PIX 7.0 VPN with Cisco VPN client 4.6.03

network

PIX 7.0 VPN with Cisco VPN client 4.6.03 [/td]

PIX Version 7.0(1) names ! interface Ethernet0 nameif outside security-level 0 ip address 172.29.6.1 255.255.255.0 ! interface Ethernet1 nameif inside security-level 100 ip address 172.29.131.1 255.255.255.0 ! enable password 90RBsEWodTGO2XFL encrypted passwd 2KFQnbNIdI.2KYOU encrypted hostname pix ftp mode passive access-list nonat extended permit ip 172.29.131.0 255.255.255.0 10.1.1.0 255.255.255.0 access-list split standard permit 10.1.1.0 255.255.255.0 pager lines 24 logging console debugging mtu outside 1500 mtu inside 1500 ip local pool testpool 10.1.1.1-10.1.1.15 no failover monitor-interface outside monitor-interface inside no asdm history enable arp timeout 14400 nat (inside) 0 access-list nonat route outside 172.29.0.0 255.255.0.0 172.29.6.254 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 timeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00 timeout uauth 0:05:00 absolute group-policy test internal group-policy test attributes wins-server value 10.1.1.102 dns-server value 10.1.1.100 10.1.1.101 split-tunnel-policy tunnelspecified split-tunnel-network-list value split username peter password eiLX8yKuiZqgo6C8 encrypted username tcytech password HTEt2RXRBqicQQ2g encrypted no snmp-server location no snmp-server contact snmp-server enable traps snmp crypto ipsec transform-set test esp-aes esp-sha-hmac crypto dynamic-map mymap 10 set transform-set test crypto map test 10 ipsec-isakmp dynamic mymap crypto map test interface outside isakmp enable outside isakmp policy 20 authentication pre-share isakmp policy 20 encryption aes isakmp policy 20 hash sha isakmp policy 20 group 2 isakmp policy 20 lifetime 3600 isakmp policy 65535 authentication pre-share isakmp policy 65535 encryption 3des isakmp policy 65535 hash sha isakmp policy 65535 group 2 isakmp policy 65535 lifetime 86400 telnet timeout 5 ssh timeout 5 console timeout 0 tunnel-group test type ipsec-ra tunnel-group test general-attributes address-pool testpool default-group-policy test tunnel-group test ipsec-attributes pre-shared-key * ! class-map inspection_default match default-inspection-traffic ! ! policy-map global_policy class inspection_default inspect dns maximum-length 512 inspect ftp inspect h323 h225 inspect h323 ras inspect netbios inspect rsh inspect rtsp inspect skinny inspect esmtp inspect sqlnet inspect sunrpc inspect tftp inspect sip inspect xdmcp ! service-policy global_policy global