Hello,
Did you try to use the config like:
crypto isakmp policy 1
hash md5
authentication pre-share
crypto isakmp key cisco123 address 0.0.0.0
crypto isakmp client configuration address-pool local ourpool
crypto ipsec transform-set trans1 esp-des esp-md5-hmac
!
crypto dynamic-map dynmap 10
set transform-set trans1
!
crypto map intmap client configuration address initiate
crypto map intmap client configuration address respond
crypto map intmap 10 ipsec-isakmp dynamic dynmap
!
interface Serial1
ip address 201.70.32.101 255.255.255.0
no ip directed-broadcast
ip nat outside
no ip route-cache
no ip mroute-cache
crypto map intmap
!
interface Ethernet0
ip address 10.2.2.1 255.255.255.0
no ip directed-broadcast
ip nat inside
!
ip local pool ourpool 10.2.1.1 10.2.1.254
ip nat pool outsidepool 201.70.32.150 201.70.32.160 netmask 255.255.255.0
ip nat inside source route-map nonat pool outsidepool
ip route 0.0.0.0 0.0.0.0 201.70.32.1
access-list 101 permit ip 10.2.1.0 0.0.0.255 any
route-map nonat permit 10
match ip address 101
end
You have to adjust it to your interfaces and IP addresses. I cut out all unneeded parts and found a slight mistake I (hopefully) corrected.
Hope this helps! PLease rate all posts
Regards, Martin
