l2tp mit VPN Provider

[dornbirn2000 10]

Hallo zusammen,

 

ich möchte mit einem einem Cisco 877 und einem VPN Provider eine L2TP Verbindung aufbauen. Der Tunnel baut sich zwar auf, jedoch beendet er sich alle zwei Minuten. IP Adresse bekommt das Interface auch keine.

 

Config:

version 12.4
no service pad
service timestamps debug datetime localtime show-timezone
service timestamps log datetime localtime show-timezone
service password-encryption
service internal
!
hostname cisco877
!
boot-start-marker
boot system flash 
boot-end-marker
!
logging message-counter syslog
logging buffered 51200
logging console warnings
enable secret 5 <secret>
!
aaa new-model
!
!
aaa authentication login userauth local
aaa authentication login VPNSSL local
aaa authorization network groupauth local 
!
!
aaa session-id common
clock timezone CET 1
clock summer-time CEST recurring last Sun Mar 2:00 last Sun Oct 3:00
!
<crypto key>

 	quit
dot11 syslog
ip source-route
no ip gratuitous-arps
!
!
no ip dhcp use vrf connected
<dhcp>
!
!
ip cef
ip name-server 195.16.241.140
ip name-server 195.16.241.141
ip multicast-routing 
no ipv6 cef
ntp server 195.58.160.2
ntp server 130.60.127.148
ntp server 192.168.1.22 prefer
ntp server 129.187.254.32
l2tp-class LAC-TUNNEL
hostname <vpnlogin>
password 7 <pre-shared key>
!
!
multilink bundle-name authenticated
!
vpdn enable
!
!
!
vtp interface FastEthernet0/2
vtp mode client
vtp version 2
username test <pass>
! 
!
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp client configuration address-pool local VPNIPpool
!         
crypto isakmp client configuration group gentooVPN
key <key>
dns 195.16.224.2 195.16.241.140
pool VPNIPpool
acl 103
!
!
crypto ipsec transform-set transset esp-3des esp-sha-hmac 
!
crypto dynamic-map dynmap 10
set transform-set transset 
reverse-route
!
!
crypto map LANmap client authentication list userauth
crypto map LANmap isakmp authorization list groupauth
crypto map LANmap client configuration address respond
crypto map LANmap 10 ipsec-isakmp dynamic dynmap 
!
archive
log config
 hidekeys
!
!
ip ssh maxstartups 3
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh port 10000 rotary 10
ip ssh logging events
ip ssh version 2
pseudowire-class PW-WIRE-TUNNEL
encapsulation l2tpv2
protocol l2tpv2 LAC-TUNNEL
ip local interface Loopback0
ip pmtu
!
!
bridge irb
!
!
interface Loopback0
ip address 192.168.3.1 255.255.255.0
!
interface ATM0
no ip address
load-interval 30
no atm ilmi-keepalive
dsl operating-mode adsl2+ 
dsl bitswap both
!
interface ATM0.848 point-to-point
pvc 8/48 
 encapsulation aal5mux ppp dialer
 dialer pool-member 1
!
!
interface FastEthernet0
spanning-tree portfast
!
interface FastEthernet1
spanning-tree portfast
!
interface FastEthernet2
switchport mode trunk
!
interface FastEthernet3
spanning-tree portfast
!
interface Virtual-PPP1
ip address negotiated
ip mtu 1460
ppp authentication chap callin
ppp chap hostname <vpnuser>
ppp chap password 7 <vpnpass>
ppp pap sent-username <vpnuser> password 7 <vpnpass>
pseudowire <l2tpIP> 10 encapsulation l2tpv2 pw-class PW-WIRE-TUNNEL
!

[dornbirn2000 10]

interface Vlan1
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly max-reassemblies 128
ip tcp adjust-mss 1420
!
interface Vlan5
ip address 192.168.5.1 255.255.255.0
!
interface Dialer1
mtu 1460
ip address negotiated
ip access-group 101 in
ip access-group 102 out
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
ip nat outside
ip virtual-reassembly max-reassemblies 32
encapsulation ppp
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname <pppuser>
ppp chap password 7 <ppppass>
ppp pap sent-username <pppuser> password 7 <ppppass>
crypto map LANmap
!
router ospf 1
log-adjacency-changes
network 192.168.1.0 0.0.0.255 area 1
network 192.168.5.0 0.0.0.255 area 1
!
ip local pool VPNIPpool 192.168.2.10 192.168.2.12
ip local pool VPNSSLIPpool 192.168.1.210 192.168.1.212
no ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer1 permanent
!
!
<ip nat inside>
ip nat inside source list 110 interface Dialer1 overload
!
access-list 101 deny   tcp any any eq telnet
access-list 101 deny   tcp any any eq 22
access-list 101 deny   tcp any any eq ftp
access-list 101 permit ip any any
access-list 103 permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 103 deny   ip any 192.168.2.0 0.0.0.255
access-list 110 permit ip any any
dialer-list 1 protocol ip permit
!
!
!
!
snmp-server community Dublin RO
snmp-server community Guiness RW
snmp-server system-shutdown
snmp-server host 192.168.1.22 Dublin 
!
control-plane
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
session-timeout 35791 
privilege level 15
rotary 10
transport input ssh
!
no scheduler max-task-time
!
<webvpn>
!
end

 

Kann mir jemand helfen das Problem in den Griff zu bekommen?

 

Greets

[Wordo 11]

Von wem hast du die Config bekommen? Ein Debug waere schon interessant ...

 

Redest du von reinem L2TP oder IPSec/L2TP?