ip route default gateway 172.16.0.254
ip lan1 address 192.168.100.254/24
switch control use lan1 on terminal=on
vlan lan1/1 802.1q vid=101 name=VLAN101
ip lan1/1 address 192.168.101.254/24
vlan lan1/2 802.1q vid=102 name=VLAN102
ip lan1/2 address 192.168.102.254/24
vlan lan1/3 802.1q vid=103 name=VLAN103
ip lan1/3 address 192.168.103.254/24
ip lan1/3 secure filter in 81301 81302 9000
ip lan2 address 172.16.0.1/24
ip lan2 nat descriptor 1
ip filter 21 reject-nolog 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,127.0.0.1 * * * *
ip filter 22 reject-nolog * 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,127.0.0.1 * * *
ip filter 9000 pass * * * * *
ip filter 9001 pass * * icmp * *
ip filter 9999 reject-nolog * * * * *
ip filter 81301 pass 192.168.103.0/24 192.168.103.254 * * *
ip filter 81302 reject * 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 * * *
nat descriptor type 1 masquerade
nat descriptor address outer 1 primary
syslog notice on
syslog info on
syslog debug off
dhcp service server
dhcp server rfc2131 compliant except remain-silent
dhcp scope 1 192.168.100.1-192.168.100.199/24
dhcp scope 101 192.168.101.1-192.168.101.199/24
dhcp scope 102 192.168.102.1-192.168.102.199/24
dhcp scope 103 192.168.103.1-192.168.103.199/24
dns server 8.8.8.8