! Cisco Fast Step Template
!
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname <ROUTERNAME, "Router Name", String, "General Settings">
!
logging buffered 4096 debugging
!
clock timezone NZST 12
clock summer-time NZDT recurring 1 Sun Oct 2:00 3 Sun Mar 3:00
!
ip subnet-zero
ip dhcp excluded-address <ROUTERIP,"Router IP e,g. 192.168.1.254",IPAddress,"IP Settings">
!
ip dhcp pool dhcppool
   import all
   network <NETWORK,"Network e,g. 192.168.1.0",IPAddress,"IP Settings"> <NETMASK,"Netmask",IPAddress,"IP Settings">
   default-router <ROUTERIP>
!
crypto isakmp policy 1
 authentication pre-share
crypto isakmp key <VPNKEY,"Preshared Key",String,"IPSec"> address <VPNEND,"VPN Endpoint IP",IPAddress,"IPSec">
!
crypto ipsec transform-set cm-transformset-1 esp-des esp-sha-hmac 
!
crypto map cm-cryptomap 1 ipsec-isakmp   
 set peer <VPNEND>
 set transform-set cm-transformset-1 
 match address 110
!
!
interface Ethernet0
 ip address <ROUTERIP> <NETMASK>
 ip nat inside
 no ip directed-broadcast
 exit
!
interface ATM0
 no ip address
 no atm ilmi-keepalive
 dsl operating-mode auto
 exit
!
interface ATM0.1 point-to-point
 pvc 0/100
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
 exit
!
interface Dialer0
 bandwidth 640
 ip address negotiated
 no ip redirects
 no ip unreachables
 ip nat outside
 encapsulation ppp
 no ip route-cache
 no ip mroute-cache
 dialer pool 1
 dialer-group 1
 ppp reliable-link
 ppp pap sent-username <USERNAME, "ISP Username", String, "General Settings"> password <PASSWORD, "ISP Password", String, "General Settings">
 ppp ipcp dns request
 crypto map cm-cryptomap
 no cdp enable
 exit
!
ip nat inside source list 105 interface Dialer0 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
no ip http server
!
access-list 105 deny   ip <NETWORK> 0.0.0.255 <VPNNET,"Destination VPN Network e,g. 192.168.2.0",IPAddress,"IPSec"> 0.0.0.255
access-list 105 permit ip <NETWORK> 0.0.0.255 any
access-list 110 permit ip <NETWORK> 0.0.0.255 <VPNNET> 0.0.0.255
access-list 110 deny   ip <NETWORK> 0.0.0.255 any
!
banner motd | Orignal config (c)IFM Ltd sales@ifm.net.nz, prepared by <RESELLER,"Reseller Name",String,"General Settings">/<YOUREMAIL,"Your e-mail",String,"General Settings"> |
!
line vty 0 4
  access-list 1 in
exit
!
access-list 1 permit <NETWORK> 0.0.0.255
dialer-list 1 protocol ip permit
!
!
interface Ethernet0
 no shutdown
 exit
interface ATM0
 no shutdown
 exit
!
end