Newsgroup: it.comp.reti.cisco
Titolo: PPTP cisco e Client Accesso remoto Windows

Salve ragazzi..
sto cercando di configurare un Client Initiated Dial-In VPDN
Tunneling.. utilizzando PPTP..
Premessa la configurazione del cisco come mostrata di seguito, ho due
domande:
1:posso usare una normale connessione remota di windows come client?
2:e in tal caso, dove vado a impostare nome utente e passowrd
abilitati alla connessione vpn, nel CISCO?
questa la mia config:
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Cisco
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
enable secret 5 *******
!
resource policy
!
clock timezone PCTime 0
clock summer-time PCTime date Mar 30 2003 1:00 Oct 26 2003 2:00
no ip dhcp use vrf connected
ip dhcp excluded-address 10.0.10.1
ip dhcp excluded-address 10.0.10.254
!
ip dhcp pool Cisco_Scope
   network 10.0.10.0 255.255.255.0
   default-router 10.0.10.254
   dns-server 192.74.65.68 194.72.9.34
!
!
ip cef
ip inspect name firewall tcp
ip inspect name firewall udp
ip inspect name firewall ftp
ip inspect name firewall http
ip inspect name firewall tftp
no ip domain lookup
ip domain name 
dominio.com
ip name-server 194.74.65.68
ip name-server 194.72.9.34
vpdn-group clientinit
! Default L2TP VPDN group
! Default PPTP VPDN group
 accept-dialin
  protocol any
  virtual-template 1
!
!
!
crypto pki trustpoint TP-self-signed-3996847148
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-3996847148
 revocation-check none
 rsakeypair TP-self-signed-3996847148
!
!
crypto pki certificate chain TP-self-signed-3996847148
 certificate self-signed 01
  30820247 308201B0 A0030201 02020101 300D0609 2A864886 F70D0101
04050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D
43657274
  ************
  quit
username administrator privilege 15 secret 5 **********
!
!
!
!
!
interface ATM0
 no ip address
 no atm ilmi-keepalive
 dsl operating-mode auto
!
interface ATM0.1 point-to-point
 description $ES_WAN$
 no snmp trap link-status
 pvc 0/38
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
!
interface FastEthernet0
 no cdp enable
!
interface FastEthernet1
 no cdp enable
 spanning-tree portfast
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Virtual-Template1
 ip unnumbered FastEthernet0
 peer default ip address pool mypool
 ppp encrypt mppe auto required
 ppp authentication chap
!
interface Dot11Radio0
 no ip address
 shutdown
 speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0
36.0 48.0 54.0
 station-role root
!
interface Vlan1
 description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$ES_LAN$
 ip address 10.0.10.254 255.255.0.0
 ip nat inside
 ip virtual-reassembly
 ip tcp adjust-mss 1452
!
interface Dialer0
 ip address *.*.*.* 255.255.255.254
 ip inspect firewall out
 ip nat outside
 ip virtual-reassembly
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 no cdp enable
 ppp authentication chap pap callin
 ppp chap hostname **************
 ppp chap password 7 **************
 ppp pap sent-username *************** password 7 *************
!
ip route 0.0.0.0 0.0.0.0 Dialer0
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat translation timeout 300
ip nat translation tcp-timeout 120
ip nat translation syn-timeout 120
ip nat translation icmp-timeout 180
ip nat translation max-entries 5000
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source static tcp 10.0.10.1 5505 interface Dialer0 5505
ip nat inside source static tcp 10.0.10.1 5504 interface Dialer0 5504
ip nat inside source static tcp 10.0.10.1 5503 interface Dialer0 5503
ip nat inside source static tcp 10.0.10.1 5502 interface Dialer0 5502
ip nat inside source static tcp 10.0.10.1 5501 interface Dialer0 5501
ip nat inside source static tcp 10.0.10.1 3389 interface Dialer0 3389
ip nat inside source static tcp 10.0.10.1 80 interface Dialer0 80
ip nat inside source static tcp 10.0.10.1 21 interface Dialer0 21
ip nat inside source static tcp 10.0.10.1 20 interface Dialer0 20
ip nat inside source static udp 10.0.10.1 53 interface Dialer0 53
!
access-list 1 permit 10.0.0.0 0.0.255.255
access-list 1 remark INSIDE_IF=VLAN1
dialer-list 1 protocol ip permit
no cdp run
!
control-plane
!
banner login  Targetgrange Tld
Disconnect IMMEDIATELY if you are not an authorized user! 
!
line con 0
 login local
 no modem enable
line aux 0
 login local
line vty 0 4
 privilege level 15
 login local
 transport input telnet ssh
!
scheduler max-task-time 5000
end

ip local pool mypool 192.168.1.50 192.168.1.60

 >ip local pool mypool 10.0.10.200 10.0.10.210
In questo modo tutto funziona...