enable
configure terminal
!
interface e0/0
 ip address 55.55.55.101 255.255.255.252
 no shutdown
!
interface e0/1
 no ip address
 no shutdown
!
interface e0/1.50
 encapsulation dot1Q 50
 ip address 10.10.5.1 255.255.255.0
!
interface e0/2
 no ip address
 no shutdown
!
interface e0/2.10
 encapsulation dot1Q 10
 ip address 10.10.1.1 255.255.255.0
!
interface e0/2.20
 encapsulation dot1Q 20
 ip address 10.10.2.1 255.255.255.0
!
interface e0/3
 ip address 192.168.10.2 255.255.255.248
 no shutdown
!
ip route 0.0.0.0 0.0.0.0 55.55.55.102
ip route 10.10.3.0 255.255.255.0 192.168.10.1
ip route 10.10.4.0 255.255.255.0 192.168.10.1
ip route 10.10.6.0 255.255.255.0 192.168.10.1
ip route 1.1.1.0 255.255.255.0 55.55.55.102
!
ip access-list standard NAT_ACL_HQ
 permit 10.10.1.0 0.0.0.255
 permit 10.10.2.0 0.0.0.255
 permit 10.10.5.0 0.0.0.255
!
interface e0/1
 ip nat inside
!
interface e0/2
 ip nat inside
!
interface e0/0
 ip nat outside
!
ip nat inside source list NAT_ACL_HQ interface e0/0 overload
ip nat inside source static tcp 10.10.5.60 80 55.55.55.101 8080 extendable
!
ip dhcp pool IT
 network 10.10.1.0 255.255.255.0
 default-router 10.10.1.1
 dns-server 8.8.8.8
 lease 7
!
ip dhcp excluded-address 10.10.1.1 10.10.1.100
!
ip dhcp pool MANAGEMENT
 network 10.10.2.0 255.255.255.0
 default-router 10.10.2.1
 dns-server 8.8.8.8
 lease 7
!
ip dhcp excluded-address 10.10.2.1 10.10.2.100
!
end
write memory