version 12.1
service timestamps debug datetime msec localtime
service timestamps log datetime msec localtime
service password-encryption
!
hostname Nebenstelle
!
username BENUTZERNAME password PASSWORD
!
!
ip subnet-zero
!
ip name-server 192.168.0.254
no ip finger
isdn switch-type basic-net3
isdn voice-call-failure 0
no ip domain-lookup
!
!
!
interface Ethernet0
ip address 192.168.2.254 255.255.255.0
ip nat inside
load-interval 30
no ip directed-broadcast
no ip proxy-arp
no shutdown
!
interface BRI0
no ip address
encapsulation ppp
no ip directed-broadcast
load-interval 30
dialer pool-member 1
isdn switch-type basic-net3
no cdp enable
no shutdown
!
interface Dialer1
description Verbindung zur Hauptstelle
ip address negotiated
ip nat outside
encapsulation ppp
ip tcp header-compression
ip tcp compression-connections 64
no ip mroute-cache
no ip directed-broadcast

no ip proxy-arp
dialer pool 1
dialer idle-timeout 120 either
dialer load-threshold 255 outbound
dialer string "RUFNUMMER DER HAUPTSTELLE"
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname BENUTZERNAME
ppp chap password PASSWORT
ppp pap sent-username BENUTZERNAME password PASSWORT
ppp multilink
!
ip nat inside source list 101 interface Dialer1 overload
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
!
access-list 101 permit ip 192.168.2.0 0.0.0.255 any
access-list 102 deny udp any eq netbios-dgm any
access-list 102 deny udp any eq netbios-ns any
access-list 102 deny udp any eq netbios-ss any
access-list 102 deny udp any range snmp snmptrap any
access-list 102 deny udp any range bootps bootpc any
access-list 102 deny tcp any eq 137 any
access-list 102 deny tcp any eq 138 any
access-list 102 deny tcp any eq 139 any
access-list 102 permit ip any any
dialer-list 1 protocol ip list 102
!
line con 0
transport input none
stopbits 1
line vty 0 4
access-class 101 in
login local
!
end