1: interface FastEthernet0 2: ip address 209.172.108.16 255.255.255.224 3: ip access-group 102 in 4: ip nat outside 5: speed auto 6: full-duplex 7: ! 8: interface Vlan1 9: ip address 192.168.2.1 255.255.255.0 10: ip nat inside 11: ! 12: ip route 0.0.0.0 0.0.0.0 209.172.108.1 13: ! 14: ip nat pool localnet 209.172.108.16 prefix-length 24 15: ip nat inside source list 1 pool localnet overload 16: ip nat inside source list 1 interface FastEthernet0 17: ip nat inside source static tcp 192.168.2.6 80 209.172.108.16 80 18: ip nat inside source static tcp 192.168.2.6 21 209.172.108.16 21 19: ip nat inside source static tcp 192.168.2.6 3389 209.172.108.16 3389 20: ! 21: access-list 1 permit 192.168.2.0 0.0.0.255 22: access-list 102 permit tcp any host 209.172.108.16 eq 80 23: access-list 102 permit tcp any host 209.172.108.16 eq 21 24: access-list 102 permit tcp any host 209.172.108.16 eq 20 25: access-list 102 permit tcp any host 209.172.108.16 eq 23 26: access-list 102 deny tcp any host 209.172.108.16