Cisco 1710 Software Configuration Manual page 48

Complete Sample Configuration
!
crypto map tag local-address Ethernet0
crypto map tag 10 ipsec-isakmp
set peer 16.0.0.2
set security-association level per-host
set transform-set proposal1
set pfs group2
match address 100
!
interface Dialer0
ip unnumbered Ethernet0
no ip route-cache
encapsulation ppp
ip mtu 1492
dialer pool 1
dialer-group 1
ip nat outside
ip inspect fw_all in
ip access-group 102 in
crypto map tag
!
interface FastEthernet0
ip address 192.168.1.1 255.255.255.0
ip nat inside
!
interface Ethernet0
ip address 24.19.216.150 255.255.255.0
pppoe enable
pppoe-client dial-pool-number 1
crypto map tag
!
dialer-list 1 protocol ip permit
!
access-list 100 permit 192.168.1.0 0.255.255.255
!
ip nat inside source list homenet interface Ethernet0 overload
ip nat outside source static 24.19.216.129 192.168.1.5
!
ip access-list extended homenet
permit ip 192.168.1.0 0.255.255.255 any
!
access-list 102 deny
access-list 102 permit esp any any
access-list 102 permit ahp any any
access-list 102 permit udp any eq isakmp any eq isakmp
access-list 102 deny
access-list 102 permit ip any any
access-list 102 permit icmp any any
Cisco 1710 Security Router Software Configuration Guide
2-18
Chapter 2 Cisco 1710 Security Router Configuration
tcp any any
udp any any
78-12696-01