
我在公网上可以ping 通 123.123.123.4 的ip地址 为什么VPN连接不上呢? 错误800
2 @# I9 q9 G7 m/ L/ V; f/ n4 c- c- X* t/ u1 F2 u& C, j0 k; I+ {
配置如下:
) K( j" p3 c4 F: tBuilding configuration...
$ T/ U6 n$ o1 a
* h% n& D* P4 m( t- `) m1 e8 @& _Current configuration : 4271 bytes$ o! D' [; S9 O4 L! v5 K8 H
!9 V# b4 r3 z$ p) Y" d2 P
version 12.4
6 P) u- f6 g, `% j+ [! hservice timestamps debug uptime) X% g9 e2 h- U" [9 z0 x' y
service timestamps log uptime# {7 Y5 H. ~% C/ D; f$ S
service password-encryption) w0 ^8 G& j8 a* G# ^) Y
!2 _2 `) e+ ~: H2 ~- p" _( Q
hostname Router' a# c2 k# g* d# Q
!# `! s) E6 F% Y; A* Z2 A; C; h, t) d
boot-start-marker
) b* z) Z. m0 b. E/ Vboot system disk2:/c7200-advipservicesk9-mz.124-2.T.bin
6 v7 R& {0 l( ^2 X5 m, {( gboot-end-marker* L4 ?8 \1 m) z! y" n' T3 _
!
9 ?6 C, `- f3 M7 y! card type command needed for slot 1( G7 z4 N) u. B" Y E
enable password 7 01100F1758042 d& M U0 G9 H
!
/ |8 b/ r4 X7 j: c1 ?. l# b Ono aaa new-model3 j; p6 ], I& U% H0 j
!
4 q& m& G2 `: L# C! R" ]resource policy8 V' @4 e" ?* U: Q" b1 o/ q2 s
!
+ w$ [( _. R) k9 _. @7 B) ?ip subnet-zero, D/ a7 y4 D+ V
ip cef
! X! \3 S7 f r5 x* `# ]# n!
4 n' _# f3 C. z2 X/ V+ Q( B! F! M5 q! d+ O3 F2 B" P& ]7 B# ` k
no ip dhcp use vrf connected0 Q7 ?8 U* l) I; t7 W" e$ T( u
!
5 w0 b0 p% \" j* }!7 E( l7 J+ X' L$ Z' |2 _9 j+ r
no ip ips deny-action ips-interface
. H. F/ T; D. o7 q9 ]2 tvpdn enable( S/ d [3 ^. @
!
8 U. u: d, F) w$ r: K, Zvpdn-group 15 `% N) @3 V! l# ]& [1 ]
! Default PPTP VPDN group" ~: u- [- ~: T3 \" N n
accept-dialin
$ f) }1 h; Q# e2 [3 C protocol pptp
2 A3 P% Z3 `: {1 D% d2 \ C' J2 H virtual-template 1
8 M6 ^. T0 A+ v ^" ?3 ]( [
# c( G5 E- K# k- c( }4 G4 E4 r2 r!
9 O0 V: I! ~" x4 ?% |! ^5 k! y5 Q( m! P+ binterface GigabitEthernet0/2
+ x T! Y5 x$ \. r# d2 M/ G8 @ no ip address }& @% V% S9 W( Z0 w, C
ip broadcast-address 0.0.0.0) H. N; G3 M6 @8 M6 L! A, K2 @" Q
duplex full+ l# C9 ^9 ]( ^ x2 p0 M8 B. O
speed 1000+ s: e" R" \4 l5 I! |: P# l9 M
media-type gbic) u0 i& s! @$ _7 b2 l% N
no negotiation auto9 I0 V- ?0 o0 N) H7 ]" i$ l0 ?" d8 @
!
( E. X% `" q P# `* x6 Ninterface GigabitEthernet0/2.10 B6 |' L+ ^) x, f/ t- R/ W
encapsulation dot1Q 1052 O* A; Z4 z! V) w
ip address 123.123.123.4 255.255.255.224, E6 R1 {$ L" E" b3 ]7 D$ ?
ip nat outside- o5 `! I5 r* B; S& l. y
ip virtual-reassembly( n. j. w+ M K: y( { y9 U; v
no snmp trap link-status
' i* }& s; y2 p/ M0 i: S; ~!
