Cisco Route PPPOE On Ethernet拨号及VPN设置

 

vpdn enable

!

!

crypto isakmp policy 10

 hash md5

 authentication pre-share

crypto isakmp key ***** address A.B.C.D

!

!

crypto ipsec transform-set lh esp-des esp-md5-hmac

!

crypto map vpnmap 10 ipsec-isakmp

 set peer A.B.C.D

 set transform-set lh

 match address 110

!

 

interface Tunnel1

 ip address 10.*.*.*  255.255.255.252

 tunnel source 192.168.0.2

 tunnel destination 192.168.0.1

!

interface Loopback0

 ip address 192.168.0.2 255.255.255.255

!

interface FastEthernet0/0

 ip address 10.10.10.1 255.255.255.0

 ip nat inside

 ip virtual-reassembly

 ip tcp adjust-mss 1460

 no ip mroute-cache

 duplex auto

 speed auto

!

interface FastEthernet0/1

 no ip address

 ip tcp adjust-mss 1420

 duplex auto

 speed auto

 pppoe enable

 pppoe-client dial-pool-number 1

!

interface Dialer1

 ip address negotiated

 ip mtu 1492

 ip nat outside

 ip virtual-reassembly

 encapsulation ppp

 ip tcp adjust-mss 1460

 dialer pool 1

 dialer-group 1

 ppp authentication chap pap callin

 ppp chap hostname abcdegf

 ppp chap password  *******

 ppp pap sent-username abcdegf password *******

 crypto map vpnmap

!

ip route 0.0.0.0 0.0.0.0 Dialer1

ip route A.B.C.D 255.255.255.255 Dialer1

ip route 192.168.0.1 255.255.255.255 Dialer1

!

!

ip http server

no ip http secure-server

ip nat inside source list 101 interface Dialer1 overload

!

access-list 101 permit ip 10.0.0.0 0.255.255.255 any

dialer-list 1 protocol ip permit

!