cisco l2tp over ipsec

标签：vpd   -name   service   token   ica   mode   route   protocol   val   

Current configuration : 2420 bytes
!
! Last configuration change at 09:47:41 UTC Mon Oct 12 2020 by vxiadmin
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
enable password vxinetadmin2982
!
aaa new-model
!
!
aaa authentication ppp default local
!
!
!
!
!
aaa session-id common
!
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
!
ip address-pool local
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
vpdn enable
!
vpdn-group 1
! Default L2TP VPDN group
accept-dialin
protocol l2tp
virtual-template 1
no l2tp tunnel authentication
!
!
!
!
!
!
!
!
voice-card 0
!
crypto pki token default removal timeout 0
!
!
!
!
license udi pid CISCO2811 sn FHK1429F0LJ
username cisco privilege 15 password 0 cisco
username admin privilege 15 password 0 admin123
!
redundancy
!
!
!
!
crypto isakmp policy 10
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key cisco address 0.0.0.0 0.0.0.0
!
!
crypto ipsec transform-set cisco esp-3des esp-md5-hmac
mode transport
!
crypto dynamic-map cisco 10
set transform-set cisco
!
!
crypto map cisco 10 ipsec-isakmp dynamic cisco
!
!
!
!
!
!
interface FastEthernet0/0
ip address 218.104.X.188 255.255.255.248
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
crypto map cisco
!
interface FastEthernet0/1
ip address 172.28.192.248 255.255.255.0
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
!
interface Virtual-Template1
ip unnumbered FastEthernet0/0
ip nat inside
ip virtual-reassembly in
peer default ip address pool cisco
ppp authentication ms-chap-v2 ms-chap
!
ip local pool cisco X.118.139.1 X.118.139.100
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list 101 interface FastEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 218.104.X.185
ip route 17.0.0.0 255.0.0.0 172.28.192.254
ip route 172.28.0.0 255.255.0.0 172.28.192.254
!
access-list 101 deny ip any X.118.139.0 0.0.0.255
access-list 101 permit ip any any
nls resp-timeout 1
cpd cr-id 1
!
!
!
!
!
!
!
!
control-plane
!
!
!
!
mgcp profile default
!
!
!
!
!
gatekeeper
shutdown
!
!
!
line con 0
line aux 0
line vty 0 4
password vxinetadmin2982
transport input all
!
scheduler allocate 20000 1000
end

cisco l2tp over ipsec

标签：vpd   -name   service   token   ica   mode   route   protocol   val   

原文地址：https://blog.51cto.com/13251917/2541554