ru.cisco

 
 - RU.CISCO ---------------------------------------------------------------------
 From : ѓ®«®ўЁ­ „¬ЁваЁ©                      2:5020/400     15 Jun 2005  11:19:10
 To : All
 Subject : PIX &  PPTP
 -------------------------------------------------------------------------------- 
 

   Hастроил PPTP сервер на PIX
 access-list acl_out permit icmp any any
 
 access-list acl_out permit ip 10.71.3.0 255.255.255.192 10.71.1.0
 255.255.255.0
 
 access-list acl_dmz permit icmp any any
 access-list pptp_list permit ip any 10.71.3.0 255.255.255.192
 access-list acl_ins permit icmp any any
 
 access-list acl_ins permit ip 10.71.1.0 255.255.255.0 10.71.3.0
 255.255.255.192
 access-list acl_ins deny ip any any
 
 ip address outside 217.170.ххх.ххх 255.255.255.252
 ip address inside 10.71.1.253 255.255.255.0
 ip address dmz 172.16.1.1 255.255.255.0
 
 ip local pool pptp_pool 10.71.3.1-10.71.3.62 mask 255.255.255.192
 
 global (outside) 1 interface
 global (dmz) 1 interface
 nat (inside) 0 access-list pptp_list
 nat (inside) 1 0.0.0.0 0.0.0.0 0 0
 nat (dmz) 1 0.0.0.0 0.0.0.0 0 0
 access-group acl_out in interface outside
 access-group acl_ins in interface inside
 access-group acl_dmz in interface dmz
 
 route outside 0.0.0.0 0.0.0.0 217.170.ххх.ххх 1
 
 aaa-server TACACS+ protocol tacacs+
 aaa-server RADIUS protocol radius
 aaa-server LOCAL protocol local
 
 sysopt connection permit-pptp
 vpdn group mega accept dialin pptp
 vpdn group mega ppp authentication pap
 vpdn group mega ppp authentication chap
 vpdn group mega ppp authentication mschap
 vpdn group mega client configuration address local pptp_pool
 vpdn group mega client configuration dns 10.71.1.245
 vpdn group mega client configuration wins 10.71.1.245
 vpdn group mega pptp echo 60
 vpdn group mega client authentication local
 vpdn username test password *********
 vpdn enable outside
 
 Подскажите, а как организовать доступ во внутреннюю сеть клиентам PPTP?
 -- 
 Отправлено через сервер Форумы@mail.ru - http://talk.mail.ru
 --- ifmail v.2.15dev5.3
  * Origin: Talk.Mail.Ru (2:5020/400)
 
 

Вернуться к списку тем, сортированных по: возрастание даты  уменьшение даты  тема  автор