version 12.0 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname ! logging buffered 64000 debugging no logging console enable secret ! pots country DK ip subnet-zero ! ip dhcp pool homenetwork network 10.20.5.0 255.255.255.0 dns-server 10.10.234.46 10.10.234.47 netbios-name-server 10.10.234.19 10.10.234.15 default-router 10.20.5.1 ! ip domain-name domain.tld ip name-server 10.10.234.46 ip name-server 10.10.234.47 ! interface Ethernet0 description ****** Home Network ****** ip address 10.20.5.1 255.255.255.0 no ip directed-broadcast no ip proxy-arp ip nat inside no keepalive no cdp enable ! interface BRI0 description ****** ISDN ****** no ip address no ip directed-broadcast encapsulation ppp dialer pool-member 1 isdn switch-type basic-net3 no cdp enable ppp authentication chap pap callin ! interface Dialer1 description ****** Connection to LOC1 ****** bandwidth 64 ip address negotiated no ip directed-broadcast ip nat outside encapsulation ppp dialer remote-name dialer idle-timeout 400 dialer string dialer hold-queue 5 dialer load-threshold 125 either dialer pool 1 dialer-group 1 no cdp enable ppp pap sent-username password ppp multilink ! interface Dialer2 description ****** Connection to LOC2 ****** bandwidth 64 ip address negotiated no ip directed-broadcast ip nat outside encapsulation ppp dialer remote-name dialer idle-timeout 60 dialer string dialer hold-queue 5 dialer load-threshold 125 either dialer pool 1 dialer-group 2 no cdp enable ppp pap sent-username password ppp multilink ! ip nat inside source route-map NAT-LOC1 interface Dialer1 overload ip nat inside source route-map NAT-LOC2 interface Dialer2 overload no ip http server ip classless ip route 0.0.0.0 0.0.0.0 Dialer1 ip route 255.255.255.0 Dialer2 ip route 255.255.224.0 Dialer2 ! access-list 101 deny tcp any any eq 139 access-list 101 deny udp any any eq ntp access-list 101 deny udp any any eq netbios-ns access-list 101 deny udp any any eq netbios-dgm access-list 101 permit ip any any log access-list 102 deny tcp any any eq 139 access-list 102 deny udp any any eq ntp access-list 102 deny udp any any eq netbios-ns access-list 102 deny udp any any eq netbios-dgm access-list 102 permit ip any any log dialer-list 1 protocol ip list 101 dialer-list 2 protocol ip list 102 route-map NAT-LOC1 permit 10 match interface Dialer1 ! route-map NAT-LOC2 permit 10 match interface Dialer2 ! ! line con 0 exec-timeout 5 0 transport input none stopbits 1 line vty 0 4 exec-timeout 0 0 password login !