pager lines 24 mtu outside 1500 mtu inside 1500 ip address outside a.b.c.d 255.255.255.128
ip address inside 168.98.0.254 255.255.255.0
ip audit info action alarm ip audit attack action alarm no failover failover timeout 0:00:00 failover poll 15 no failover ip address outside no failover ip address inside pdm location 168.98.0.250 255.255.255.255 inside
pdm location 168.98.1.0 255.255.255.0 outside
pdm history enable arp timeout 14400 global (outside) 1 interface nat (inside) 0 access-list nonat nat (inside) 1 0.0.0.0 0.0.0.0 0 0 conduit permit icmp any any conduit permit tcp any object-group http2 any
timeout h323 0:05:00 mgcp 0:05:00 si p 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute aaa-server TACACS+ protocol tacacs+ aaa-server RADIUS protocol radius aaa-server LOCAL protocol local http server enable http 168.98.0.250 255.255.255.255 inside no snmp-server location no snmp-server contact snmp-server community public no snmp-server enable traps floodguard enable crypto ipsec transform-set router-se t esp-des esp-md5-hmac
crypto dynamic-map c isco 1 set transform-set rou ter-set
! crypto map pix 10 ipsec-isakmp set peer a.b.c.d set transform-set pix-set match address 101 ! ! ! ! ! ! ! interface FastEthernet0/0 no ip address duplex auto speed auto pppoe enable pppoe-client dial-pool-number 1 ! interface FastEthernet0/1 ip address 168.98.1.254 255.255.255.0 ip nat inside ip tcp adjust-mss 1450 duplex auto speed auto ! interface Dialer1 ip address negotiated ip mtu 1492 ip nat outside encapsulation ppp dialer pool 1 dialer-group 1 ppp pap sent-username ddd password 0 ddd crypto map pix ! ip nat inside source route-map nonat interface D ialer1 overload
ip classless ip route 0.0.0.0 0.0.0.0 Dialer1 ! no ip http server no ip http secure-server ! ! access-list 101 permit ip 168.98.1.0 0.0.0.255 168.98.0.0 0.0.0.255
access-list 110 deny ip 168.98.1.0 0.0.0.255 168 .98.0.0 0.0.0.255
access-list 110 permit ip 168.98.1.0 0.0.0.255 any
! route-map nonat permit 10 match ip address 110 ! ! ! control-plane ! ! ! ! ! ! ! ! ! line con 0 line aux 0 line vty 0 4 password cisco login ! ! ! end
這是一個site to site 的vpn的實現，很多中國的企業，也在用軟件的方式來實現這些功能，同時也支持移動用戶的方式。
