Исходное сообщение
"cisco 1811 + cisco VPN client" Отправлено sergeyf, 29-Окт-09 05:24
Всем спасибо проблема решена. Кому надо вот рабочий и полный конфиг с оф источника. ! version 12.2 no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption service internal ! hostname Cisco1751 ! aaa new-model ! ! aaa authentication login userlist local aaa authorization network hw-client-groupname local aaa session-id common enable password cisco ! username cisco password 0 cisco memory-size iomem 15 clock timezone - 0 6 ip subnet-zero no ip source-route ! ! ip domain-name cisco.com ! ip audit notify log ip audit po max-events 100 ! ! ! ! ! Cisco Systems, Inc. All contents are Copyright © 1992–2004 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 7 of 10 ! ! ! crypto isakmp policy 1 encr 3des authentication pre-share group 2 crypto isakmp client configuration address-pool local dynpool crypto isakmp xauth timeout 60 ! crypto isakmp client configuration group hw-client-groupname key hw-client-password dns 30.30.30.10 30.30.30.11 wins 30.30.30.12 30.30.30.13 domain cisco.com pool dynpool acl 150 ! ! crypto ipsec transform-set transform-1 esp-3des esp-sha-hmac ! crypto dynamic-map dynmap 1 set transform-set transform-1 reverse-route ! ! crypto map dynmap client authentication list userlist crypto map dynmap isakmp authorization list hw-client-groupname crypto map dynmap client configuration address respond crypto map dynmap 1 ipsec-isakmp dynamic dynmap ! ! ! ! interface Ethernet0/0 description connected to INTERNET ip address 20.20.20.2 255.255.255.0 half-duplex no cdp enable crypto map dynmap ! interface FastEthernet0/0 description connected to HQ LAN ip address 30.30.30.1 255.255.255.0 speed auto no cdp enable ! ip local pool dynpool 30.30.30.20 30.30.30.30 ip classless ip route 0.0.0.0 0.0.0.0 Ethernet0/0 no ip http server ip pim bidir-enable ! ! access-list 150 permit ip 30.30.30.0 0.0.0.255 any no cdp run ! ! Cisco Systems, Inc. All contents are Copyright © 1992–2004 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 8 of 10 ! line con 0 line aux 0 line vty 0 4 password cisco ! end

Ваше сообщение
Имя*:
EMail:	Для отправки новых сообщений в текущей нити на email укажите знак ! перед адресом, например, !user@host.ru (!! - не показывать email). Более тонкая настройка отправки ответов производится в профиле зарегистрированного участника форума.
Заголовок*:
Сообщение*:	> Всем спасибо проблема решена. > Кому надо вот рабочий и полный конфиг с оф источника. > ! > version 12.2 > no service pad > service timestamps debug uptime > service timestamps log uptime > no service password-encryption > service internal > ! > hostname Cisco1751 > ! > aaa new-model > ! > ! > aaa authentication login userlist local > aaa authorization network hw-client-groupname local > aaa session-id common > enable password cisco > ! > username cisco password 0 cisco > memory-size iomem 15 > clock timezone - 0 6 > ip subnet-zero > no ip source-route > ! > ! > ip domain-name cisco.com > ! > ip audit notify log > ip audit po max-events 100 > ! > ! > ! > ! > ! > Cisco Systems, Inc. > All contents are Copyright © 1992–2004 Cisco Systems, Inc. All rights reserved. > Important Notices and Privacy Statement. > Page 7 of 10 > ! > ! > ! > crypto isakmp policy 1 > encr 3des > authentication pre-share > group 2 > crypto isakmp client configuration address-pool local dynpool > crypto isakmp xauth timeout 60 > ! > crypto isakmp client configuration group hw-client-groupname > key hw-client-password > dns 30.30.30.10 30.30.30.11 > wins 30.30.30.12 30.30.30.13 > domain cisco.com > pool dynpool > acl 150 > ! > ! > crypto ipsec transform-set transform-1 esp-3des esp-sha-hmac > ! > crypto dynamic-map dynmap 1 > set transform-set transform-1 > reverse-route > ! > ! > crypto map dynmap client authentication list userlist > crypto map dynmap isakmp authorization list hw-client-groupname > crypto map dynmap client configuration address respond > crypto map dynmap 1 ipsec-isakmp dynamic dynmap > ! > ! > ! > ! > interface Ethernet0/0 > description connected to INTERNET > ip address 20.20.20.2 255.255.255.0 > half-duplex > no cdp enable > crypto map dynmap > ! > interface FastEthernet0/0 > description connected to HQ LAN > ip address 30.30.30.1 255.255.255.0 > speed auto > no cdp enable > ! > ip local pool dynpool 30.30.30.20 30.30.30.30 > ip classless > ip route 0.0.0.0 0.0.0.0 Ethernet0/0 > no ip http server > ip pim bidir-enable > ! > ! > access-list 150 permit ip 30.30.30.0 0.0.0.255 any > no cdp run > ! > ! > Cisco Systems, Inc. > All contents are Copyright © 1992–2004 Cisco Systems, Inc. All rights reserved. > Important Notices and Privacy Statement. > Page 8 of 10 > ! > line con 0 > line aux 0 > line vty 0 4 > password cisco > ! > end
	Введите код, изображенный на картинке: