!
version 11.3
service password-encryption
!
hostname inner.router
!
enable secret 5 $1$KLOC$xgPYwvfcTwgKhPSSOEJ74.
enable password 7 02120C5E450B0E2D40
!
no ip source-route
!
!
!
interface Ethernet0/0
 description To Firewall
 ip address 10.10.95.50 255.255.255.240
 ip access-group 100 in
 ip access-group 100 out
 no ip redirects
 no ip unreachables
 no lat enabled
 no mop enabled
!
interface Serial0/0
 description n23
 ip address 10.10.94.5 255.255.255.252
 no ip redirects
 no ip mroute-cache
 ip policy route-map REDIRECT
!
interface Serial0/1
 description n61
 ip address 10.10.94.9 255.255.255.252
 no ip redirects
 ip policy route-map REDIRECT
!
interface Ethernet1/0
 description Command Lan
 ip address 10.10.100.5 255.255.248.0
 no ip redirects
 no ip directed-broadcast
 no ip mroute-cache
 ip policy route-map REDIRECT
 no lat enabled
 no mop enabled
!
interface Serial1/0
 description 002
 ip address 10.10.94.13 255.255.255.252
 no ip redirects
 ip policy route-map REDIRECT
!
interface Serial1/1
 description Open for expansion
 shutdown
!
interface Ethernet2/0
 description Open for expansion
 ip address 10.10.80.1 255.255.248.0
 no ip redirects
 no lat enabled
 shutdown
!
interface Serial2/0
 description 0023 K-bay
 ip address 10.10.94.17 255.255.255.252
 no ip redirects
 ip policy route-map REDIRECT
!
interface Ethernet2/1
 description SQUID Box
 ip address 10.10.88.1 255.255.255.0
 no ip redirects
 no lat enabled
!
router ospf 4444
 redistribute connected subnets
 redistribute static subnets
 network 10.10.94.0 0.0.0.255 area 1
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.10.95.49
ip route 10.10.95.16 255.255.255.240 10.10.95.49
ip route 10.10.95.32 255.255.255.240 10.10.95.49
ip route 10.10.95.48 255.255.255.240 10.10.95.49
ip route 10.10.95.80 255.255.255.240 10.10.95.49
no access-list 100 
access-list 100 deny   tcp any any eq 135
access-list 100 deny   udp any any eq 135
access-list 100 deny   tcp any any eq 136
access-list 100 deny   udp any any eq 136
access-list 100 deny   tcp any any eq 137
access-list 100 deny   udp any any eq netbios-ns
access-list 100 deny   tcp any any eq 138
access-list 100 deny   udp any any eq netbios-dgm
access-list 100 deny   tcp any any eq 139
access-list 100 deny   udp any any eq 139
access-list 100 permit ip any any
no access-list 110 
access-list 110 deny   tcp host 10.10.100.4 any eq www
access-list 110 deny   tcp host 10.10.88.2 any eq www
access-list 110 deny   tcp host 10.10.88.2 any eq 81
access-list 110 deny   tcp host 10.10.96.102 any eq www
access-list 110 deny   tcp host 10.10.96.102 any eq 81
access-list 110 permit tcp any any eq www
access-list 110 permit tcp any any eq 81
route-map REDIRECT permit 10
 match ip address 110
 set ip next-hop 10.10.88.2
!
!