I configure a cisco 871 with easy vpn remote and ASA 550 as the server. The vpn tunnel goes up but i have un little problem if i put this line :
ip nat inside source list 110 interface Dialer0 overload on cisco 871, my internet work but i don't ping the server 192.168.125.100 on the ASA.
If i put this line: ip nat inside source list 110 interface vlan1 overload on cisco 871, I ping the server 192.168.125.100 on the ASA but my internet does not work.
This is my configuration on my cisco 871 that work with internet but don't ping the server on 192.168.125.100 on the ASA 5500.
sh conf
Using 3497 out of 131072 bytes
!
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname cisco871
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 debugging
logging console critical
enable secret 5 $1$cXBu$CvV.RrsqJCQXxfsBUF
0DQ0
!
no aaa new-model
!
resource policy
!
clock timezone PCTime -5
clock summer-time PCTime date Apr 6 2003 2:00 Oct 26 2003 2:00
ip subnet-zero
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.254.1 192.168.254.110
ip dhcp excluded-address 192.168.254.200 192.168.254.254
!
ip dhcp pool sdm-pool1
import all
network 192.168.254.0 255.255.255.0
dns-server 206.47.244.79 206.47.244.43
default-router 192.168.254.253
!
!
ip tcp synwait-time 10
no ip bootp server
ip domain name yourdomain.com
ip name-server 206.47.244.79
ip name-server 206.47.244.43
ip ssh time-out 60
ip ssh authentication-retries 2
!
!
crypto pki trustpoint TP-self-signed-1604351168
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certifi
cate-16043
51168
revocation-check none
rsakeypair TP-self-signed-1604351168
!
!
crypto pki certificate chain TP-self-signed-1604351168
certificate self-signed 01 nvram:IOS-Self-Sig#3802.ce
r
username icc privilege 15 secret 5 $1$obvG$VVP.bb.5F7kjXgG/ky
1Bt0
!
!
!
!
!
!
!
crypto ipsec client ezvpn ASA
connect auto
group VPNTunnel key cisco
mode network-extension
peer 198.232.143.78
idletime 86400
username cisco871 password cisco
xauth userid mode local
!
!
bridge irb
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
description $ES_WAN$$FW_OUTSIDE$
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
duplex auto
speed auto
pppoe enable
pppoe-client dial-pool-number 1
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-
HWIC 4ESW$$ES_LAN$$FW_INSIDE$
ip address 192.168.254.253 255.255.255.0
ip access-group 100 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
ip route-cache flow
ip tcp adjust-mss 1412
crypto ipsec client ezvpn ASA inside
!
interface Dialer0
ip address negotiated
no ip redirects
no ip unreachables
no ip proxy-arp
ip mtu 1452
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip route-cache flow
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication pap callin
ppp pap sent-username b3peds92 password 7 1056514D521B40590F
crypto ipsec client ezvpn ASA
!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 110 interface Dialer0 overload
!
logging trap debugging
access-list 100 permit ip any any
access-list 110 permit ip 192.168.254.0 0.0.0.255 any
dialer-list 1 protocol ip permit
no cdp run
!
!
control-plane
!
banner login ^CAuthorized access only!
Disconnect IMMEDIATELY if you are not an authorized user!^C
!
line con 0
login local
no modem enable
transport output telnet
line aux 0
login local
transport output telnet
line vty 0 4
privilege level 15
login local
transport input telnet ssh
!
scheduler max-task-time 5000
scheduler allocate 4000 1000
scheduler interval 500
end
cisco871#
Thank's in advance Dave
Start Free Trial