' ]& @7 g' P& o5 u$ jinterface GigabitEthernet0/2.20 d* \6 T( @7 `3 Z4 b* d* K
encapsulation dot1Q 304
b2 j* \/ b/ }. Q7 N$ t2 { ip address 172.16.56.200 255.255.255.2400 w1 W) l1 J% D3 L/ X1 I# b8 k4 q
ip nat outside
' @* A; V, U: {3 M% T( w ip virtual-reassembly
; S4 k, s* N6 M1 |9 t4 ~$ M no snmp trap link-status
2 q' X" n: Q4 v, O!
) o! J, [' P7 z0 q f1 t* ?interface GigabitEthernet0/2.3
6 h% g3 M5 R1 j3 t encapsulation dot1Q 401
" A! z; o. d0 c% D& v& N" ~% X4 ^ ip address 136.204.9.140 255.255.255.2404 U9 L' O, F3 u! m" w/ a. [3 c& F
ip nat outside
$ t) P' {# M& P! z H; k ip virtual-reassembly
) p# {% i" V- y( T5 f0 g! y$ q no snmp trap link-status/ a0 \7 @7 T' x4 B; z% E* g
!: X2 @2 `: |3 p2 I7 d
interface GigabitEthernet0/3# W$ ]1 x& v5 ?6 Z1 N' V) V
no ip address
/ S% a5 M: q1 ~# s( y. e duplex full
3 T# X: i: P# b# N6 Q& p$ q speed 1000
& c& p6 Z5 o% ` media-type gbic6 S- v# V0 R* g$ n
no negotiation auto
$ J0 g; J) p w# W!
' b p: a5 `# ?) e* E6 G; Q$ kinterface GigabitEthernet0/3.1
& T* @7 \6 n1 ~6 K) z2 Z encapsulation dot1Q 501, }+ G/ @; E5 I3 n" _2 L& z
ip address 10.0.0.1 255.255.255.0
! E) e6 _& L! C) h3 X }3 O ip nat inside# h0 _" I5 u. S1 @5 y) U" n1 o, N: f
ip virtual-reassembly
& _ C) r5 f W) p2 R- ~" N no snmp trap link-status. O+ B6 i+ o' j8 e& [ ~" r
!
5 F( G5 v; G% A# |3 }7 vinterface Virtual-Template1
+ `5 S( G/ c- R$ W ip address 10.0.1.1 255.255.255.0
' M v9 C; c! _3 `# F ip nat inside
! l* T3 D8 s' b5 W ip virtual-reassembly5 e( {) ]7 G) [7 s/ S
peer default ip address pool VPNDHCP
, q4 N7 ?6 b+ I, U% i ppp authentication ms-chap/ i6 a, L. Q0 _: j6 `* W- M
!
6 i3 k9 M. M$ S$ a! Y. F- eip local pool VPNDHCP 10.0.1.100 10.0.1.200$ s5 N' g: r/ w% o
ip classless9 G+ X; l3 C- s3 d
ip route 0.0.0.0 0.0.0.0 123.123.123.1
. k8 H# m3 i# N4 Bip route 10.3.0.0 255.255.0.0 172.16.56.1937 e' f: E6 O+ {
ip route 132.0.0.0 255.0.0.0 136.204.9.129% O. M/ z3 W9 O) R- s+ R% Z
ip route 136.0.0.0 255.0.0.0 136.204.9.1296 a1 e. w& w! G7 Y4 M
ip route 172.0.0.0 255.0.0.0 172.16.56.193
) [- U* s0 {# \" k# w3 z u- Fno ip http server2 D7 c) G- c1 ?! g1 M
no ip http secure-server
& L1 p! h. {* O1 @0 W8 k!6 A- V- [. J2 _3 r l6 T
!' C6 s, {# x2 u1 D% y# X8 @
ip nat inside source route-map dcn interface GigabitEthernet0/2.3 overload/ H& W- C; m# V
ip nat inside source route-map internet interface GigabitEthernet0/2.1 overload6 \* e, ~# A: H4 L& G! S( q% c6 n
ip nat inside source route-map oa interface GigabitEthernet0/2.2 overload# h9 U, C- q3 w
!
