Question
February 25, 2008 at 02:41 AM
mah_alh14

Cisco Router as Internet Access Server and as Remote VPN Server

by mah_alh14 . Updated 18 years, 5 months ago

Salaam,

I have a cisco 2621MX router, configured it as Internet Access Server and every thing is ok, now I need to configure the router as remote access vpn server to accept remote vpn connection from specified pc with specified user, but the vpn connection is no function, where the configuration as following:

hostname
!
aaa new-model
aaa authentication login R_LOCAL_DB local
enable secret 5 $1$1DCm$bwRjdBjSfXqe8R8jP3.2q0

username privilege 15 password 7 070E701E571A4A51010205
!
ip subnet-zero
!
ip name-server ip name-server !
!
vpdn-group 1
! Default L2TP VPDN group
accept-dialin
protocol l2tp
virtual-template 1
local name

!
!
crypto isakmp policy 1
authentication pre-share
group 2
crypto isakmp key address 255.255.255.0
!
!
crypto ipsec transform-set esp-des
!
crypto map client authentication list R_LOCAL_DB
crypto map isakmp authorization list R_LOCAL_DB
crypto map 100 ipsec-isakmp
set peer
match address 130
!
!
!
!
!
interface FastEthernet0/0
description NET-LAN DG
ip address 255.255.255.0
ip nat inside
duplex auto
speed auto
!
interface Serial0/0
description Connect to ISP
ip address 255.255.255.252
ip access-group 20 in
ip nat outside
encapsulation frame-relay IETF
no fair-queue
frame-relay class speed1M
frame-relay traffic-shaping
frame-relay interface-dlci 16
frame-relay lmi-type q933a
crypto map
!
interface FastEthernet0/1
description Connect To LAN2 Server
ip address 255.255.255.0
duplex auto
speed auto
!
interface Virtual-Template1
ip unnumbered FastEthernet0/1
ppp authentication ms-chap
!
ip nat inside source list 10 interface Serial0/0 overload
ip classless
ip route 0.0.0.0 0.0.0.0
no ip http server
!
!
map-class frame-relay speed1M
frame-relay adaptive-shaping becn
frame-relay cir 1024000

access-list 10 permit
access-list 20 permit
access-list 20 deny 10.0.0.0 0.255.255.255
access-list 20 deny 172.160.0.0 0.0.255.255
access-list 20 deny 192.168.0.0 0.0.255.255
access-list 20 deny 96.0.0.0 31.255.255.255
access-list 20 deny 224.0.0.0 31.255.255.255
access-list 20 deny 127.0.0.0 0.255.255.255
access-list 20 deny 169.254.0.0 0.0.255.255
access-list 20 permit any
access-list 23 permit

access-list 120 permit ip < host
access-list 130 permit ip any

please, help me to solve this problem.

best regards,

This discussion is locked

All Comments