EcoRouter

int ISP
ip addr 172.16.1.2/28
ip nat outside

port ge0
no shutdown
service-instance ISP
encapsulation untagged
connect ip interface ISP

int HQ-SRV
ip addr 192.168.1.1/27
ip nat inside
description HQ-SRV

port ge1
no shutdown
service-instance HQ-SRV
encapsulation dot1q 100
rewrite pop 1
connect ip interface HQ-SRV

int HQ-CLI
ip addr 192.168.2.1/28
ip nat inside
description HQ-CLI

port ge1
no shutdown
service-instance HQ-CLI
encapsulation dot1q 200
rewrite pop 1
connect ip interface HQ-CLI

int MGNM
ip addr 192.168.9.1/29
description Management

port ge1
no shutdown
service-instance MGNM
encapsulation dot1q 999
rewrite pop 1
connect ip interface MGNM

ip route 0.0.0.0/0 172.16.1.1

int tunnel.1
ip addr 10.10.10.1/30
ip tunnel 172.16.1.2 172.16.2.2 mode gre
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 P@ssw0rd

router ospf 1
passive-interface default
no passive-interface tunnel.1
network 192.168.1.0/27 area 0
network 192.168.2.0/28 area 0
network 192.168.9.0/29 area 0
network 10.10.10.0/30 area 0

show ip ospf neighbor
show ip route ospf

ip nat pool NAT_POOL 192.168.1.1-192.168.1.31,192.168.2.1-192.168.2.15,192.168.9.1-192.168.9.7
ip nat source dynamic inside-to-outside pool NAT_POOL overload interface ISP 

ip pool DHCP_POOL 192.168.2.2-192.168.2.14

dhcp-server 1
pool DHCP_POOL 1
mask 28
gateway 192.168.2.1
dns 192.168.1.2
domain-name au-team.irpo

interface HQ-CLI
dhcp-server 1

hostname hq-rtr.au-team.irpo

ntp timezone utc+3

username net_admin
password P@ssw0rd
role admin

wr