Re: [fw-wiz] Need help configuring client-side VPN to Cisco 2801

Paul Melson (pmelson@xxxxxxxxx) had this to say on 02/16/07 at 11:50:
crypto isakmp client configuration group VPN3000
key ******
dns 192.168.1.9 192.168.1.241
wins 192.168.1.39
domain mycompany.com
pool contrib
!

ip local pool contrib 172.16.1.1 172.16.1.255 crypto map VPN 999
ipsec-isakmp dynamic DYNAMICMAP

Should be:

crypto isakmp client configuration group VPN3000
key ******
acl 120
dns 192.168.1.9 192.168.1.241
wins 192.168.1.39
domain mycompany.com
pool contrib
!

ip local pool contrib 172.16.1.1 172.16.1.255 crypto map VPN 999
ipsec-isakmp dynamic DYNAMICMAP
access-list 100 permit ip 172.16.1.0 0.0.0.255 192.168.1.0 0.0.0.255
access-list 120 permit ip 192.168.1.0 0.0.0.255 any

Thanks; I will try that. The boss says no changes allowed during working
hours (M-Sat, 7-7), so it may be a little bit until I can test this.
_______________________________________________
firewall-wizards mailing list
firewall-wizards@xxxxxxxxxxxxxxxxxxxxx
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards