Salaam,
I have a cisco 2621MX router, configured it as Internet Access Server and every thing is ok, now I need to configure the router as remote access vpn server to accept remote vpn connection from specified pc with specified user, but the vpn connection is no function, where the configuration as following:
hostname
!
aaa new-model
aaa authentication login R_LOCAL_DB local
enable secret 5 $1$1DCm$bwRjdBjSfXqe8R8jP3.2q0
username
!
ip subnet-zero
!
ip name-server
!
vpdn-group 1
! Default L2TP VPDN group
accept-dialin
protocol l2tp
virtual-template 1
local name
!
!
crypto isakmp policy 1
authentication pre-share
group 2
crypto isakmp key
!
!
crypto ipsec transform-set
!
crypto map
crypto map
crypto map
set peer
match address 130
!
!
!
!
!
interface FastEthernet0/0
description NET-LAN DG
ip address
ip nat inside
duplex auto
speed auto
!
interface Serial0/0
description Connect to ISP
ip address
ip access-group 20 in
ip nat outside
encapsulation frame-relay IETF
no fair-queue
frame-relay class speed1M
frame-relay traffic-shaping
frame-relay interface-dlci 16
frame-relay lmi-type q933a
crypto map
!
interface FastEthernet0/1
description Connect To LAN2 Server
ip address
duplex auto
speed auto
!
interface Virtual-Template1
ip unnumbered FastEthernet0/1
ppp authentication ms-chap
!
ip nat inside source list 10 interface Serial0/0 overload
ip classless
ip route 0.0.0.0 0.0.0.0
no ip http server
!
!
map-class frame-relay speed1M
frame-relay adaptive-shaping becn
frame-relay cir 1024000
access-list 10 permit
access-list 20 permit
access-list 20 deny 10.0.0.0 0.255.255.255
access-list 20 deny 172.160.0.0 0.0.255.255
access-list 20 deny 192.168.0.0 0.0.255.255
access-list 20 deny 96.0.0.0 31.255.255.255
access-list 20 deny 224.0.0.0 31.255.255.255
access-list 20 deny 127.0.0.0 0.255.255.255
access-list 20 deny 169.254.0.0 0.0.255.255
access-list 20 permit any
access-list 23 permit
access-list 120 permit ip
access-list 130 permit ip
please, help me to solve this problem.
best regards,