VPN mit cisco 1841

[Ciscler]

Hallo,

bin gerade dabei mir eine VPN verbindung mit einen 1841 Cisco Router einzurichten. Hat jemand links wo beschrieben wird wie man dies einrichtet? Möchte mir eine sogenannte roadwarrior verbindung einrichten so dass ich mich mit meinen laptop per cisco vpn client einwählen kann. Könnte mir jemand eine Beispiel config posten damit ich einen ansatz habe?




Anbei meine config:
protocol pppoe
ip mtu adjust
!
!
no ftp-server write-enable
!
!
!
!
!
!
crypto isakmp policy 5
encr aes 256
authentication pre-share
group 2
no crypto isakmp ccm
!
crypto isakmp client configuration group vpnclient
key xxxxxxxxxx
pool clientpool
acl split
crypto isakmp profile vpnclient
match identity group vpnclient
client authentication list authent
isakmp authorization list autho
client configuration address initiate
client configuration address respond
!
!
crypto ipsec transform-set Rohlmann esp-aes 256 esp-sha-hmac
!
crypto dynamic-map dynmap 10
set transform-set Rohlmann
!
!
crypto map clientmap 10 ipsec-isakmp dynamic dynmap
!
!
!
interface Loopback1
ip address 192.168.2.1 255.255.255.0
ip nat outside
ip virtual-reassembly
!
interface FastEthernet0/0
description T-dsl
no ip address
no ip proxy-arp
ip route-cache flow
duplex auto
speed auto
pppoe enable
pppoe-client dial-pool-number 1
fair-queue
!
interface FastEthernet0/1
description LAN
ip address 192.168.0.253 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/0/0
!
interface FastEthernet0/0/1
!
interface FastEthernet0/0/2
!
interface FastEthernet0/0/3
!
interface Vlan1
no ip address
!
interface Dialer1
description WAN
bandwidth 2048
ip address negotiated
ip access-group 101 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip mtu 1492
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip route-cache flow
ip tcp adjust-mss 1452
no ip mroute-cache
dialer pool 1
dialer idle-timeout 0
dialer persistent
dialer-group 1
fair-queue
no cdp enable
ppp authentication chap callin
ppp chap hostname xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx@t-online.de
ppp chap password xxxxxxxxxxxxxxxxxxxxxxxxx

[Ciscler]

ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface Dialer1 overload
ip nat inside source list 2 interface Dialer1 overload
ip nat inside source list 3 interface Dialer1 overload
ip nat inside source list 101 interface Dialer1 overload
ip nat inside source static udp 192.168.0.1 21 interface Dialer1 21
ip nat inside source static udp 192.168.0.1 20 interface Dialer1 20
ip nat inside source static tcp 192.168.0.1 20 interface Dialer1 20
ip nat inside source static tcp 192.168.0.1 21 interface Dialer1 21
ip dns server
!
ip access-list extended outside
permit icmp any any
permit udp any any eq isakmp
permit esp any any
ip access-list extended split
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 1 permit 192.168.0.0 0.0.0.255
access-list 2 permit 192.168.0.0 0.0.0.255
access-list 3 permit 0.0.0.0 255.255.255.0
access-list 101 permit tcp any any established
access-list 101 permit udp any eq domain any
access-list 101 permit icmp any any echo
access-list 101 permit icmp any any echo-reply
access-list 101 permit icmp any any packet-too-big
access-list 101 permit icmp any any source-quench
access-list 101 permit icmp any any time-exceeded
access-list 101 permit tcp any any eq ftp-data
access-list 101 permit tcp any any eq ftp
access-list 101 permit tcp 0.0.0.1 255.255.255.0 any eq ftp
access-list 101 permit tcp 0.0.0.1 255.255.255.0 any eq ftp-data
access-list 101 deny tcp any any eq telnet
dialer-list 1 protocol ip permit
snmp-server community public RO
snmp-server enable traps tty
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
login
!
end

[Ciscler]

Hat irgendwer ne Beispiel Config für sowas ?

[Wordo]

Du musst die crypto map noch ans Dialer1 binden, dann sollte es eigentlich gehen (mit dem Schnippsel vom anderen Post von mir).

conf t
int dialer1
crypto map blabla