!
version 12.2
service nagle
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname <ROUTERS-HOSTNAME>
!
enable password <ENABLE-PASSWORD>
!
clock timezone GMT 0
clock summer-time BST recurring last Sun Mar 1:00 last Sun Oct 1:00
ip subnet-zero
no ip source-route
!
!
ip domain list <COMPANY-DOMAINNAME>
ip domain list .
ip name-server 159.134.237.6
ip name-server 159.134.248.17
!
no ip bootp server
vpdn enable
!
vpdn-group 1
 request-dialin
  protocol pppoe
!
!
isdn switch-type basic-net3
isdn tei-negotiation first-call
!
!
!
interface ATM0
 description {physical dsl circut to eircom}
 no ip address
 no atm ilmi-keepalive
 dsl operating-mode auto
 no fair-queue
 no shutdown
!
 interface ATM0.1 point-to-point
 description {virtual pvc to eircom net}
 backup delay 10 10
 backup interface BRI0
 pvc 8/35 
  oam-pvc manage
 pppoe-client dial-pool-number 1
 no shutdown
 !
!
interface BRI0
 description 128k ISDN link to EsatNet Dublin POP
 bandwidth 64
 ip address <ISDN-WAN-INTERFACE> 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip nat outside
 encapsulation ppp
 no keepalive
 dialer map ip <ESATNET-ISDN-GATEWAY> 1891133133
 dialer hold-queue 50
 dialer-group 2
 isdn switch-type basic-net3
 isdn answer1 9999999
 isdn answer2 9999999
 no cdp enable
 ppp authentication chap callin
 ppp chap hostname <CHAP-HOSTNAME/USERNAME>
 ppp chap password <CHAP-PASSWORD>
 no shutdown
!
interface FastEthernet0
 description internal network eircom network address range
 ip address <G-IP-ROUTER> <G-LAN-SUBNET-MASK>
 ip access-group 10 in
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip nat inside
 speed auto
 no cdp enable
 no shutdown
!
interface Dialer0
 description dsl pppoe client settings
 ip unnumbered FastEthernet0
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 no cdp enable
 ppp authentication chap callin
 ppp chap hostname <EIRCOM-CHAP-HOSTNAME/USERNAME>
 ppp chap password <EIRCOM-CHAP-PASSWORD>
 no shutdown
!
ip nat inside source list 100 interface BRI0 overload
ip nat inside source static tcp <NAT-IP-MAILSERVER> 25 <G-IP-MAILSERVER> 25 extendable

ip classless
ip route 0.0.0.0 0.0.0.0 <ESATNET-ISDN-GATEWAY>
ip route 0.0.0.0 0.0.0.0 Dialer0 10
no ip http server
!
!
access-list 10 permit <G-LAN-NETWORK> <G-LAN-INVERSE-MASK>
access-list 10 deny   any
access-list 100 deny   udp any eq netbios-ns any
access-list 100 deny   ip any 10.0.0.0 0.255.255.255
access-list 100 deny   ip any 172.16.0.0 0.15.255.255
access-list 100 deny   ip any 192.168.0.0 0.0.255.255
access-list 100 deny   ip any host <G-LAN-BROADCAST>
access-list 100 deny   ip any host <G-LAN-NT-BROADCAST>
access-list 100 permit ip <G-LAN-NETWORK> <G-LAN-INVERSE-MASK> any
access-list 101 deny   udp any eq netbios-ns any
access-list 101 deny   udp any any eq netbios-ns
access-list 101 deny   udp any any eq netbios-dgm
access-list 101 deny   tcp any any eq 139
access-list 101 deny   ip any host <G-LAN-NT-BROADCAST>
access-list 101 deny   ip any host <G-LAN-BROADCAST>
access-list 101 permit ip host <ISDN-WAN-INTERFACE> any
access-list 101 deny   ip any any
access-list 150 deny   ip <G-LAN-NETWORK> <G-LAN-INVERSE-MASK> any
access-list 150 permit ip any any
dialer-list 2 protocol ip list 101
no cdp run
!
banner motd %


<HOSTNAME>.<COMPANY-DOMAINNAME> or <FULLY-QUALIFIED-HOSTNAME>


Unauthorised use prohibited.
Last configured on <DATE> by <YOUR-NAME-CONTACT-DETAILS> 1.13
%
!
line con 0
 password <CON-VTY-PASSWORD>
 login
line aux 0
 password <CON-VTY-PASSWORD>
 login
line vty 0 4
 exec-timeout 0 0
 password <CON-VTY-PASSWORD>
 login
 transport preferred none
!
no scheduler allocate
end