Here’s another network I worked on over the week. One router connected to two ISPs, two lan network (voice and data) each LAN will have their own gateway, router will act as a DHCP server for each network with port forwards, using VRF and not policy based routing to make things happen.
!
ip vrf DATA
ip vrf VOICE
!
!
ip dhcp use vrf connected
!
ip dhcp excluded-address 10.0.0.101
!
ip dhcp pool dhcppool
vrf DATA
network 10.0.0.0 255.255.255.0
default-router 10.0.0.1
dns-server 192.168.1.1
update arp
!
ip dhcp excluded-address 10.0.1.1
!
ip dhcp pool dhcppool2
vrf VOICE
network 10.0.1.0 255.255.255.0
default-router 10.0.1.1
dns-server 192.168.1.1
update arp
!
!
interface Loopback0
description NETVIEW
!
!
interface GigabitEthernet0/0
no shut
interface GigabitEthernet0/0.10
description DATA_VLAN
encapsulation dot1Q 10
ip vrf forwarding DATA
ip address 10.0.0.1 255.255.255.0
ip flow ingress
ip flow egress
ip tcp adjust-mss 1452
speed auto
ip nat inside
!
interface GigabitEthernet0/0.100
description VOICE_VLAN
encapsulation dot1Q 100
ip vrf forwarding VOICE
ip address 10.0.1.1 255.255.255.0
ip flow ingress
ip flow egress
ip tcp adjust-mss 1452
ip nat inside
!
interface GigabitEthernet0/1
no shut
interface GigabitEthernet0/1.1066
description INTERNET_WAN_DATA_18M
encapsulation dot1Q 1066
ip vrf forwarding DATA
ip address 203.1.1.2 255.255.255.252
ip nat outside
ip virtual-reassembly in
ip nat outside
!
interface FastEthernet0/0/0
description INTERNET_WAN_VOIP
no shutdown
ip vrf forwarding VOICE
ip add 203.1.1.6 255.255.255.252
ip nat outside
!
!
ip route vrf DATA 0.0.0.0 0.0.0.0 203.1.1.1 name DATA_GATEWAY
ip route vrf VOICE 0.0.0.0 0.0.0.0 203.1.1.5 name VOICE_GATEWAY
!
access-list 1 permit 10.0.0.0 0.0.0.255
access-list 2 permit 10.0.1.0 0.0.0.255
!
ip nat inside source list 1 interface GigabitEthernet0/1.1066 vrf DATA overload
ip nat inside source list 2 interface FastEthernet0/0/0 vrf VOICE overload
ip nat inside source static tcp 10.0.0.190 1900 203.1.1.1 1900 vrf DATA
ip nat inside source static tcp 10.0.0.191 1901 203.1.1.1 1901 vrf DATA
ip nat inside source static tcp 10.0.0.192 1902 203.1.1.1 1902 vrf DATA
!
Running-Config 