881w

version 15.1
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Sat
!
boot-start-marker
boot system flash flash:/c880data-universalk9-mz.151-2.T1.bin
boot-end-marker
!
!
!
aaa new-model
!
!
aaa authentication login default local
!
!
!
!
!
aaa session-id common
memory-size iomem 10
clock timezone Moscow 3 0
clock summer-time Moscow recurring last Sun Mar 2:00 last Sun Oct 2:00
clock calendar-valid
crypto pki token default removal timeout 0
!
crypto pki trustpoint TP-self-signed-1564087038
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1564087038
 revocation-check none
 rsakeypair TP-self-signed-1564087038
!
!
crypto pki certificate chain TP-self-signed-1564087038
 certificate self-signed 01
<skip>
        quit
ip source-route
!
!
!
ip dhcp excluded-address 192.168.1.1 192.168.1.49
ip dhcp excluded-address 192.168.1.151 192.168.1.254
!
ip dhcp pool local
   import all
   network 192.168.1.0 255.255.255.0
   default-router 192.168.1.1
   dns-server 213.234.192.7 85.21.192.5
   lease infinite
!
!
ip cef
no ip bootp server
ip domain name corbina.net
no ipv6 cef
l2tp-class corbina
!
!
!
license udi pid CISCO881W-GN-A-K9 sn xxxxxxxxx
!
!
username admin privilege 15 secret 5 xxxxxxxxxxxxxxxxx
!
!
!
!
ip ssh version 2
pseudowire-class class1
 encapsulation l2tpv2
 protocol l2tpv2 corbina
 ip local interface FastEthernet4
!
!
!
!
!
!
!
!
interface FastEthernet0
 switchport access vlan 2
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
 ip address dhcp
 no ip unreachables
 no ip proxy-arp
 ip nat outside
 ip virtual-reassembly in
 duplex auto
 speed auto
!
interface Virtual-PPP1
 ip address negotiated
 ip access-group FIREWALL in
 ip mtu 1460
 ip nat outside
 ip virtual-reassembly in
 ip tcp adjust-mss 1420
 no peer neighbor-route
 ppp chap hostname xxxxxx
 ppp chap password 7 xxxxxxx
 no cdp enable
 pseudowire 85.21.0.255 10 pw-class class1
!
interface wlan-ap0
 description Service module interface to manage the embedded AP
 ip unnumbered Vlan2
 arp timeout 0
!
interface Wlan-GigabitEthernet0
 description Internal switch interface connecting to the embedded AP
 switchport mode trunk
!
interface Vlan1
 no ip address
!
interface Vlan2
 ip address 192.168.1.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly in
!
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
!
ip dns server
ip nat inside source list LAN interface FastEthernet4 overload
ip nat inside source list WAN interface Virtual-PPP1 overload
ip route 0.0.0.0 0.0.0.0 Virtual-PPP1
ip route 10.0.0.0 255.0.0.0 dhcp
ip route 83.102.146.96 255.255.255.224 dhcp
ip route 85.21.29.242 255.255.255.255 dhcp
ip route 85.21.79.0 255.255.255.0 dhcp
ip route 85.21.90.0 255.255.255.0 dhcp
ip route 195.14.50.16 255.255.255.255 dhcp
ip route 85.21.17.253 255.255.255.255 dhcp
ip route 89.179.135.67 255.255.255.255 dhcp
ip route 195.14.50.21 255.255.255.255 dhcp
ip route 195.14.50.1 255.255.255.255 dhcp
ip route 85.21.0.251 255.255.255.255 dhcp
ip route 85.21.0.253 255.255.255.255 dhcp
ip route 172.16.16.0 255.255.255.0 dhcp
ip route 85.21.108.19 255.255.255.255 dhcp
ip route 195.14.50.26 255.255.255.255 dhcp
ip route 85.21.72.83 255.255.255.255 dhcp
ip route 85.21.0.255 255.255.255.255 dhcp
!
ip access-list extended FIREWALL
 deny   tcp any eq 139 any
 deny   udp any eq netbios-ns any eq netbios-ns
 deny   udp any eq netbios-dgm any eq netbios-dgm
 deny   udp any eq netbios-ss any eq netbios-ss
 deny   udp any any range snmp snmptrap
 deny   tcp any any eq 3128
 deny   ip 10.0.0.0 0.0.255.255 any
 deny   ip 127.0.0.0 0.0.0.255 any
 deny   udp any any range 130 140
 deny   tcp any any range 130 140
 deny   tcp any any eq 8080
 permit ip any any
 permit udp any any
 permit gre any any
 permit tcp any any
 permit icmp any any
 permit pcp any any
 permit esp any any
 permit ipinip any any
 permit nos any any
ip access-list extended LAN
 permit ip 192.168.1.0 0.0.0.255 10.0.0.0 0.255.255.255
 permit ip 192.168.1.0 0.0.0.255 83.102.146.0 0.0.0.231
 permit ip 192.168.1.0 0.0.0.255 host 85.21.29.242
 permit ip 192.168.1.0 0.0.0.255 85.21.79.0 0.0.0.255
 permit ip 192.168.1.0 0.0.0.255 85.21.90.0 0.0.0.255
 permit ip 192.168.1.0 0.0.0.255 host 195.14.50.16
 permit ip 192.168.1.0 0.0.0.255 host 195.14.50.26
ip access-list extended WAN
 permit ip 192.168.1.0 0.0.0.255 any
!
logging esm config
access-list 23 permit 192.168.1.0 0.0.0.255
no cdp run

!
!
!
!
!
!
control-plane
!
!
line con 0
 no modem enable
line aux 0
line 2
 no activation-character
 no exec
 transport preferred none
 transport input all
line vty 0 4
 access-class 23 in
 privilege level 15
 transport input telnet ssh
!
scheduler max-task-time 5000
ntp update-calendar
ntp server 192.43.244.18
end