Stephen thanks a lot, this works great. VPN Server is accessible on the SDM. Have an up to date config etc.
If i could be cheeky and ask one more thing. I tftp'd in the previous config,
!username admin password 7 xxxxxxxxxxxxxxxx
no aaa new-model
ip subnet-zero
no ip domain lookup
ip name-server 195.92.195.95
ip name-server 195.92.195.94
ip dhcp excluded-address 192.168.2.254
ip dhcp excluded-address 192.168.2.2
!
ip dhcp pool CLIENT
network 192.168.2.0 255.255.255.0
default-router 192.168.2.254
dns-server 195.92.195.95 195.92.195.94
lease 0 2
!
!
ip inspect name myfw cuseeme timeout 3600
ip inspect name myfw ftp timeout 3600
ip inspect name myfw rcmd timeout 3600
ip inspect name myfw realaudio timeout 3600
ip inspect name myfw smtp timeout 3600
ip inspect name myfw tftp timeout 30
ip inspect name myfw udp timeout 15
ip inspect name myfw tcp timeout 3600
ip inspect name myfw h323 timeout 3600
ip audit notify log
ip audit po max-events 100
no ftp-server write-enable
!
!
!
!
!
!
!
interface Ethernet0
ip address 192.168.2.254 255.255.255.0
ip access-group 102 in
ip nat inside
ip tcp adjust-mss 1452
no ip mroute-cache
hold-queue 100 out
!
interface ATM0
no ip address
no ip mroute-cache
atm vc-per-vp 64
no atm ilmi-keepalive
pvc 0/38
pppoe-client dial-pool-number 1
!
dsl operating-mode auto
!
interface Dialer1
ip address 81.xxx.xxx.xxx 255.255.255.248
ip access-group 112 in
ip mtu 1452
ip nat outside
ip inspect myfw out
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
dialer remote-name redback
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname xxxxxxxxx.btclick.com
ppp chap password 7 xxxxxxxxxxxxxxxxx
ppp pap sent-username xxxxxxxxx.btclick.com password 7 xxxxxxxxxxxx
ppp ipcp dns request
ppp ipcp wins request
hold-queue 224 in
!
ip nat inside source list 102 interface Dialer1 overload
ip nat inside source static tcp 192.168.2.3 3389 interface Dialer1 3389
ip nat inside source static tcp 192.168.2.3 5632 interface Dialer1 5632
ip nat inside source static tcp 192.168.2.3 5631 interface Dialer1 5631
ip nat inside source static tcp 192.168.2.2 25 interface Dialer1 25
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
ip route 10.9.0.0 255.255.255.0 192.168.2.253
no ip http server
no ip http secure-server
!
access-list 23 permit 192.168.2.0 0.0.0.255
access-list 23 permit 212.135.216.64 0.0.0.15
access-list 102 permit ip 192.168.2.0 0.0.0.255 any
access-list 103 deny ip 192.168.2.0 0.0.0.255 any
access-list 112 permit icmp any any administratively-prohibited
access-list 112 permit icmp any any echo
access-list 112 permit icmp any any echo-reply
access-list 112 permit icmp any any packet-too-big
access-list 112 permit icmp any any time-exceeded
access-list 112 permit icmp any any traceroute
access-list 112 permit icmp any any unreachable
access-list 112 permit tcp any host 81.138.200.254 eq smtp
access-list 112 permit tcp any host 81.138.200.254 eq 5631
access-list 112 permit udp any host 81.138.200.254 eq 5632
access-list 112 permit tcp any host 81.138.200.254 eq 3389
access-list 112 permit ip 212.135.216.64 0.0.0.15 any
access-list 112 deny ip any any
dialer-list 1 protocol ip permit
!
line con 0
exec-timeout 120 0
no modem enable
stopbits 1
line aux 0
line vty 0 4
access-class 23 in
exec-timeout 120 0
password 7 xxxxxxxxxxxx
login local
length 0
!
scheduler max-task-time 5000
!
end
But when i do that i can no longer access the SDM, i can ping and telnet to the router.
The E-message either
router not reachable
or
Http/https needs to be enabled.
Could you give me any pointers on this.
Thanks Again
J Mac
