version 15.6
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
logging buffered 1024000
no logging console
enable secret 5 XXXXXXXXXX
!
no aaa new-model
clock timezone GMT 0 0
clock summer-time BST recurring last Sun Mar 1:00 last Sun Oct 1:00
!
!
!
!
!
!
!
!        
!
ip dhcp excluded-address 192.168.1.0 192.168.1.10
ip dhcp excluded-address 192.168.1.240 192.168.1.254
!
ip dhcp pool VLAN_1
 network 192.168.1.0 255.255.255.0
 default-router 192.168.1.254 
 dns-server 1.1.1.1 8.8.8.8 
!
!
!
no ip domain lookup
ip domain name cisco.router
ip inspect name CBAC tcp
ip inspect name CBAC udp
ip inspect name CBAC icmp
ip cef
login on-failure log
login on-success log
!
!

!
!
!
username XXXXXXXXXX privilege 15 secret 5 XXXXXXXXXX
!
redundancy
!
!
!
!
!         
controller VDSL 0
!
! 
!
!
!
!
!
!
!
!
!
interface ATM0
 no ip address
 shutdown
 no atm ilmi-keepalive
!
interface Ethernet0
 no ip address
!
interface Ethernet0.101
 encapsulation dot1Q 101
 pppoe enable group global
 pppoe-client dial-pool-number 1
!
interface FastEthernet0
 description ### ACCESS PORT ###
 no ip address
 spanning-tree portfast
!
interface FastEthernet1
 description ### ACCESS PORT ###
 no ip address
 spanning-tree portfast
!
interface FastEthernet2
 description ### ACCESS PORT ###
 no ip address
 spanning-tree portfast
!
interface FastEthernet3
 description ### ACCESS PORT ###
 no ip address
 spanning-tree portfast
!
interface Vlan1
 description ### LAN DEFAULT GATEWAY ###
 ip address 192.168.1.254 255.255.255.0
 ip nat inside
 ip virtual-reassembly in
!
interface Dialer1
 description ### OUTSIDE INTERFACE ###
 mtu 1492
 ip address negotiated
 ip access-group FIREWALL_IN in
 no ip redirects
 no ip unreachables
 ip nat outside
 ip inspect CBAC out
 ip virtual-reassembly in
 encapsulation ppp
 ip tcp adjust-mss 1452
 dialer pool 1
 dialer-group 1
 no cdp enable
 ppp authentication chap callin
 ppp chap hostname XXXXXXXXXX
 ppp chap password 7 XXXXXXXXXX
 ppp ipcp route default
 ppp ipcp address accept
!
no ip http server
no ip http secure-server
!
!
ip nat inside source list NAT interface Dialer1 overload
ip route 0.0.0.0 0.0.0.0 Dialer1 name DEFAULT_VIA_VDSL
!
ip access-list standard SECURE_VTY
 permit 192.168.1.0 0.0.0.255
!
ip access-list extended FIREWALL_IN
 permit icmp any any echo-reply
 permit icmp any any time-exceeded
 permit icmp any any unreachable
 permit udp host 134.226.81.3 eq ntp any
 deny   ip any any
ip access-list extended NAT
 permit ip 192.168.1.0 0.0.0.255 any
!  
!
!
!
line con 0
 session-timeout 15 
 password 7 XXXXXXXXXX
 login local
line vty 0 4
 session-timeout 15 
 access-class SECURE_VTY in
 password 7 XXXXXXXXXX
 login local
 transport input ssh
line vty 5 15
 session-timeout 15 
 access-class SECURE_VTY in
 password 7 XXXXXXXXXX
 login local
 transport input ssh
!
ntp server 134.226.81.3
!
end