-block deny udp src any sport any dest any dport eq 11
ip access-list svr-block deny tcp src any sport any dest any dport eq 15
ip access-list svr-block deny udp src any sport any dest any dport eq 15
ip access-list svr-block deny tcp src any sport any dest any dport eq 20
ip access-list svr-block deny udp src any sport any dest any dport eq 20
ip access-list svr-block deny tcp src any sport any dest any dport eq 21
ip access-list svr-block deny udp src any sport any dest any dport eq 21
ip access-list svr-block deny tcp src any sport any dest any dport eq 23
ip access-list svr-block deny udp src any sport any dest any dport eq 23
ip access-list svr-block deny tcp src any sport any dest any dport eq 67
ip access-list svr-block deny udp src any sport any dest any dport eq 67
ip access-list svr-block deny tcp src any sport any dest any dport eq 68
ip access-list svr-block deny udp src any sport any dest any dport eq 68
ip access-list svr-block deny tcp src any sport any dest any dport eq 69
ip access-list svr-block deny udp src any sport any dest any dport eq 69
ip access-list svr-block deny tcp src any sport any dest any dport eq 70
ip access-list svr-block deny udp src any sport any dest any dport eq 70
ip access-list svr-block deny tcp src any sport any dest any dport eq 79
ip access-list svr-block deny udp src any sport any dest any dport eq 79
ip access-list svr-block deny tcp src any sport any dest any dport eq 87
ip access-list svr-block deny udp src any sport any dest any dport eq 87
ip access-list svr-block deny tcp src any sport any dest any dport eq 95
ip access-list svr-block deny udp src any sport any dest any dport eq 95
ip access-list svr-block deny tcp src any sport any dest any dport eq 111
ip access-list svr-block deny udp src any sport any dest any dport eq 111
ip access-list svr-block deny tcp src any sport any dest any dport eq 144
ip access-list svr-block deny udp src any sport any dest any dport eq 144
ip access-list svr-block deny tcp src any sport any dest any dport eq 161
ip access-list svr-block deny tcp src any sport any dest any dport eq 162
ip access-list svr-block deny udp src any sport any dest any dport eq 162
ip access-list svr-block deny tcp src any sport any dest any dport eq 177
ip access-list svr-block deny udp src any sport any dest any dport eq 177
ip access-list svr-block deny tcp src any sport any dest any dport eq 220
ip access-list svr-block deny udp src any sport any dest any dport eq 220
ip access-list svr-block deny tcp src any sport any dest any dport eq 512
ip access-list svr-block deny udp src any sport any dest any dport eq 512
ip access-list svr-block deny tcp src any sport any dest any dport eq 513
ip access-list svr-block deny udp src any sport any dest any dport eq 513
ip access-list svr-block deny tcp src any sport any dest any dport eq 514
ip access-list svr-block deny udp src any sport any dest any dport eq 514
ip access-list svr-block deny tcp src any sport any dest any dport eq 515
ip access-list svr-block deny udp src any sport any dest any dport eq 515
ip access-list svr-block deny tcp src any sport any dest any dport eq 517
ip access-list svr-block deny udp src any sport any dest any dport eq 517
ip access-list svr-block deny tcp src any sport any dest any dport eq 518
ip access-list svr-block deny udp src any sport any dest any dport eq 518
ip access-list svr-block deny tcp src any sport any dest any dport eq 520
ip access-list svr-block deny udp src any sport any dest any dport eq 520
ip access-list svr-block deny tcp src any sport any dest any dport eq 540
ip access-list svr-block deny udp src any sport any dest any dport eq 540
ip access-list svr-block deny tcp src any sport any dest any dport eq 1025
ip access-list svr-block deny udp src any sport any dest any dport eq 1025
ip access-list svr-block deny tcp src any sport any dest any dport eq 2000
ip access-list svr-block deny udp src any sport any dest any dport eq 2000
ip access-list svr-block deny tcp src any sport any dest any dport eq 2049
ip access-list svr-block deny udp src any sport any dest any dport eq 2049
ip access-list svr-block deny tcp src any sport any dest any dport eq 2766
ip access-list svr-block deny udp src any sport any dest any dport eq 2766
ip access-list svr-block deny tcp src any sport any dest any dport range 6000 6063
ip access-list svr-block deny udp src any sport any dest any dport range 6000 6063
ip access-list svr-block deny tcp src any sport any dest any dport eq 6257
ip access-list svr-block deny udp src any sport any dest any dport eq 6257
ip access-list svr-block deny tcp src any sport any dest any dport eq 6665
ip access-list svr-block deny udp src any sport any dest any dport eq 6665
ip access-list svr-block deny tcp src any sport any dest any dport eq 6666
ip access-list svr-block deny udp src any sport any dest any dport eq 6666
ip access-list svr-block deny tcp src any sport any dest any dport eq 6667
ip access-list svr-block deny udp src any sport any dest any dport eq 6667
ip access-list svr-block deny tcp src any sport any dest any dport eq 6668
ip access-list svr-block deny udp src any sport any dest any dport eq 6668
ip access-list svr-block deny tcp src any sport any dest any dport eq 6669
ip access-list svr-block deny udp src any sport any dest any dport eq 6669
ip access-list svr-block deny tcp src any sport any dest any dport eq 6699
ip access-list svr-block deny udp src any sport any dest any dport eq 6699
ip access-list svr-block deny tcp src any sport any dest any dport eq 7743
ip access-list svr-block deny udp src any sport any dest any dport eq 7743
ip access-list svr-block deny tcp src any sport any dest any dport eq 12345
ip access-list svr-block deny udp src any sport any dest any dport eq 12345
ip filter forced-reassembly
!
