enable
configure terminal
no ip domain-lookup
service password-encryption
hostname R4
enable secret class
line console 0
password cisco
login
logging synchronous
exit
line vty 0 4
password cisco
login
exit
banner motd #Unauthorized access prohibited#
access-list 1 permit 192.168.3.0 0.0.0.255
access-list 1 permit 192.168.4.0 0.0.0.255
access-list 1 permit 192.168.0.0 0.0.0.255
ip nat inside source list 1 interface g0/0 overload
interface g0/1
ip nat inside
int g0/0
ip nat outside
exit
ip dhcp pool VLAN_C_POOL
network 192.168.3.0 255.255.255.0
default-router 192.168.3.254
ip dhcp pool VLAN_D_POOL
network 192.168.4.0 255.255.255.0
default-router 192.168.4.254
ip dhcp excluded-address 192.168.3.1 192.168.3.4
ip dhcp excluded-address 192.168.4.1 192.168.4.4
ip dhcp excluded-address 192.168.4.254
ip dhcp excluded-address 192.168.3.254
interface g0/1
ip address 10.0.20.3 255.255.255.248
no shutdown
exit
interface g0/0
ip address 203.0.113.26 255.255.255.252
no shutdown
exit
ip route 0.0.0.0 0.0.0.0 203.0.113.25
interface Tunnel0
ip address 172.16.12.2 255.255.255.252
tunnel source 203.0.113.26  
tunnel destination 203.0.113.17
no shutdown
exit
router ospf 1
network 10.0.20.0 0.0.0.7 area 0 
network 172.16.12.0 0.0.0.3 area 1
network 203.0.113.24 0.0.0.3 area 0
passive-interface g0/0
end
copy running-config startup-config