access-list 111 deny ip 10.250.251.0 0.0.0.255 10.0.0.0 0.255.255.255
access-list 111 permit ip any any
access-list 101 permit ip 10.250.251.0 0.0.0.255 10.0.0.0 0.255.255.255
ip local pool ippool 10.250.251.50 10.215.251.250
ip nat inside source list 111 interface FastEthernet0/1 overload
username cisco password anyoldpassword
aaa new-model
aaa authentication login userauthen local
aaa authorization network groupauthor local
crypto isakmp policy 3
encr aes 256
hash sha
authentication pre-share
group 2
crypto ipsec transform-set myset esp-aes 256 esp-sha-hmac
crypto isakmp client configuration group vpncl1ent
key myvpnkey
domain cisco.com
pool ippool
acl 101
crypto dynamic-map dynmap 10
set transform-set myset
reverse-route
crypto map clientmap client authentication list userauthen
crypto map clientmap isakmp authorization list groupauthor
crypto map clientmap client configuration address respond
crypto map clientmap 10 ipsec-isakmp dynamic dynmap
interface FastEthernet0/0
ip add 10.250.250.2 255.255.255.224
no shut
interface FastEthernet1/0
ip add 12.12.12.222 255.255.255.224
no shut
crypto map clientmap
No comments:
Post a Comment
Your comment will be reviewed for approval. Thank you for submitting your comments.