! Generated by Network Security Policy Compiler, version 2.453

! [ BEGIN router:stateful ]
! [ Model = IOS_FW ]
! [ Routing ]
! route network:n1 -> interface:stateless.n2
ip route 10.1.1.0 255.255.255.0 10.2.2.1
! route network:n3 -> interface:unmanaged.nu
ip route 10.3.3.0 255.255.255.0 serial0
! [ ACL ]
! interface:stateful.n2
ip access-list extended eth0_in
! permit src=network:n1; dst=host:server; srv=service:ftp-command;
 permit tcp 10.1.1.0 0.0.0.255 host 10.3.3.3 eq 21
! deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip;
 deny ip any any

! interface:stateful.nu
ip access-list extended serial0_in
! deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip;
 deny ip any any

interface eth0
 ip access-group eth0_in in
interface serial0
 ip access-group serial0_in in

! [ END router:stateful ]

