the previous posted configuration is the vpn-server, 16 cisco1751 connect via dsl to the server in a hub-and-spoke configuration (below is the ios-client config)
server:
cisco 2621 (60416K/5120K)
c2600-ik8s-mz.122-8.T8.bin
client:
cisco 1751 (39322K/9830K)
c1700-k8o3sv3y7-mz.122-4.XM3.bin
soft-client:
vpn-client v4.0
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname vpn-ios-client
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication ppp default local
aaa authorization exec default local
aaa authorization network default local
aaa session-id common
!
username callback-dialstring "" password
username privilege 5 password
memory-size iomem 20
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip subnet-zero
!
!
ip tcp path-mtu-discovery
ip telnet source-interface FastEthernet0/0
ip tftp source-interface FastEthernet0/0
!
ip audit notify log
ip audit po max-events 100
ip ssh time-out 120
ip ssh authentication-retries 3
vpdn enable
!
vpdn-group pppoe
request-dialin
protocol pppoe
!
isdn switch-type basic-net3
!
!
!
!
!
!
!
!
crypto isakmp policy 1
hash md5
authentication pre-share
crypto isakmp key PRESH-KEY-FOR-IOS address 200.100.10.1
crypto isakmp keepalive 10
!
!
crypto ipsec transform-set vpnset esp-des esp-md5-hmac
!
crypto map vpn 1 ipsec-isakmp
set peer 200.100.10.1
set security-association lifetime seconds 150
set transform-set vpnset
match address 115
!
!
!
!
interface Ethernet0/0
half-duplex
pppoe enable
pppoe-client dial-pool-number 1
no cdp enable
!
interface FastEthernet0/0
ip address 10.1.201.254 255.255.255.0
ip helper-address 10.101.104.255
ip helper-address 10.100.255.255
ip directed-broadcast
ip nat inside
speed auto
!
!
interface Dialer1
bandwidth 768
ip address negotiated
ip directed-broadcast
ip mtu 1492
ip nat outside
encapsulation ppp
ip tcp adjust-mss 1300
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication pap callin
ppp pap sent-username password 7
ppp ipcp dns request
crypto map vpn
!
!
ip nat inside source route-map nonat interface Dialer1 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1 10
ip route 0.0.0.0 0.0.0.0 Dialer10 20
no ip http server
ip pim bidir-enable
!
!
!
logging trap debugging
logging source-interface FastEthernet0/0
logging 10.100.0.1
access-list 10 permit 10.1.201.0 0.0.0.255
access-list 11 permit 10.100.0.0 0.1.255.255
access-list 115 permit ip 10.1.201.0 0.0.0.255 10.100.0.0 0.1.255.255
access-list 115 deny ip 10.1.201.0 0.0.0.255 any
access-list 120 deny ip 10.1.201.0 0.0.0.255 10.100.0.0 0.1.255.255
access-list 120 permit ip 10.1.201.0 0.0.0.255 any
dialer-list 1 protocol ip list
!
route-map nonat permit 10
match ip address 120
!
call rsvp-sync
!
dial-peer cor custom
!
!
!
banner motd ^C
^C
privilege exec level 5 show
privilege exec level 5 ping
!
line con 0
line aux 0
line vty 0 4
access-class 5 in
line vty 5 15
!
no scheduler allocate
ntp clock-period 17179934
ntp source FastEthernet0/0
ntp server 10.100.0.1
end
