hostname ASR1001
!
boot-start-marker
boot-end-marker
!
!
vrf definition Mgmt-intf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
enable secret 5 $1$lj5y$.Yr8hmzUw49ApHlrXl9JP1
!
aaa new-model
!
aaa authentication login default local
aaa authentication ppp default local
aaa authorization exec default local
!
aaa session-id common
!
no ip domain lookup
ip dhcp excluded-address 172.16.1.1 172.16.1.25
!
ip dhcp pool LOCAL
network 172.16.1.0 255.255.255.0
default-router 172.16.1.1
dns-server 172.16.1.1 8.8.8.8
option 150 ip 172.16.1.10
lease 10
!
ip dhcp pool PRINT
host 172.16.2.1 255.255.255.0
client-identifier 0100.d861.7237.40
default-router 192.168.109.1
!
ip dhcp pool PRINT1
host 172.16.2.2 255.255.255.0
hardware-address 00c0.ee39.c12e
default-router 192.168.109.1
!
!
flow exporter GetFlow
destination 172.16.1.14
transport udp 9999
!
!
flow exporter GetFlow_2
destination 172.16.1.14
transport udp 8888
!
!
flow monitor GetFlow_INT
exporter GetFlow
cache timeout active 60
record netflow-original
!
!
flow monitor GetFlow_INT_2
exporter GetFlow_2
cache timeout active 60
record netflow-original
!
redundancy
mode none
!
cdp run
!
!
!
interface TenGigabitEthernet0/0/0
no ip address
shutdown
!
interface TenGigabitEthernet0/0/1
no ip address
shutdown
!
interface Ge0
description WAN
ip flow monitor GetFlow_INT input
ip address 212.200.50.1 255.255.255.224
ip nat outside
ip access-group WHITE_LIST in
negotiation auto
!
interface Ge1
description LAN
ip flow monitor GetFlow_INT_2 input
ip address 172.16.2.1 255.255.255.192 secondary
ip address 172.16.1.1 255.255.0.0
ip nat inside
negotiation auto
!
interface Ge2
ip address 10.15.0.1 255.255.255.0
ip nat inside
negotiation auto
!
ip nat inside source list ACL_NAT interface GigabitEthernet0/0/0 overload
ip forward-protocol nd
!
no ip http server
ip http authentication local
no ip http secure-server
!
ip access-list standard ACL_NAT
permit 10.15.0.1 0.0.0.255
!
wsma agent exec
!
wsma agent config
!
wsma agent filesys
!
wsma agent notify
!
!
end
Там на порт прописали IP адрес и добавили ip nat inside
Только я совсем не понимаю зачем было создавать вторую подсеть и почему нельзя бриджом 2 физических интерфейса объединить в 1 логически.