Current configuration:
!
version 12.0
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname LNS
!
enable password
!
username LNS password
ip subnet-zero
!
!--- Enable VDPN.
vpdn enable
!
!--- Configure vpdn group 1 to accept an open tunnel request from LAC,
!--- define L2TP as the protocol, and identify virtual-template 1
!--- to use for cloning virtual access interfaces.
vpdn-group 1
accept dialin l2tp virtual-template 1 remote LAC
local name LNS
!
!--- Create Internet Key Exchange (IKE) policy 1, which would be
!--- given highest priority if there were additional IKE policies.
!--- Specify policy using pre-shared key for authentication,
!--- Diffie-Hellman group 2, lifetime and peer address.
crypto isakmp policy 1
authentication pre-share
group 2
lifetime 3600
crypto isakmp key cisco address 20.1.1.1
!
!
!--- Create IPSEC transform set named "testtrans"
!--- using DES for ESP with transport mode.
!--- Note that AH is not used.
crypto ipsec transform-set testtrans esp-des
!
!--- Create crypto map l2tpmap (assigned to Serial 0), using IKE for
!--- Security Associations with map-number 10
!--- and using "testrans" transform-set as a template.
!--- Set the peer and specifies access list 101, which is used
!--- to determine which traffic (L2TP) is to be protected by IPSec.
crypto map l2tpmap 10 ipsec-isakmp
set peer 20.1.1.1
set transform-set testtrans
match address 101
!
interface Ethernet0
ip address 200.1.1.100 255.255.255.0
no ip directed-broadcast
no keepalive
!
!--- Create virtual-template interface used for "cloning"
!--- virtual-access interfaces using address pool "mypool"
!--- with Challenge Authentication Protocol (CHAP) authentication.
interface Virtual-Template1
ip unnumbered Ethernet0
no ip directed-broadcast
no ip route-cache
peer default ip address pool mypool
ppp authentication chap
!
interface Serial0
ip address 20.1.1.2 255.255.255.252
no ip directed-broadcast
no ip route-cache
no ip mroute-cache
no fair-queue
clockrate 1300000
!--- Assign crypto map l2tpmap to interface.
crypto map l2tpmap
!
!--- Create IP Pool named "mypool" and specify IP range.
ip local pool mypool 200.1.1.1 200.1.1.10
ip classless
!
!--- Specify L2TP traffic as interesting to use with IPSec.
access-list 101 permit udp host 20.1.1.2 eq 1701 host 20.1.1.1 eq 1701
!
line con 0
exec-timeout 0 0
transport input none
line aux 0
line vty 0 4
password
login
!
end
|
