This is my conf. I can't surf on internet when i'm connected to vpn. Please help me, what's wrong?
uilding configuration...
Current configuration : 5154 bytes
!
! Last configuration change at 13:16:47 UTC Thu Dec 17 2015 by xxxx
version 15.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname xxxx
!
boot-start-marker
boot-end-marker
!
!
logging buffered 51200 warnings
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication login ciscocp_vpn_xauth_ml_1 local
aaa authentication login ciscocp_vpn_xauth_ml_2 local
aaa authorization exec default local
aaa authorization network ciscocp_vpn_group_ml_1 local
aaa authorization network ciscocp_vpn_group_ml_2 local
!
!
!
!
!
aaa session-id common
!
crypto pki trustpoint TP-self-signed-3693382334
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3693382334
revocation-check none
rsakeypair TP-self-signed-3693382334
!
!
crypto pki certificate chain TP-self-signed-3693382334
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33363933 33383233 3334301E 170D3135 30353134 30383239
30365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 36393333
38323333 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
81009609 1203A6FA B9D915BD 06A8F116 5C1DFA57 8F733348 C2380C99 C5966780
BB86399A 015EC2C8 522A5DA5 B82CA974 1655E704 23A3677B 832698BB A5331C81
E386E46E 473392BF 839CADC0 0AADC9FB 2C847966 D30734E9 E3AEBC46 1698E0CF
B8BA2F8D BA062770 39E93499 0D0CDE8D DD942A08 22C42271 E9E42D08 4D58104B
CB590203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
181D6C1F 112EBE90 CD8C250F 0F7867C6 BC4D40E9 48B90407 84114337 1781EAA9
quit
!
!
!
!
!
ip dhcp excluded-address 10.1.1.1
!
ip dhcp pool mydhcp
import all
network 10.1.1.0 255.255.255.0
dns-server 8.8.8.8
default-router 10.1.1.1
!
!
!
ip domain name xxxxx
ip name-server 8.8.8.8
ip cef
no ipv6 cef
!
!
multilink bundle-name authenticated
chat-script hspa-R7 "" "AT!SCACT=1,1" TIMEOUT 60 "OK"
license udi pid C887VAG+7-K9 sn FCZ1920C286
!
!
username xxxx privilege 15 secret 5 $1$DYMi$OIDd8EPfV/z061SYVBrR1/
username xxxx privilege 15 secret 5 $1$LGir$XFIzMQQRvHzg2UE/Ux/zT1
!
!
!
!
!
controller VDSL 0
firmware filename flash:VA_A_38k1_B_38h_24g1.bin
!
controller Cellular 0
!
!
crypto ctcp port 10000
!
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
!
crypto isakmp client configuration group vpntorina
key vincenzo
pool SDM_POOL_2
crypto isakmp profile ciscocp-ike-profile-1
match identity group vpntorina
client authentication list ciscocp_vpn_xauth_ml_2
isakmp authorization list ciscocp_vpn_group_ml_2
client configuration address respond
virtual-template 1
!
!
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
mode tunnel
crypto ipsec transform-set ESP-3DES-SHA1 esp-3des esp-sha-hmac
mode tunnel
!
crypto ipsec profile CiscoCP_Profile1
set transform-set ESP-3DES-SHA1
set isakmp-profile ciscocp-ike-profile-1
!
!
!
!
!
!
!
interface Ethernet0
no ip address
!
interface Ethernet0.835
encapsulation dot1Q 835
ip address <my ip point to point>
ip nat outside
ip virtual-reassembly in
!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface Virtual-Template1 type tunnel
ip unnumbered Ethernet0.835
ip nat inside
ip virtual-reassembly in
tunnel mode ipsec ipv4
tunnel protection ipsec profile CiscoCP_Profile1
!
interface Cellular0
no ip address
encapsulation slip
dialer in-band
dialer string hspa-R7
!
interface Vlan1
description $ETH_LAN$
ip address 10.1.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
!
ip local pool SDM_POOL_2 10.1.1.94 10.1.1.95
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
ip nat inside source list 1 interface Ethernet0.835 overload
ip route 0.0.0.0 0.0.0.0 <remote point-to-point>
!
no cdp run
!
access-list 1 remark CCP_ACL Category=16
access-list 1 permit 10.1.1.0 0.0.0.255
!
!
!
control-plane
!
!
!
line con 0
no modem enable
line aux 0
line 3
script dialer hspa-R7
no exec
line vty 0 4
transport input telnet ssh
line vty 5 15
access-class 23 in
transport input telnet ssh
!
!
end
