Исходное сообщение
"EasyVPN, клиенты с 'серыми' ip" Отправлено Незнайка, 20-Апр-08 01:48
version 12.4 no service pad service timestamps debug datetime localtime service timestamps log datetime localtime no service password-encryption service internal ! hostname gate ! boot-start-marker boot-end-marker ! logging buffered 4096 ! aaa new-model ! ! aaa authentication login userauthen local aaa authorization exec default local aaa authorization network vpngroup local ! ! aaa session-id common memory-size iomem 15 clock timezone GMT+3 3 clock summer-time GMT+3 recurring last Sun Mar 2:00 last Sun Oct 3:00 no ip source-route ! ! ip cef ! ! no ip bootp server ip domain name domain.ru ! multilink bundle-name authenticated ! ! crypto isakmp policy 3 encr 3des authentication pre-share group 2 ! crypto isakmp client configuration group vpngroup key xxxxxxxxxxxx dns xxx.xxx.xxx.xxx domain domain.ru pool dynpool ! ! crypto ipsec transform-set myset esp-3des esp-md5-hmac ! crypto dynamic-map dynmap 10 set transform-set myset reverse-route ! ! crypto map clientmap client authentication list userauthen crypto map clientmap isakmp authorization list vpngroup crypto map clientmap client configuration address respond crypto map clientmap 10 ipsec-isakmp dynamic dynmap ! ! ! ! archive log config   hidekeys ! ! interface FastEthernet0/0 description connected to LAN ip address 192.168.0.1 255.255.255.0 ip access-group LAN_Firewall in ip flow ingress ip flow egress ip nat inside no ip virtual-reassembly duplex auto speed auto no cdp enable ! interface FastEthernet0/1 description connected to INTERNET ip address yyy.yyy.yyy.yyy 255.255.255.128 secondary ip address xxx.xxx.xxx.xxx 255.255.255.128 ip access-group Inet_Firewall in ip nat outside ip virtual-reassembly duplex auto speed auto no cdp enable crypto map clientmap ! ip local pool dynpool 192.168.0.231 192.168.0.240 ip route 0.0.0.0 0.0.0.0 xxx.xxx.xxx.xxx ! ip flow-cache timeout inactive 60 ip flow-cache timeout active 10 ip flow-export version 5 ! no ip http server no ip http secure-server ip nat inside source list 1 interface FastEthernet0/1 overload ! ip access-list extended Inet_Firewall remark internalPorts remark Log_SSH_connections permit tcp any any eq 22 log-input remark allowALL permit ip any any ip access-list extended LAN_Firewall remark FullAccess permit tcp host 192.168.0.6 any remark allowAllUsers permit icmp 192.168.0.0 0.0.255.255 any remark adminRules permit tcp host 192.168.0.100 192.168.0.0 0.0.0.255 ! access-list 1 permit 192.168.0.100 access-list 1 permit 192.168.0.75 access-list 1 permit 192.168.0.6 no cdp run ! ! ! control-plane ! ! gatekeeper shutdown ! ! line con 0 logging synchronous line aux 0 line vty 0 4 logging synchronous login authentication userauthen transport input ssh ! scheduler allocate 20000 1000 ! webvpn cef ! end

Ваше сообщение
Имя*:
EMail:	Для отправки новых сообщений в текущей нити на email укажите знак ! перед адресом, например, !user@host.ru (!! - не показывать email). Более тонкая настройка отправки ответов производится в профиле зарегистрированного участника форума.
Заголовок*:
Сообщение*:	> version 12.4 > no service pad > service timestamps debug datetime localtime > service timestamps log datetime localtime > no service password-encryption > service internal > ! > hostname gate > ! > boot-start-marker > boot-end-marker > ! > logging buffered 4096 > ! > aaa new-model > ! > ! > aaa authentication login userauthen local > aaa authorization exec default local > aaa authorization network vpngroup local > ! > ! > aaa session-id common > memory-size iomem 15 > clock timezone GMT+3 3 > clock summer-time GMT+3 recurring last Sun Mar 2:00 last Sun Oct 3:00 > no ip source-route > ! > ! > ip cef > ! > ! > no ip bootp server > ip domain name domain.ru > ! > multilink bundle-name authenticated > ! > ! > crypto isakmp policy 3 > encr 3des > authentication pre-share > group 2 > ! > crypto isakmp client configuration group vpngroup > key xxxxxxxxxxxx > dns xxx.xxx.xxx.xxx > domain domain.ru > pool dynpool > ! > ! > crypto ipsec transform-set myset esp-3des esp-md5-hmac > ! > crypto dynamic-map dynmap 10 > set transform-set myset > reverse-route > ! > ! > crypto map clientmap client authentication list userauthen > crypto map clientmap isakmp authorization list vpngroup > crypto map clientmap client configuration address respond > crypto map clientmap 10 ipsec-isakmp dynamic dynmap > ! > ! > ! > ! > archive > log config > hidekeys > ! > ! > interface FastEthernet0/0 > description connected to LAN > ip address 192.168.0.1 255.255.255.0 > ip access-group LAN_Firewall in > ip flow ingress > ip flow egress > ip nat inside > no ip virtual-reassembly > duplex auto > speed auto > no cdp enable > ! > interface FastEthernet0/1 > description connected to INTERNET > ip address yyy.yyy.yyy.yyy 255.255.255.128 secondary > ip address xxx.xxx.xxx.xxx 255.255.255.128 > ip access-group Inet_Firewall in > ip nat outside > ip virtual-reassembly > duplex auto > speed auto > no cdp enable > crypto map clientmap > ! > ip local pool dynpool 192.168.0.231 192.168.0.240 > ip route 0.0.0.0 0.0.0.0 xxx.xxx.xxx.xxx > ! > ip flow-cache timeout inactive 60 > ip flow-cache timeout active 10 > ip flow-export version 5 > ! > no ip http server > no ip http secure-server > ip nat inside source list 1 interface FastEthernet0/1 overload > ! > ip access-list extended Inet_Firewall > remark internalPorts > remark Log_SSH_connections > permit tcp any any eq 22 log-input > remark allowALL > permit ip any any > ip access-list extended LAN_Firewall > remark FullAccess > permit tcp host 192.168.0.6 any > remark allowAllUsers > permit icmp 192.168.0.0 0.0.255.255 any > remark adminRules > permit tcp host 192.168.0.100 192.168.0.0 0.0.0.255 > ! > access-list 1 permit 192.168.0.100 > access-list 1 permit 192.168.0.75 > access-list 1 permit 192.168.0.6 > no cdp run > ! > ! > ! > control-plane > ! > ! > gatekeeper > shutdown > ! > ! > line con 0 > logging synchronous > line aux 0 > line vty 0 4 > logging synchronous > login authentication userauthen > transport input ssh > ! > scheduler allocate 20000 1000 > ! > webvpn cef > ! > end
	Введите код, изображенный на картинке: