See the Explanation below.
Explanation:
Answer as below configuration:
1.- on R3
config terminal
ip route 192.168.1.1 255.255.255.255 209.165.200.229
end
copy running start
2.- on R2
config terminal
ip route 0.0.0.0 0.0.0.0 209.165.202.130
end
copy running start
3.- on R2
config terminal
ipv6 route ::/0 2001:db8:abcd::2
end
copy running start

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-0_2_EX/vlan
/configuration_guide/b_vlan_152ex_2960-x_cg/b_vlan_152ex_2960-x_cg_chapter_0110.pdf Untagged traffic from the device attached to the Cisco IP Phone passes through the phone unchanged, regardless of the trust state of the access port on the phone.