Cisco 877 & Remote Access VPN

.Andy · 27 Nov 2007 at 09:28

Gents I'm looking for some sample config on getting this set up. I'm not a noob to cisco kit but my experience is limited to plugging it in conencting to it and doing sh ver, sh run, wr mem, conf t i.e. the basics!

I have a static business line at home that when I'm on a clients site I would like to be able to fire up the Cisco VPN client and connect to my home network.

HELP!

If you need any more info let me know

Thanks

Rich · 27 Nov 2007 at 09:36

Doing it from the CLI is not for beginners by any stretch of the imagination. If you want it done quickly, I would recommend using SDM (the gui, i know i know).
The jist of it is, the GUI will take you 5 minutes to set this up, is wizard based and step-by-step. Couldnt be easier.

This guide should offer some pointers if you take that route, its for ASA but the steps are pretty much identical:

http://cisconews.co.uk/2007/07/06/configuring-remote-access-vpn-for-asa-and-pix/

The GUI is not what I would ever recommend really, but in cases like this it can be much much quicker and painless than using CLI.

.Andy · 27 Nov 2007 at 10:13

ok cheers for that Rich

Is there 2 versions of the SDM? if so which one do I need?

Chief Wiggum · 27 Nov 2007 at 12:17

It's fairly straight forward and the cisco website generally has a number of guides to do it.

You need a crypto image though - I'm not sure how standard that it. If you do a sh ver form the cli, it should mention it in the image number either as crypto or k9.

.Andy · 27 Nov 2007 at 13:03

yeah i'm running a k9 image

m_cozzy · 27 Nov 2007 at 13:37

I use pptp vpn on my 837 as its more convenient, I can connect from anywhere using the built in windows client. Relevent bits below..

aaa authentication ppp default local
aaa authorization network default if-authenticated
aaa session-id common

vpdn-group 1
! Default PPTP VPDN group
accept-dialin
protocol pptp
virtual-template 1
!
async-bootp dns-server 192.168.0.25

interface Virtual-Template1
description PPTP
ip unnumbered Ethernet0
peer default ip address dhcp
ppp encrypt mppe auto required
ppp authentication ms-chap ms-chap-v2
!

EDIT + rules to allow the incoming pptp traffic
remark PPTP
permit gre any host 82.69.154.54
permit tcp any host 82.69.154.54 eq 1723