Newsgroup: it.comp.reti.cisco
Titolo: IPSEC su 827

Salve!! vorrei poter accedere dall'esterno alla mia lan. Ho installato sui
pc portatili che useranno modem analogici o altri metodi di connessione a
internet i client VPN Cisco.
Come posso configurare l'827 in modo che accetti connessioni entranti??
Esempi di configurazione?
Alex

 ha scritto nel messaggio
news:vkcSb.163469$VW.66...@news3.tin.it...


 ha scritto nel messaggio
news:vkcSb.163469$VW.66...@news3.tin.it...

Questo potrebbe essere, se oppurtunamente adattato, un buon punto di
partenza.
http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_configuration_example09186a00801c4246.shtml
Buon lavoro.
Davide Carando


http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_configuration_example09186a00801c4246.shtml
Alla sezione "IPSec on Router to Cisco Secure VPN Client" di questa pagina
http://www.cisco.com/pcgi-bin/Support/browse/psp_view.pl?p=Internetworking:IPSec&s=Implementation_and_Configuration
ci sono svariati esempi di configurazione.
~mm

Ho seguito i vostri consigli ma non riesco comunque a collegarmi
dall'esterno sembra che il router non risponda proprio.... vi posto la
config...
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Cisco827
!
boot-start-marker
boot-end-marker
!
enable secret 5 xxxxxxxxxxxxxxxxxxx.
!
username alessio password 7 0xxxxxxxxxxxxxxxxxxxxxxx
aaa new-model
!
!
aaa session-id common
ip subnet-zero
ip domain name 
alex.com
!
ip dhcp pool CiscoLAn
   network 192.168.0.0 255.255.255.0
   default-router 192.168.0.254
   dns-server 62.211.69.150 212.48.4.15
!
ip ssh authentication-retries 2
!
!
!
crypto isakmp policy 5
 hash md5
 authentication pre-share
crypto isakmp key xxxxxxxxx address 0.0.0.0 0.0.0.0
crypto isakmp client configuration address-pool local test-pool
!
!
crypto ipsec transform-set testset esp-des esp-md5-hmac
!
crypto dynamic-map test-dynamic 10
 set transform-set testset
!
!
crypto map test client configuration address initiate
crypto map test client configuration address respond
crypto map test 10 ipsec-isakmp dynamic test-dynamic
!
!
!
!
interface Ethernet0
 ip address 192.168.0.254 255.255.255.0
 ip nat inside
 hold-queue 100 out
!
interface ATM0
 no ip address
 no atm ilmi-keepalive
 pvc 8/35
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
 dsl operating-mode auto
!
interface Dialer0
 ip address negotiated
 ip nat outside
 encapsulation ppp
 dialer pool 1
 ppp chap hostname sbuttaro
 ppp chap password 7 xxxxxxxxxxxxxxxxxxxxxxxx
 ppp pap sent-username sbuttaro password 7 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 crypto map test
!
ip local pool test-pool 192.168.1.1 192.168.1.254
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source static tcp 192.168.0.1 4662 interface Dialer0 4662
ip nat inside source static tcp 192.168.0.2 4663 interface Dialer0 4663
ip nat inside source static udp 192.168.0.2 4673 interface Dialer0 4673
ip nat inside source static udp 192.168.0.2 4674 interface Dialer0 4674
ip nat inside source route-map nonat interface Dialer0 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
no ip http server
no ip http secure-server
!
access-list 1 permit 192.168.0.0 0.0.0.255
access-list 110 deny   ip 192.168.0.0 0.0.0.255 192.168.1.0 0.0.0.255
access-list 110 permit ip 192.168.0.0 0.0.0.255 any
!
route-map nonat permit 10
 match ip address 110
!
!
line con 0
 transport preferred all
 transport output all
 stopbits 1
line vty 0 4
 password 7 xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 transport preferred all
 transport input ssh
