Paul Melson (pmelson@gmail.com) had this to say on 02/16/07 at 11:50:
> > crypto isakmp client configuration group VPN3000
> > key ******
> > dns 192.168.1.9 192.168.1.241
> > wins 192.168.1.39
> > domain mycompany.com
> > pool contrib
> > !
> >
> > ip local pool contrib 172.16.1.1 172.16.1.255 crypto map VPN 999
> ipsec-isakmp dynamic DYNAMICMAP
>
> Should be:
>
> crypto isakmp client configuration group VPN3000
> key ******
> acl 120
> dns 192.168.1.9 192.168.1.241
> wins 192.168.1.39
> domain mycompany.com
> pool contrib
> !
>
> ip local pool contrib 172.16.1.1 172.16.1.255 crypto map VPN 999
> ipsec-isakmp dynamic DYNAMICMAP
> access-list 100 permit ip 172.16.1.0 0.0.0.255 192.168.1.0 0.0.0.255
> access-list 120 permit ip 192.168.1.0 0.0.0.255 any
Thanks; I will try that. The boss says no changes allowed during working
hours (M-Sat, 7-7), so it may be a little bit until I can test this.
_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
|