ip route default gateway dhcp lan3 ip lan1 address 192.168.0.254/20 ip lan3 address dhcp ip lan3 intrusion detection in on reject=on ip lan3 nat descriptor 1 nat descriptor type 1 masquerade nat descriptor address outer 1 primary dns server dhcp lan3 dns private address spoof on