!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R1
!
!
!
!
!
!
!
aaa new-model
!
aaa authentication login VPNAUTHEN local
!
!
aaa authorization network VPNAUTHOR local
!
!
!
!
!
username jaczewski password 0 cisco
!
crypto isakmp policy 1
authentication pre-share
!
crypto isakmp policy 5
hash md5
authentication pre-share
group 2
!
crypto isakmp key cisco123 address 0.0.0.0 0.0.0.0
!
crypto isakmp client configuration group kazmierczak
key kochanowicz
pool IPPOOL
!
!
crypto ipsec transform-set kochanowicz esp-des esp-md5-hmac
crypto ipsec transform-set TR_3 esp-3des esp-md5-hmac
!
crypto dynamic-map DYNMAP 10
set transform-set kochanowicz
reverse-route
!
crypto map CLIENTMAP client authentication list VPNAUTHEN
crypto map CLIENTMAP isakmp authorization list VPNAUTHOR
crypto map CLIENTMAP client configuration address respond
crypto map CLIENTMAP 10 ipsec-isakmp dynamic DYNMAP
!
!
crypto map VPN 10 ipsec-isakmp
set peer 172.16.2.2
set transform-set TR_3
match address 130
!
!
!
!
!
ip inspect audit-trail
ip inspect name reg1 http audit-trail on
ip inspect name reg1 tcp audit-trail on
!
!
!
!
interface Tunnel0
ip address 192.168.1.1 255.255.255.0
tunnel source Serial0/0/1
tunnel destination 172.16.2.2
!
!
interface FastEthernet0/0
ip address 10.0.1.1 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
shutdown
!
interface Serial0/0/0
ip address 172.26.5.2 255.255.255.252
encapsulation ppp
ip access-group 110 in
ip inspect reg1 in
crypto map CLIENTMAP
!
interface Serial0/0/1
ip address 172.16.1.2 255.255.255.252
encapsulation ppp
clock rate 128000
crypto map VPN
!
interface Vlan1
no ip address
shutdown
!
router eigrp 100
network 172.26.5.0 0.0.0.3
network 172.16.1.0 0.0.0.3
no auto-summary
!
ip local pool IPPOOL 11.11.11.20 11.11.11.30
ip classless
ip route 10.0.2.0 255.255.255.0 192.168.1.2
!
!
access-list 130 permit gre 172.16.1.0 0.0.0.3 172.16.2.0 0.0.0.3
access-list 110 permit ip 192.168.10.0 0.0.0.255 any
access-list 110 permit tcp 11.11.11.0 0.0.0.255 any
access-list 110 permit icmp 11.11.11.0 0.0.0.255 any
access-list 110 permit tcp 11.11.11.0 0.0.0.255 any eq www
access-list 110 permit tcp 11.11.11.0 0.0.0.255 any eq 443
access-list 110 permit tcp 11.11.11.0 0.0.0.255 any eq ftp
access-list 110 permit eigrp any any
!
!
!
!
!
logging 10.0.1.10
line con 0
line vty 0 4
line vty 5 15
logging synchronous
!
!
!
end