regarding full configuration
aaa new-model
!
!
aaa group server radius VPNClient
server-private x.x.x.2 auth-port 1yy5 acct-port 1yy6 key
30017
!
aaa authentication ppp default local
aaa authorization network default if-authenticated
!
aaa session-id common
!
resource policy
!
no ip source-route
!
!
ip cef
!
!
no ip bootp server
no ip domain lookup
ip domain name headcan.com
ip inspect name ALLOWED tcp
ip inspect name ALLOWED udp
ip ips notify SDEE
vpdn enable
!
interface FastEthernet0/1
description Internal LAN$FW_INSIDE$$ETH-LAN$
ip address 10.1.1.1 255.255.255.0
no ip unreachables
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
no mop enabled
!
interface FastEthernet0/2/0
!
interface FastEthernet0/2/1
!
interface FastEthernet0/2/2
!
interface FastEthernet0/2/3
!
interface Virtual-Template1
ip unnumbered Vlan1
ip mroute-cache
peer default ip address pool dial-in
ppp encrypt mppe auto
ppp authentication chap pap ms-chap mschap-v2
!
interface Vlan1
description DSL2
ip address 209.z.z.130 255.255.255.248
no ip unreachables
ip nat outside
ip virtual-reassembly
no mop enabled
crypto map zzzzzzz
ip route 0.0.0.0 0.0.0.0 209.x.x.129
ip http server
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
ip nat inside source static tcp z.z.z.5 443 interface Vlan1 443
ip nat inside source static tcp z.z.z.5 143 interface Vlan1 143
ip nat inside source static tcp z.z.z.5 80 interface Vlan1 80
ip nat inside source static tcp z.z.z.5 110 interface Vlan1 110
ip nat inside source static tcp z.z.z.5 25 interface Vlan1 25
ip nat inside source route-map zzzzzz interface Vlan1 overload
ip nat inside source static tcp z.z.z.5 3389 interface Vlan1 3389