6 M: n' r" x! |& C+ iaccess-list 101 permit ip 10.0.0.0 0.255.255.255 172.0.0.0 0.255.255.255
8 [! D' t1 {2 T" J) f! \6 D saccess-list 101 permit ip 10.0.0.0 0.0.0.255 10.3.0.0 0.0.255.2553 r( T7 t; r* ^% B: k
access-list 101 permit ip 10.1.1.0 0.0.0.255 10.3.0.0 0.0.255.255+ Y9 R, ~# Q$ A9 e0 q
access-list 101 deny ip any any# S$ \, v4 Y a! U1 u
access-list 102 deny ip 10.0.0.0 0.255.255.255 172.0.0.0 0.255.255.255
9 n v0 B8 d! y* l9 {( g7 \access-list 102 deny ip 10.0.0.0 0.255.255.255 136.0.0.0 0.255.255.255
2 f% [/ r! Q/ j/ u4 x2 @0 ^access-list 102 deny ip 10.0.0.0 0.255.255.255 132.0.0.0 0.255.255.2555 N% y* T" h, \; Y1 t3 E; j
access-list 102 deny ip 10.0.0.0 0.255.255.255 10.3.0.0 0.0.255.255
( i E- h2 g2 i& C/ ^8 @( J; maccess-list 102 permit ip any any# W4 |" Q( J* R4 v( H
access-list 103 permit ip 10.0.0.0 0.255.255.255 136.0.0.0 0.255.255.255
, A& _6 W' I. S' ]) t. f5 s$ baccess-list 103 permit ip 10.0.0.0 0.255.255.255 132.0.0.0 0.255.255.255/ v6 d6 r1 \+ _& H
access-list 103 deny ip any any, C8 C5 K: O# y1 A) m" u, Y* @
!
7 E3 G! p) L _' m" ^route-map oa permit 10" Y5 M& N p# j
match ip address 101 104 111 1149 Q) Q( }3 p a: m' ^
!
9 M5 D, P Y' Eroute-map internet permit 10* ^9 k! P7 a7 S. s4 x1 S; e8 B
match ip address 102 1126 w O& s7 j* V# |4 q
!# H2 l5 j( K1 p6 e& Y$ W) E5 \
route-map dcn permit 10
+ ]) H, ~5 ^! _( ?. K0 R- B match ip address 103 113
$ Q* O% ^4 {, `* G! l!
! R7 e/ q# j* y2 w6 g3 F7 l" M- s0 h!
4 T1 d8 L- N: ^/ p: t! g!
! c& R6 a/ J! j0 k9 {; w- q!5 g; E4 l3 @0 Z! ]/ f
control-plane
' Q a% k- d }# g! p!
" r+ T- T' i: z; k$ }9 B) b- V% P!
9 s1 X5 X3 X) c* N' r& q4 n' H!
1 ^# A' ~. n1 d; F9 e3 z!
7 l: H2 V; w# u!$ K% v3 J$ w1 e5 L. }; s
!+ U+ \3 p6 Q4 V9 @4 M" Z* S& D
gatekeeper1 A5 D" C' m( D) q1 H
shutdown
) P% u6 k% V- y) f!1 d M0 t8 ~5 d9 _0 r
!
/ w# C5 a# B5 c' v0 }, yline con 07 {) G |$ U3 `+ G8 `
stopbits 1# T4 Q: }- }& I3 o" P* i8 K
line aux 0
* b8 ], ^% P! b E. v stopbits 10 H: x0 S i u9 R. }
line vty 0 4
: H0 b$ F2 w# U$ t- j V; @$ x exec-timeout 5 0, r; h5 x" p* |6 K& @+ R! m& K
password 7 030752180500
+ R. z; q% Q& ] login local
2 h0 u1 A5 E6 }" Y4 R" L: E c; H!- d+ ^# \7 V" ~7 j
!
! r1 e. s, U. I7 e- Y% W5 V( e) ~end |
|