Here's d running config:
version 12.4
..............deleted.........
aaa new-model
!
!
aaa authentication login default local
aaa authorization exec default local
aaa authorization network sdm_vpn_group_ml_2 group radius
!
aaa session-id common
memory-size iomem 25
ip cef
!
!
ip inspect max-incomplete high 1100
ip inspect one-minute high 1100
[delete]
ip inspect name FastEthernet_0 tftp
!
!
ip domain name abcd.com
ip name-server 20x.xxx.xxx.xxx
ip name-server 20x.xxx.xxx.xxx
!
!
crypto pki trustpoint TP-self-signed-458006412
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-458006412
revocation-check none
rsakeypair TP-self-signed-458006412
!
!
crypto pki certificate chain TP-self-signed-458006412
certificate self-signed 01
[deleted]
quit
username abcdef privilege 15 secret 5 $abcdefgjhAm.
!
!
!
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
!
crypto isakmp client configuration group vpngroup
key abcdef
dns 192.168.1.1 192.168.1.2
wins 192.168.1.1 192.168.1.2
domain domain.local
pool SDM_POOL_1
!
!
crypto ipsec transform-set ESP-3DES-SHA1 esp-3des esp-sha-hmac
crypto ipsec df-bit clear
!
crypto dynamic-map SDM_DYNMAP_1 1
set transform-set ESP-3DES-SHA1
reverse-route
!
!
crypto map SDM_CMAP_1 client authentication list default
crypto map SDM_CMAP_1 isakmp authorization list sdm_vpn_group_ml_2
crypto map SDM_CMAP_1 client configuration address respond
crypto map SDM_CMAP_1 65535 ipsec-isakmp dynamic SDM_DYNMAP_1
!
!
!
interface FastEthernet0/0
description $ETH-SW-LAUNCH$$INTF-INFO-FE 0$$ETH-LAN$
ip address 192.168.1.200 255.255.255.0
ip access-group 100 in
ip inspect FastEthernet_0 in
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
no cdp enable
!
interface FastEthernet0/1
description $ETH-LAN$
ip address 10.10.10.1 255.255.255.0
duplex auto
speed auto
!
interface Serial0/0/0
ip address 20x.xxx.xx.xx 255.255.255.0
ip access-group 101 in
ip nat outside
ip virtual-reassembly
service-module t1 remote-alarm-enable
no cdp enable
crypto map SDM_CMAP_1
!
ip local pool SDM_POOL_1 172.16.1.1 172.16.1.30
ip route 0.0.0.0 0.0.0.0 Serial0/0/0
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source route-map SDM_RMAP_1 interface Serial0/0/0 overload
!
access-list 10 remark SDM_ACL Category=16
access-list 10 permit 192.0.0.0 0.255.255.255
access-list 100 remark SDM_ACL Category=17
access-list 100 permit udp host 192.168.1.1 eq 1645 host 192.168.1.200
access-list 100 permit udp host 192.168.1.1 eq 1646 host 192.168.1.200
access-list 100 permit ip any any
access-list 101 remark SDM_ACL Category=17
access-list 101 permit ip 172.16.1.0 0.0.0.31 any
access-list 101 permit udp any host 20x.xxx.xx.xx eq non500-isakmp
access-list 101 permit udp any host 20x.xxx.xx.xx eq isakmp
access-list 101 permit esp any host 20x.xxx.xx.xx
access-list 101 permit ahp any host 20x.xxx.xx.xx
access-list 101 permit tcp any any eq telnet
access-list 101 permit icmp any any echo-reply
access-list 101 deny ip any any
access-list 102 remark SDM_ACL Category=2
access-list 102 deny ip any 172.16.1.0 0.0.0.31
access-list 102 permit ip 192.0.0.0 0.255.255.255 any
no cdp run
route-map SDM_RMAP_1 permit 1
match ip address 102
!
!
radius-server host 192.168.1.1 auth-port 1645 acct-port 1646 timeout 10 key abcdefg
!
control-plane
!
banner login ^CC
....deleted.....
^C
!
line con 0
exec-timeout 0 0
login authentication abcdefg
line aux 0
line vty 0 4
transport input telnet ssh
line vty 5 15
transport input telnet ssh
!
scheduler allocate 20000 1000
end
r1841#
