Configuring L2TP\IPSEC on real world scenario.

###L2TP CONFIGURE###
====================================================
aaa new-model
aaa authentication login default local
aaa authorization network default local
username admin pass admin

ip local pool l2tp-pool 10.1.1.1 10.1.1.10
vpdn enable
vpdn-group g-l2tp
accept-dialin
protocol l2tp
virtual-template 1
exit

no l2tp tunnel authentication
exit
int virtual-template 1
ip unnumbered f0/0
peer default ip add pool l2tp-pool
ppp authentication ms-chap-v2
exit
=======================================================
###Create isakmp profile
=======================================================
crypto isakmp policy 1
encryption 3des
hash sha
authentication pre-share
group 2
lifetime 3600
exit
crypto isakmp key cisco address 0.0.0.0 0.0.0.0

====================================================
####Create ike phase2
====================================================
crypt IPsec transform-set myset esp-3des esp-sha-hmac
mode transport

=====================================================
###Create maps and assign it to the internet
+++++++++++++++++++++++++++++++++++++++++++++++++++++
crypto dynamic-map mymap 1
set nat demux
set transform-set myset
exit

crypto map mymap 1 ipsec-isakmp dynamic mymap
int f0/0
crypto map mymap
exit

Видео Configuring L2TP\IPSEC on real world scenario. канала NETWORKING FOR ALL