!
!
!
!
!
!
!
!
!
!
ip name-server 1.1.1.1
ip name-server 1.0.0.1
!
proxy-dns ip enable
proxy-dns ip query-response 20
proxy-dns ip query-interval 1
proxy-dns interface GigaEthernet0.1 ignore
proxy-dns interface GigaEthernet0.2 ignore
proxy-dns server 1.1.1.1 priority 254
proxy-dns server 1.0.0.1 priority 254
!
telnet-server ip enable
!
http-server username USER-NAME
http-server ip enable
!
nm ip enable
nm account GROUPID password { plain | secret } PASSWORD
!
!
route-map rmap permit 10
  match ip address access-list mynetwork1
  set interface GigaEthernet0.1
!
route-map rmap permit 20
  match ip address access-list mynetwork2
  set interface GigaEthernet0.2
!
ppp profile PROFILE-NAME1
  authentication myname NAME1
  authentication password NAME1 PASSWORD1
!
ppp profile PROFILE-NAME2
  authentication myname NAME2
  authentication password NAME2 PASSWORD2
!
ip dhcp profile dhcp1
  assignable-range 192.168.1.96 192.168.1.191
  dns-server 192.168.1.1
  lease-time 86400
  fixed-assignment 192.168.1.96 xx:xx:xx:xx:xx:xx
  fixed-assignment 192.168.1.97 xx:xx:xx:xx:xx:xx
  fixed-assignment 192.168.1.190 xx:xx:xx:xx:xx:xx
  fixed-assignment 192.168.1.191 xx:xx:xx:xx:xx:xx
!
class-map match-any udp-port
  match ip access-list ipv4_udp_range normal
!
policy-map output-policy
  class udp-port
    set ip dscp 48
  class class-local
  class class-default
!
device GigaEthernet0
!
device GigaEthernet1
  shutdown
!
device GigaEthernet2
  port 2 shutdown
  port 3 shutdown
  port 4 shutdown
  port 5 shutdown
  port 6 shutdown
  port 7 shutdown
  port 8 shutdown
!
device BRI0
  isdn switch-type hsd128k
!
device USB0
  shutdown
!
interface GigaEthernet0.0
  no ip address
  shutdown
!
interface GigaEthernet1.0
  no ip address
  shutdown
!
interface GigaEthernet2.0
  ip address 192.168.1.10/24
  ip dhcp binding dhcp1
  ip policy route-map rmap
  service-policy enable
  service-policy input output-policy
  service-policy output output-policy
  no shutdown
!
interface BRI0.0
  encapsulation ppp
  no auto-connect
  no ip address
  shutdown
!
interface USB-Serial0.0
  encapsulation ppp
  no auto-connect
  no ip address
  shutdown
!
interface GigaEthernet0.1
  encapsulation pppoe
  auto-connect
  ppp binding pppoe1
  ip address ipcp
  ip mtu 1454
  ip tcp adjust-mss auto
  ip napt enable
  ip napt hairpinning
  ip napt static GigaEthernet0.1 1
  ip napt static 192.168.1.96 tcp xxxxx
  ip napt static 192.168.1.96 udp xxxxx
  ip filter in_out-block 1 in
  ip filter svr-block 100 in
  ip filter r-list1 110 in
  ip filter all-pass 65000 in
  ip filter in_out-block 1 out
  ip filter mynetwork1 50 out
  ip filter svr-block 100 out
  ip filter r-list1 110 out
  ip filter all-pass 65000 out
  no shutdown
!
interface GigaEthernet0.2
  encapsulation pppoe
  auto-connect
  ppp binding pppoe2
  ip address ipcp
  ip mtu 1454
  ip tcp adjust-mss auto
  ip napt enable
  ip napt static GigaEthernet0.2 1
  ip napt static 192.168.1.96 tcp xxxxx
  ip napt static 192.168.1.96 udp xxxxx
  ip filter in_out-block 1 in
  ip filter svr-block 100 in
  ip filter r-list1 110 in
  ip filter all-pass 65000 in
  ip filter in_out-block 1 out
  ip filter mynetwork2 50 out
  ip filter svr-block 100 out
  ip filter r-list1 110 out
  ip filter all-pass 65000 out
  shutdown
!
interface Loopback0.0
  no ip address
!
interface Null0.0
  no ip address
!