All pastes #902459 Raw Edit

Someone

public text v1 · immutable
·published 2008-02-13 14:43 UTC
rendered paste body
interface FastEthernet0/0
 description OPTONLINE - CABLE MODEM
 ip address 75.127.175.2 255.255.255.248
 ip access-group outside in
 ip inspect myfw out
 ip nat outside
 ip virtual-reassembly
 ip route-cache flow
 duplex auto
 speed auto
 crypto map mymap
!

interface Vlan1
 ip address 10.10.6.1 255.255.254.0
 ip nbar protocol-discovery
 ip flow ingress
 ip flow egress
 ip nat inside
 ip virtual-reassembly
 ip route-cache flow


crypto map mymap 10 ipsec-isakmp 
 set peer 69.20.72.8
 set transform-set myset 
 match address ACL_VPN

ip access-list extended outside
 permit icmp any any echo-reply
 permit icmp any 10.10.6.0 0.0.1.255 time-exceeded
 permit icmp any 10.10.6.0 0.0.1.255 packet-too-big
 permit icmp any 10.10.6.0 0.0.1.255 traceroute
 permit icmp any 10.10.6.0 0.0.1.255 unreachable
 deny   icmp any any
 permit esp host 69.20.72.8 host 75.127.175.2
 permit udp host 69.20.72.8 host 75.127.175.2 eq isakmp
 permit udp host 69.20.72.8 host 75.127.175.2 eq non500-isakmp
 deny   ip any any log

ip access-list extended ACL_VPN
permit ip 10.10.6.0 0.0.0.255 192.168.6.0 0.0.0.255
permit ip 10.10.7.0 0.0.0.255 192.168.6.0 0.0.0.255