Login Form






Lost Password?
No account yet? Register

Last comments

Linux Password Recovery
Thank Reza Behroozi :)
24/05/08 05:59 More...
By Tran Quoc HUy

How to run Cisco SDM virually
Nice share thanks very much
29/03/08 02:47 More...
By peter

Configure Cisco GRE tunnel
That's great.But is it possible to have that connection with...
25/02/08 22:59 More...
By armir

Config Cisco Routers for Call ...
Its really a nice one, but unfortunately its not recommended...
10/01/08 15:02 More...
By syed

Configure Cisco GRE tunnel
PCBrazil
This site is excellent!!!
03/12/07 19:55 More...
By paulo coelho

Syndicate

Home arrow Cisco arrow Config cisco routers such as a VPN server
Config cisco routers such as a VPN server Print E-mail
Tag it:
Delicious
Furl it!
Spurl
NewsVine
Reddit
YahooMyWeb
Technorati
Digg
YahooMyWeb
Written by Reza Behroozi   
Monday, 23 July 2007
 
mirror links
 
click on read more for rest of article
 
Step by step configuration :
 
PersianAdmins.com(config)# vpdn enable

Create a VPDN group configured to PPTP, just like the Microsoft VPN client will use, by default:

PersianAdmins.com(config)# vpdn-group reza

PersianAdmins.com(config-vpdn)# accept-dialin

PersianAdmins.com(config-vpdn)# protocol pptp

PersianAdmins.com(config-vpdn)# virtual-template 1

PersianAdmins.com(config-vpdn)# exit

Here, we will configure our interfaces to match the diagram. Naturally, your IP address configuration will vary:

PersianAdmins.com(config)# interface ethernet0/0

PersianAdmins.com(config-if)# ip address 192.168.0.5 255.255.255.0

PersianAdmins.com(config-if)# no shutdown

Next, create your virtual-template that will apply to the inbound VPN connections. This template references the e0/0 interface for its IP address. It also references a pool of IP addresses that will be handed out to VPN clients. Finally, it configures the PPP encryption and authentication mechanisms to match what the Microsoft VPN client defaults to:

PersianAdmins.com(config)# interface Virtual-Template1

PersianAdmins.com(config-if)# ip unnumbered ethernet0/0

PersianAdmins.com(config-if)# peer default ip address pool behroozi

PersianAdmins.com(config-if)# ppp encrypt mppe auto required

PersianAdmins.com(config-if)# ppp authentication ms-chap ms-chap-v2

Now, create the pool of IP addresses. This pool should not already be in use on the internal network you are connecting to:

Router(config)# ip local pool behroozi 10.0.0.1 10.0.0.100

After that, create a test user:

Router(config)# username test password 0 rezabehroozi
 
 
 
 
 
Lab for dynamips :
[localhost]
     [[ROUTER R1]]
        image = \Program Files\Dynamips\images\c7200-advipservicesk9-mz.124-4.T1.bin
        ram = 160
        model = 7200
        F0/0 = NIO_gen_eth:\Device\NPF_{45BB7A21-B13A-45BC-AC74-27F694FC0AC7}
    
 
 
 
Client Configuraion: 
click Start | Control Panel | Network Connections. Click on New Connection Wizard
 
then
pic 1


pic 2


pic 3



pic 4


pic 5


pic 6


pic 7


pic 8


pic 9


pic 10

Add as favourites (129) | Quote this article on your site | Views: 6773 | E-mail

Comments (8)
RSS comments
1. 23-07-2007 19:48
how does this apply in the real world if I want to use this type of service on a company router 
 
Reza behroozi: 
it's really simple just follow tutorial!! ..but cisco is not a good choice for huge vpn server.
Guest
JJ
2. 23-07-2007 19:50
If I want to connect from the house to the company router do I need a public ip address in order to do it? Because from your demonstration, the fastethernet ip address was a private ip address 
 
Reza Behroozi: 
yes,you need public ip address. 
i use private ip address because i want it for my private lan....you can use it with public address just open pptp port on firewall.
Guest
Tom
3. 26-07-2007 00:08
As Reza said cisco is not choice for huge VPN server. 
 
Which Solution do we need to use for the huge VPN server? 
 
Prem 
 
 
Reza Behroozi 
I recommend linux or microsft....I have some good article for it and put on site comming soon.
Guest
This e-mail address is being protected from spam bots, you need JavaScript enabled to view it
4. 30-07-2007 12:15
very good site
Guest
This e-mail address is being protected from spam bots, you need JavaScript enabled to view it
5. 04-08-2007 10:30
Cisco recommends using VPN Concentrator series of products for Enterprise level remote VPN Connectivity.
Guest
This e-mail address is being protected from spam bots, you need JavaScript enabled to view it
6. 06-08-2007 12:56
cisco vpn
yap
Guest
This e-mail address is being protected from spam bots, you need JavaScript enabled to view it
7. 19-09-2007 06:46
cisco vpn
How can i make sure that i will be able to access other network resources when i have connected to the VPN? :roll 
 
Reza Behroozi : 
just setting routing
Registered
Simon
8. 21-09-2007 18:41
cisco vpn
Hi, 
 
Is there a way you can review my config plzz :grin  
 
do i have i route anything coming from public ip to the gateway? 
 
Thanks heaps
Registered
This e-mail address is being protected from spam bots, you need JavaScript enabled to view it

Only registered users can write comments.
Please login or register.

Powered by AkoComment Tweaked Special Edition v.1.4.6
AkoComment © Copyright 2004 by Arthur Konze - www.mamboportal.com
All right reserved

Last Updated ( Monday, 23 July 2007 )
 
< Prev   Next >