rendered paste bodycrypto isakmp policy 10
encr 3des
authentication pre-share
group 2
!
crypto isakmp client configuration group xxxxxx
key xxxxxx
dns 10.10.7.200
domain lmm.local
pool vpnippool
crypto isakmp profile VPNclient
description VPN clients profile
match identity group xxxxxx
client authentication list clientauth
isakmp authorization list groupauthor
client configuration address respond
!
!
crypto ipsec transform-set myset esp-3des esp-sha-hmac
!
crypto dynamic-map dynmap 5
set transform-set myset
set isakmp-profile VPNclient
reverse-route
!
!
crypto map mymap 10 ipsec-isakmp dynamic dynmap
!
!
!
interface FastEthernet0/0
description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FE 0$
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
crypto map mymap
!
interface FastEthernet0/1/0
!
interface FastEthernet0/1/1
switchport access vlan 2
!
interface FastEthernet0/1/2
switchport access vlan 3
!
interface FastEthernet0/1/3
shutdown
!
interface Vlan1
ip address 10.10.7.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface Vlan2
ip address 10.10.8.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface Vlan3
ip address 10.10.9.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
router rip
network 10.0.0.0
!
ip local pool vpnippool 10.10.10.1 10.10.10.10
ip classless
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list INSIDE_NAT_ADDRESSES interface FastEthernet0/0 overload
!
ip access-list standard INSIDE_NAT_ADDRESSES
permit 10.10.7.0 0.0.0.255
permit 10.10.8.0 0.0.0.255
permit 10.10.9.0 0.0.0.255
!
access-list 23 permit 10.10.7.0 0.0.0.255
access-list 23 permit 10.10.8.0 0.0.0.255
access-list 23 permit 10.10.10.0 0.0.0.255
snmp-server community public RO