! ! Century Systems NXR-G100 Series ver 6.6.3 (build 4/16:28 24 03 2015) ! DIP-SW : 1:off 2:off 3:off 4:off ! hostname NXR telnet-server enable http-server enable ! ! system power-management mode balance ! ! ! ipv6 forwarding fast-forwarding enable ! ! ! ! ipsec nat-traversal enable ipsec xauth username android01 password android01pass ipsec xauth username ios01 password ios01pass ! ipsec local policy 1 address ip ! ! ipsec isakmp policy 1 description smartphone authentication pre-share ipseckey xauth mode server hash sha1 encryption aes128 group 5 lifetime 86400 isakmp-mode main client configuration address-pool local smartphoneip remote address ip any local policy 1 ! ! ipsec tunnel policy 1 description smartphone negotiation-mode responder set transform esp-aes128 esp-sha1-hmac no set pfs set key-exchange isakmp 1 set sa lifetime 28800 match address RemoteAccess ! ! interface ppp 0 ip address 10.10.10.1/32 no ip redirects ip tcp adjust-mss auto ip access-group in ppp0_in ip masquerade ip spi-filter ppp username test1@example.jp password test1pass ipsec policy 1 ! interface ethernet 0 ip address 192.168.10.1/24 ! interface ethernet 1 no ip address pppoe-client ppp 0 ! dns service enable ! syslog local enable ! ! ! ! ! ! ! ! ! ! ip route 0.0.0.0/0 ppp 0 ! ipsec local pool smartphoneip address 172.16.0.0/24 ! ip access-list ppp0_in permit any 10.10.10.1 udp any 500 ip access-list ppp0_in permit any 10.10.10.1 udp any 4500 ip access-list ppp0_in permit any 10.10.10.1 50 ! ipsec access-list RemoteAccess ip any host ! ! end