version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname remotevpn
!
boot-start-marker
boot-end-marker
!
enable secret 5 xxxxxxxxxxxxxx
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication login sdm_vpn_xauth_ml_1 local
aaa authentication login userauthen local
aaa authorization exec default local
aaa authorization network sdm_vpn_group_ml_1 local
aaa authorization network groupauthor local
!
aaa session-id common
!
resource policy
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.0.254
!
ip dhcp pool CLIENT
import all
network 192.168.0.0 255.255.255.0
default-router 192.168.0.254
dns-server 194.168.8.100
!
!
ip name-server 194.168.4.100
ip name-server 194.168.8.100
!
!
!
username martyn privilege 15 password 7 xxxxxxxxxxxxxx
username client password 7 xxxxxxxxxxxxx
username chris privilege 15 password 7 xxxxxxxxxxxxx
!
!
!
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
!
crypto isakmp client configuration group vpngroup
key xxxxxxxxx
dns 194.168.4.100 194.168.8.100
pool SDM_POOL_1
acl 100
!
!
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
!
crypto dynamic-map SDM_DYNMAP_1 1
set transform-set ESP-3DES-SHA
reverse-route
!
!
crypto map SDM_CMAP_1 client authentication list sdm_vpn_xauth_ml_1
crypto map SDM_CMAP_1 isakmp authorization list sdm_vpn_group_ml_1
crypto map SDM_CMAP_1 client configuration address respond
crypto map SDM_CMAP_1 65535 ipsec-isakmp dynamic SDM_DYNMAP_1
!
!
!
interface FastEthernet0/0
description Broadband Connection
ip address 192.168.0.254 255.255.255.0
ip nat inside
ip virtual-reassembly
no ip route-cache cef
no ip route-cache
duplex auto
speed auto
no cdp enable
!
interface FastEthernet0/1
ip address dhcp
ip nat outside
ip virtual-reassembly
no ip route-cache cef
no ip route-cache
duplex auto
speed auto
no cdp enable
crypto map SDM_CMAP_1
!
interface Serial0/0/0
no ip address
shutdown
no fair-queue
clock rate 2000000
!
ip local pool SDM_POOL_1 192.168.0.10 192.168.0.50
ip route 192.168.3.0 255.255.255.0 FastEthernet0/1
ip route 0.0.0.0 0.0.0.0 dhcp
!
!
ip http server
no ip http secure-server
ip nat source list 102 interface FastEthernet0/1 overload
!
access-list 100 remark SDM_ACL Category=4
access-list 100 permit ip 192.168.0.0 0.0.0.255 any
access-list 102 permit ip 192.168.3.0 0.0.0.255 any
!
!
!
!
control-plane
!
!
!
line con 0
line aux 0
line vty 0 4
password 7 104D000A061843535C54
!
end
|