!
! Century Systems NXR-G100 Series ver 6.4.3 (build 11/12:47 17 10 2014)
! DIP-SW : 1:off 2:off 3:off 4:off
!
hostname NXR_A
telnet-server enable
http-server enable
!
!
system power-management mode balance
!
!
!
ipv6 forwarding
fast-forwarding enable
!
!
!
!
!
ipsec local policy 1
address ip
!
!
ipsec isakmp policy 1
description NXR_B
authentication pre-share ipseckey
keepalive 30 3 periodic clear
hash sha256
encryption aes128
group 5
isakmp-mode aggressive
remote address ip any
remote identity fqdn nxrb
local policy 1
!
!
ipsec tunnel policy 1
description NXR_B
negotiation-mode responder
set transform esp-aes128 esp-sha256-hmac
set pfs group5
set key-exchange isakmp 1
match address ipsec_acl
!
!
interface tunnel 1
no ip address
ip tcp adjust-mss auto
tunnel mode ipsec ipv4
tunnel protection ipsec policy 1
!
interface ppp 0
ip address 10.10.10.1/32
no ip redirects
ip tcp adjust-mss auto
ip access-group in ppp0_in
ip masquerade
ip spi-filter
ppp username test1@example.jp password test1pass
ipsec policy 1
!
interface ethernet 0
ip address 192.168.10.1/24
!
interface ethernet 1
no ip address
pppoe-client ppp 0
!
dns
service enable
!
syslog
local enable
!
!
!
!
!
!
!
!
!
wol name PC ip 192.168.20.255 00:80:6D:XX:XX:XX
!
ip route 192.168.20.0/24 tunnel 1
ip route 192.168.20.0/24 null 254
ip route 0.0.0.0/0 ppp 0
!
ip access-list ppp0_in permit any 10.10.10.1 udp 500 500
ip access-list ppp0_in permit any 10.10.10.1 50
!
ipsec access-list ipsec_acl ip any any
!
!
end