Firewall Wizards mailing list archives

Re: Need help configuring client-side VPN to Cisco 2801


From: Mike Leone <turgon () mike-leone com>
Date: Fri, 16 Feb 2007 13:44:00 -0500

Paul Melson (pmelson () gmail com) had this to say on 02/16/07 at 11:50: 
crypto isakmp client configuration group VPN3000
  key ******
  dns 192.168.1.9 192.168.1.241
  wins 192.168.1.39
  domain mycompany.com
  pool contrib
!

ip local pool contrib 172.16.1.1 172.16.1.255 crypto map VPN 999
ipsec-isakmp dynamic DYNAMICMAP 

Should be:

crypto isakmp client configuration group VPN3000
  key ******
  acl 120
  dns 192.168.1.9 192.168.1.241
  wins 192.168.1.39
  domain mycompany.com
  pool contrib
!

ip local pool contrib 172.16.1.1 172.16.1.255 crypto map VPN 999
ipsec-isakmp dynamic DYNAMICMAP 
access-list 100 permit ip 172.16.1.0 0.0.0.255 192.168.1.0 0.0.0.255
access-list 120 permit ip 192.168.1.0 0.0.0.255 any

Thanks; I will try that. The boss says no changes allowed during working
hours (M-Sat, 7-7), so it may be a little bit until I can test this.
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards


Current thread: