Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Cisco VPN config question

Status
Not open for further replies.

mattmc97

IS-IT--Management
Dec 4, 2003
51
US
hello all.

I am trying to setup a win2k server as vpn server behind a cisco 2611 router to connect a satellite office to our main office.

I have found some info on how to set up access lists and such but I have hit a wall.

Currently what I have so far:

interface Ethernet0/0
description connected to EthernetLAN
ip address 192.168.208.30 255.255.255.0
no ip directed-broadcast
ip nat inside
!
interface Ethernet0/1
description connected to Internet
ip address 64.217.xxx.86 255.255.255.252
ip access-group inet_inbound in (--- I added correct ???)
no ip directed-broadcast
ip nat outside

ip access-list extended inet_inbound
deny ip 10.0.0.0 0.255.255.255 any
deny ip 172.16.0.0 0.15.255.255 any
deny ip 192.168.0.0 0.0.255.255 any
permit tcp any host 64.217.xxx.86 eq 1723
permit gre any host 64.217.xxx.86

**************************

Both examples I have show:

interface Serial0/0
description internet interface
ip address 64.217.xxx.xxx 255.255.255.252
ip access-group inet_inbound in

BUT when I try to type "interface Serial0/0" at the router config prompt, it gives me an error pointing to the 'S' in serial, so should I add the ip access-group line to my Internet 0/1 like I did above since that is my internet connection????

thanks in advance.

mattmc
 
Sorry about the confussion mate... for some reason I missed the DSL part on your previous post. In your case Serial0/0 should be ethernet0/1

Check my latest reply to your previous post and again Serial0/0 should be Ehternet0/1

Cheers!
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top