1 Exemplo - Configurando Vpn Cisco 1841 1s315n

Configurando VPN cisco 1841

Segue a config do router (estah sem seriais, apenas com uma interface WIC1ADSL , para uso com adsl residencial . O ios rodando no mesmo eh o c1841-advipservicesk9-mz.124-17.bin Aceita VPN e tem vpn module. -------------------------------------------------------------------------------------boot-start-marker boot-end-marker ! logging message-counter syslog logging info logging buffered 10000 informational no logging console enable secret 5 $1$WAZT$7exqB2MYlu8rUzYiCJAug. ! aaa new-model ! aaa authentication -prompt Digite_Sua_SENHA: aaa authentication name-prompt Digite_Seu_NAME: aaa authentication default local aaa authorization exec default local ! no ip dh use vrf connected ip dh binding cleanup interval 10 ip dh excluded-address 192.168.1.2 ip dh excluded-address 192.168.1.14 ! ip dh pool NAO_CADASTRADOS network 192.168.1.0 255.255.255.240 default-router 192.168.1.1 dns-server 201.10.1.2 201.10.120.2 lease infinite ! ip dh pool Joester_Note_Partic_Placa_Rede host 192.168.1.3 255.255.255.240 client-identifier 0100.1b24.564e.ac default-router 192.168.1.1 dns-server 201.10.1.2 201.10.120.2 lease infinite ! ip dh pool Joester_Note_Partic_Wireless host 192.168.1.4 255.255.255.240 client-identifier 0100.17c4.059e.71 default-router 192.168.1.1

dns-server 201.10.1.2 201.10.120.2 lease infinite ! ip dh pool Joester_Note_ETE host 192.168.1.5 255.255.255.240 client-identifier 0100.a0d1.db9a.a6 default-router 192.168.1.1 dns-server 201.10.1.2 201.10.120.2 lease infinite ! ip dh pool Mateus_Desktop host 192.168.1.6 255.255.255.240 client-identifier 0100.1fd0.fa58.16 default-router 192.168.1.1 dns-server 201.10.1.2 201.10.120.2 lease infinite ! ip dh pool Marcelo_Desktop host 192.168.1.7 255.255.255.240 client-identifier 0100.064f.746a.8a default-router 192.168.1.1 dns-server 201.10.1.2 201.10.120.2 lease infinite ! ip dh pool Dionatan_Desktop host 192.168.1.8 255.255.255.240 default-router 192.168.1.1 dns-server 201.10.1.2 201.10.120.2 lease infinite ! ip dh pool Humberto_Note host 192.168.1.9 255.255.255.240 client-identifier 0100.2100.2f0f.40 default-router 192.168.1.1 dns-server 201.10.1.2 201.10.120.3 lease infinite ! ! ip cef ip domain name joester.com.br ip name-server 201.10.1.2 ip name-server 201.10.120.3 ip name-server 201.10.120.2 on-failure on-success no ipv6 cef name joester privilege 15 7 08225C4B0B0B11 name mateus privilege 15 7 03095A1F031A32 ! interface ATM0

no ip address logging event subif-link-status no atm ilmi-keepalive dsl operating-mode adsl2+ ! interface ATM0.1 point-to-point pvc 1/32 pppoe-client dial-pool-number 1 ! ! interface fastEthernet 0/0 description -##- rede interna-##ip address 192.168.1.1 255.255.255.240 ip mtu 1492 ip nat inside ip virtual-reassembly ip t adjust-mss 1452 traffic-shape group 110 1536000 1536000 1536000 1000 traffic-shape group 111 1536000 1536000 1536000 1000 traffic-shape group 112 1024000 1024000 1024000 1000 traffic-shape group 113 2048000 2048000 2048000 1000 traffic-shape group 114 512000 512000 512000 1000 traffic-shape group 115 512000 512000 512000 1000 traffic-shape group 116 256000 256000 256000 1000 ! interface Dialer0 description -##-Interface virtual de autenticacao PPPOE-##ip address negotiated ip mtu 1452 ip nat outside ip virtual-reassembly encapsulation ppp dialer pool 1 dialer-group 1 fair-queue 64 64 1 ppp authentication pap callin ppp pap sent-name [email protected] 7 120D1702061919162F ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 Dialer0 name Default_para_BRT ip http server ip http authentication local no ip http secure-server ! ip nat inside source route-map internet_map interface Dialer0 overload ! ip access-list extended SAIDA permit ip any any ! access-list 110 remark -- Controle de banda Joester Placa de rede do note

particular access-list 110 permit ip any host 192.168.1.3 access-list 110 permit ip host 192.168.1.3 any access-list 111 remark Controle de banda Joester Placa wireless do note particular access-list 111 permit ip any host 192.168.1.4 access-list 111 permit ip host 192.168.1.4 any access-list 112 remark Controle de banda Joester Placa de rede do note da ETE access-list 112 permit ip any host 192.168.1.5 access-list 112 permit ip host 192.168.1.5 any access-list 113 remark Controle de banda Mateus Desktop residencial access-list 113 permit ip any host 192.168.1.6 access-list 113 permit ip host 192.168.1.6 any access-list 114 remark Controle de banda Marcelo Desktop residencial access-list 114 permit ip any host 192.168.1.7 access-list 114 permit ip host 192.168.1.7 any access-list 115 remark Controle de banda Dionatan Desktop residencial access-list 115 permit ip any host 192.168.1.8 access-list 115 permit ip host 192.168.1.8 any access-list 116 remark --Controle de banda - Humberto - Notebook access-list 116 permit ip any host 192.168.1.9 access-list 116 permit ip host 192.168.1.9 any dialer-list 1 protocol ip permit snmp-server community public RO ! ! route-map internet_map permit 10 match ip address SAIDA set default interface Dialer0 ! ! control-plane