Исходное сообщение
"Доступ по VPN в LAN через Cisco 2811 help" Отправлено Shutov, 05-Сен-08 12:09
//включаем NAT-T crypto ipsec nat-transparency udp-encapsulation //Dead peer detection crypto isakmp keepalive 20 10 aaa authentication login VpnClientAuth local aaa authorization network VpnClientAuthor local ip local pool VpnClientPool 10.40.254.1 10.40.254.254 crypto isakmp policy 199 encr aes authentication pre-share group 2 crypto isakmp client configuration group sgbeasyvpn key 1993199319 dns 192.168.5.6 wins 192.168.5.6 pool VpnClientPool acl VpnClientSplitTunneling crypto ipsec transform-set VpnClientSet esp-aes esp-md5-hmac crypto dynamic-map VpnClientDynmap 10 set transform-set VpnClientSet reverse-route crypto map inetmap client authentication list VpnClientAuth crypto map inetmap client configuration address respond crypto map inetmap isakmp authorization list VpnClientAuthor crypto map inetmap 99 ipsec-isakmp dynamic VpnClientDynmap //Split tunneling ip access-list extended VpnClientSplitTunneling permit ip 192.168.5.0 0.0.0.255 10.40.254.0 0.0.0.255 permit ip 192.168.3.0 0.0.0.255 10.40.254.0 0.0.0.255 //Если по Radius aaa group server radius VpnClientRad server 94.86.51.6 auth-port 1645 acct-port 1646 radius-server host 94.86.51.6 auth-port 1645 acct-port 1646 key cisco aaa authentication login VpnClientAuth group VpnClientRad interface FastEthernet0/0 description DIT encapsulation dot1Q 3 ip address x.x.x.x 255.255.255.192 crypto map inetmap !