[c-nsp] Can a Cisco 837 terminate a Road warrior VPN?

[Brett Looney]

At 09:09 7/08/2005, you wrote:
>Can the 837 handle road warrior VPN's? and if so, where is a good place to
>find an example config if possible.

Sure can. You can either do it with the cisco VPN client or with PPTP if 
you like. PPTP is simpler to setup from the client end, obviously as there 
is nothing to install on Windows, although some would argue slightly less 
secure. Whatever...

PPTP:

         vpdn enable
         vpdn-group 1
          accept-dialin
           protocol pptp
           virtual-template 1
         ! DNS and WINS servers
         async-bootp dns-server x.x.x.x
         async-bootp nbns-server x.x.x.x
         !
         interface Virtual-Template1
          ip unnumbered Ethernet0
          peer default ip address pool VPNPool
          ppp encrypt mppe auto
          ppp authentication ms-chap
         !
         ip local pool VPNPool x.x.x.x y.y.y.y
         ! Local authentication of users
         user foo password bar

Alternately, you can use RADIUS authentication if you have the 837 Plus 
feature set. Standard (i.e. cheaper) 837 does not support RADIUS...

HTH.

B.