All pastes #901794 Raw Edit

Someone

public text v1 · immutable
·published 2008-02-12 22:51 UTC
rendered paste body
interface FastEthernet0/0
 description OPTONLINE - CABLE MODEM
 ip address 75.127.175.2 255.255.255.248
 ip access-group outside in
 ip inspect myfw out
 ip nat outside
 ip virtual-reassembly
 ip route-cache flow
 duplex auto
 speed auto
 crypto map mymap
!

interface Vlan1
 ip address 10.10.6.1 255.255.254.0
 ip nbar protocol-discovery
 ip flow ingress
 ip flow egress
 ip nat inside
 ip virtual-reassembly
 ip route-cache flow


crypto map mymap 10 ipsec-isakmp 
 set peer 69.20.72.8
 set transform-set myset 
 match address ACL_VPN

ip access-list extended outside
 permit icmp any any echo-reply
 permit icmp any 10.10.6.0 0.0.1.255 time-exceeded
 permit icmp any 10.10.6.0 0.0.1.255 packet-too-big
 permit icmp any 10.10.6.0 0.0.1.255 traceroute
 permit icmp any 10.10.6.0 0.0.1.255 unreachable
 deny   icmp any any
 permit udp host 69.20.72.8 host 75.127.175.2 eq isakmp
 permit udp host 69.20.72.8 host 75.127.175.2 eq non500-isakmp
 deny   ip any any log

ip access-list extended ACL_VPN
 permit icmp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255
 permit udp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255 eq snmp
 permit tcp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255 eq 22
 permit tcp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255 eq 50001
 permit tcp 10.10.6.0 0.0.1.255 host 192.168.1.159 eq 5432