Building configuration...

Current configuration : 1441 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R1-Edge
!
!
!
!
!
!
!
!
ip cef
no ipv6 cef
!
!
!
!
license udi pid CISCO2911/K9 sn FTX152439F1-
!
!
!
!
!
!
!
!
!
!
!
no ip domain-lookup
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface GigabitEthernet0/0
 description Inside Corporate LAN
 ip address 192.168.1.1 255.255.255.0
 duplex auto
 speed auto
!
interface GigabitEthernet0/1
 description Outside WAN Uplink
 ip address 203.0.113.1 255.255.255.0
 ip access-group OUTSIDE_TO_DMZ in
 duplex auto
 speed auto
!
interface GigabitEthernet0/2
 description Demilitarized Zone (DMZ)
 ip address 172.16.2.1 255.255.255.0
 ip access-group DMZ_POLICY in
 duplex auto
 speed auto
!
interface Vlan1
 no ip address
 shutdown
!
ip classless
!
ip flow-export version 9
!
!
ip access-list extended OUTSIDE_TO_DMZ
 permit tcp any host 172.16.2.10 eq www
 permit tcp any host 172.16.2.10 eq 443
 permit icmp any host 172.16.2.10 echo
 deny ip any 192.168.1.0 0.0.0.255
 deny ip any any
ip access-list extended DMZ_POLICY
 permit tcp host 172.16.2.10 host 192.168.1.50 eq 3306
 permit icmp 172.16.2.0 0.0.0.255 host 172.16.2.1 echo
 deny ip 172.16.2.0 0.0.0.255 192.168.1.0 0.0.0.255
 permit ip host 172.16.2.10 any
 deny ip any any
 permit icmp host 172.16.2.10 192.168.1.0 0.0.0.255 echo-reply
!
!
!
!
!
line con 0
!
line aux 0
!
line vty 0 4
 login
!
!
!
end


R1-Edge#