! Generated by Network Security Policy Compiler, version 2.453

! [ BEGIN router:y2 ]
! [ Model = IOS_FW ]
! [ Routing ]
! route network:a -> interface:x.b
ip route 10.1.1.0 255.255.255.0 10.1.2.1
! route network:e -> interface:z.c
ip route 10.1.255.0 255.255.255.0 20.1.3.3
! [ ACL ]
! interface:y2.b.virtual
ip access-list extended Fastethernet0/0_in
! permit src=network:b; dst=auto_network:HSRP_multicast; srv=auto_srv:HSRP;
 permit udp 10.1.2.0 0.0.0.255 host 224.0.0.2 eq 1985
! deny src=network:0/0; dst=interface:y2.c; srv=auto_srv:ip;
 deny ip any host 10.1.3.2
! permit src=host:a1; dst=network:c; srv=service:ping;
 permit icmp host 10.1.1.10 10.1.3.0 0.0.0.255 8
! permit src=host:a1; dst=network:d; srv=service:ping;
 permit icmp host 10.1.1.10 10.1.255.0 0.0.0.255 8
! deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip;
 deny ip any any

! interface:y2.c
ip access-list extended Fastethernet0/1_in
! deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip;
 deny ip any any

interface Fastethernet0/0
 ip access-group Fastethernet0/0_in in
interface Fastethernet0/1
 ip access-group Fastethernet0/1_in in

! [ END router:y2 ]

