Router#sh run
Building configuration...

Current configuration : 1805 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
!
!
ip cef
!
!
no ip domain lookup
!
voice-card 0
 no dspfarm

!
interface FastEthernet0/0
 description lps
 ip address 221.7.69.251 255.255.255.0
 ip access-group 2 out
 ip nat inside
 duplex auto
 speed auto
!
interface FastEthernet0/1
 description internet
 ip address 61.139.99.5 255.255.255.192
 ip access-group to_lps in
 ip nat outside
 duplex auto
 speed auto
!
interface Serial0/0/0
 no ip address
 shutdown
!
interface Serial0/0/1
 no ip address
 shutdown
!
ip route 0.0.0.0 0.0.0.0 61.139.99.4
ip route 221.7.61.0 255.255.255.0 221.7.69.254
ip route 221.7.68.0 255.255.255.0 221.7.69.254
!
!
no ip http server
no ip http secure-server
ip nat pool internet 61.139.99.3 61.139.99.3 netmask 255.255.255.192
ip nat source list 2 pool internet overload
ip nat source static 221.7.69.8 61.139.99.2
ip nat source static 221.7.69.222 61.139.99.10
!
ip access-list extended to_lps
 permit tcp any host 61.139.99.6 eq domain
 permit udp any host 61.139.99.6 eq domain
 permit tcp any host 61.139.99.6 established log
 permit udp any host 61.139.99.2 eq domain
 permit tcp any host 61.139.99.2 eq domain
 permit tcp any host 61.139.99.2 eq pop3
 permit tcp any host 61.139.99.2 eq smtp
 permit tcp any host 61.139.99.2 eq www
 permit icmp any any
!
access-list 2 permit 221.7.61.210
access-list 2 permit 221.7.69.44
access-list 2 permit 221.7.69.87
access-list 2 permit 221.7.68.0 0.0.0.255
access-list 2 deny   221.7.0.0 0.0.255.255
!
!
!
control-plane
!
line con 0
line aux 0
line vty 0 4
 login
!
scheduler allocate 20000 1000
!
end

 

 

221.7.0.0 255.255.0.0 是公司内部网络地址  61.139.99.0/26 电信分配的公网IP。  路由器F0/0连接的交换机的F0/8端口是vlan 10 vlan 10 的虚拟接口地址是221.7.69.254 （也称网关地址）。

兄弟们看下有错误没有。