I have a cisco 1720 router, with an eth WIC in it. Currently I have it acting as a basic router for my network. I would like to add another eth WIC and have a setup where the network on the new WIC is completely open (DMZed). But also if possible I would like to have both networks to still be able to talk to each other. Is this possible? If so how would I go about modifying my config:
Building configuration...
Current configuration : 2453 bytes
!
version 12.3
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname EsportsproCisco
!
boot-start-marker
boot-end-marker
!
enable secret
!
memory-size iomem 25
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no aaa new-model
ip subnet-zero
!
!
no ip domain lookup
no ip dhcp conflict logging
ip dhcp excluded-address 10.10.0.1 10.10.0.20
!
ip dhcp pool EsportsDHCP
network 10.10.0.0 255.255.255.0
domain-name 1720.cisco
default-router 10.10.0.1
netbios-node-type h-node
dns-server 207.69.188.185 207.69.188.186
!
ip cef
!
!
!
!
interface Ethernet0
ip address dhcp
ip access-group 101 in
ip nat outside
half-duplex
!
interface FastEthernet0
ip address 10.10.0.1 255.255.255.0
ip broadcast-address 10.10.0.255
ip nat inside
speed auto
!
ip nat inside source list 1 interface Ethernet0 overload
ip nat inside source static tcp 10.10.0.60 6112 interface Ethernet0 6112
ip nat inside source static tcp 10.10.0.60 3724 interface Ethernet0 3724
ip nat inside source static udp 10.10.0.60 3389 interface Ethernet0 3389
ip nat inside source static tcp 10.10.0.60 6881 interface Ethernet0 6881
ip nat inside source static tcp 10.10.0.60 6882 interface Ethernet0 6882
ip nat inside source static tcp 10.10.0.60 6883 interface Ethernet0 6883
ip nat inside source static tcp 10.10.0.60 6884 interface Ethernet0 6884
ip nat inside source static tcp 10.10.0.60 6885 interface Ethernet0 6885
ip nat inside source static tcp 10.10.0.60 6886 interface Ethernet0 6886
ip nat inside source static tcp 10.10.0.60 6887 interface Ethernet0 6887
ip nat inside source static tcp 10.10.0.60 6888 interface Ethernet0 6888
ip nat inside source static tcp 10.10.0.60 6889 interface Ethernet0 6889
ip nat inside source static tcp 10.10.0.60 3389 interface Ethernet0 3389
ip classless
ip route 0.0.0.0 0.0.0.0 69.22.93.1
ip http server
!
access-list 1 permit 10.10.0.0 0.0.0.255
access-list 101 deny tcp any any eq telnet
access-list 101 permit ip any any
access-list 111 permit icmp host 10.10.1.0 any
access-list 111 deny ip any any
snmp-server community public RO
snmp-server community priv RW
snmp-server contact pablo
snmp-server enable traps tty
banner motd ^CCCCCCisco 1720^C
!
line con 0
exec-timeout 0 0
password
login
speed 19200
line aux 0
line vty 0 4
access-class 1 in
password
login
!
end
