Building configuration... Current configuration : 3256 bytes ! version 12.3 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption no service dhcp ! hostname (***REM***) ! boot-start-marker boot-end-marker ! enable secret 5 (***REM***) enable password (***REM***) ! clock timezone MST 1 aaa new-model ! ! aaa authentication login default local aaa authentication login (***REM***) local aaa authentication login (***REM***) local aaa authentication login (***REM***) local aaa authorization network (***REM***) local aaa session-id common ip subnet-zero no ip cef ! ! ip domain name (***REM***) ip name-server 194.204.159.1 ip dhcp excluded-address 10.170.63.253 ip dhcp excluded-address 10.170.63.254 ! ip dhcp pool MojeDHCPLAN network 10.170.56.0 255.255.248.0 default-router 10.170.63.253 dns-server 62.129.252.30 194.204.159.1 ! ip audit po max-events 100 ! ! username (***REM***) password 0 (***REM***) username (***REM***) password 0 (***REM***) username (***REM***) password 0 (***REM***) ! ! crypto isakmp policy 3 encr 3des authentication pre-share group 2 ! crypto isakmp client configuration group vpnclients key (***REM***) dns 194.204.159.1 domain (***REM***) pool vpnpool ! ! crypto ipsec transform-set myzbior esp-3des esp-md5-hmac crypto ipsec transform-set myremote esp-3des esp-md5-hmac ! crypto dynamic-map mymapa1 10 set transform-set myzbior reverse-route ! ! crypto map clientmap client authentication list vpnusers crypto map clientmap isakmp authorization list groupa crypto map clientmap client configuration address initiate crypto map clientmap client configuration address respond crypto map clientmap 10 ipsec-isakmp dynamic mymapa1 ! ! interface Loopback0 ip address 10.170.62.62 255.255.255.0 ip nat inside ! interface FastEthernet0/0 description Polaczenie dla sieci LAN ip address 80.51.x.x 255.255.255.252 secondary ip address 10.170.63.20 255.255.255.0 ip nat inside speed auto full-duplex ! interface Serial0/0 description Podlaczenie FRI do Internetu no ip address encapsulation frame-relay frame-relay lmi-type ansi ! interface Serial0/0.1 point-to-point description Lacze do Internetu 2Mbps ip address 80.50.x.x 255.255.255.252 ip nat outside ip policy route-map VPN-Client no cdp enable frame-relay interface-dlci 99 IETF crypto map clientmap ! interface BRI0/0 no ip address encapsulation hdlc shutdown ! interface Serial0/1 no ip address shutdown ! ip local pool vpnpool 10.170.63.21 10.170.63.40 ip nat inside source list 100 interface Serial0/0.1 overload ip http server no ip http secure-server ip classless ip route 0.0.0.0 0.0.0.0 Serial0/0.1 ! ! access-list 100 permit ip 10.170.56.0 0.0.7.255 any access-list 100 permit icmp any any echo-reply access-list 100 permit icmp any any time-exceeded access-list 100 permit ip host 80.83.x.x any access-list 100 permit icmp any any unreachable access-list 100 permit icmp any any traceroute access-list 100 permit icmp any any echo access-list 100 deny ip 10.170.56.0 0.0.7.255 10.170.63.0 0.0.0.255 no cdp run ! route-map VPN-Client permit 10 match ip address 100 set interface Loopback0 ! ! line con 0 login authentication (***REM***) no exec line aux 0 line vty 0 4 password (***REM***) line vty 5 15 ! ! end