We've setup a Cisco 3640 as the VPN gateway for remote users.
config is here:
r3640-VPN>en
Password:
r3640-VPN#show run
Building configuration...
Current configuration : 5146 bytes
!
! Last configuration change at 17:25:33 GMT Tue Feb 14 2006
! NVRAM config last updated at 17:25:34 GMT Tue Feb 14 2006
!
version 12.4
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime localtime show-timezone
service timestamps log datetime localtime show-timezone
no service password-encryption
service udp-small-servers
service tcp-small-servers
!
hostname r3640-VPN
!
boot-start-marker
boot-end-marker
!
logging buffered 409600 debugging
enable secret 5 $1$yVaS$iEAlCgSYVALCBlFE7OyzB0
!
aaa new-model
!
!
aaa authentication login userauthen local
aaa authentication ppp default local
aaa authorization network groupauthor local
!
aaa session-id common
!
resource policy
!
clock timezone GMT 8
!
!
ip cef
ip name-server 10.71.0.61
!
!
ip ssh rsa keypair-name ssh-key
ip ssh version 2
!
!
!
!
username cisco password 0 cisco
!
!
crypto isakmp policy 3
hash md5
authentication pre-share
group 2
!
crypto isakmp client configuration group vpnuser
key shlear
dns 10.71.0.61
wins 10.67.0.61
domain vpn.foo.org
pool ippool
include-local-lan
netmask 255.255.255.255
!
!
crypto ipsec transform-set myset esp-des esp-md5-hmac
!
crypto dynamic-map dynmap 10
set transform-set myset
!
!
crypto map mymap client authentication list userauthen
crypto map mymap isakmp authorization list groupauthor
crypto map mymap client configuration address initiate
crypto map mymap client configuration address respond
crypto map mymap 10 ipsec-isakmp dynamic dynmap
!
!
!
!
interface FastEthernet0/0
description " Inside Interface "
ip address 10.71.0.99 255.255.254.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
description " Wan Interface "
no ip address
no ip proxy-arp
ip virtual-reassembly
duplex auto
speed auto
pppoe enable
pppoe-client dial-pool-number 1
no cdp enable
!
interface Dialer1
description " PPP-Dialup "
bandwidth 512
ip address negotiated
no ip redirects
ip local-proxy-arp
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer idle-timeout 0
dialer redial interval 5 attempts 0 re-enable 5
dialer-group 1
no cdp enable
ppp authentication pap chap callin
ppp chap hostname name
ppp chap password pass
ppp pap sent-username name password pass
ppp ipcp dns request
crypto map mymap
!
ip local pool ippool 10.71.0.241 10.71.0.254
ip http server
ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 Dialer1
!
ip nat inside source route-map no-nat interface Dialer1 overload
!
access-list 1 permit 10.71.0.0 0.0.1.255 log
access-list 101 deny ip 10.71.0.0 0.0.1.255 10.71.0.240 0.0.0.15
access-list 101 permit ip 10.71.0.0 0.0.1.255 any
dialer-list 1 protocol ip permit
snmp-server community Private RW
!
route-map no-nat permit 10
match ip address 101
!
!
control-plane
!
!
!
!
!
!
!
dial-peer cor custom
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
transport input telnet ssh
!
ntp clock-period 17180020
ntp server 130.149.17.21
!
end
r3640-VPN#
