interface ppp0
ip ddns-update-method example
ppp ipcp dns request
keepalive
ip address negotiated
ppp username user@ispA
ppp password isppasswdA
ip tcp adjust-mss pmtu
firewall
rule 10 permit any from private to private
rule 20 permit any from private to public
rule 30 permit isakmp from public.wan.ppp0 to public.wan
rule 40 permit isakmp from public.wan to public.wan.ppp0
rule 50 permit esp from public.wan.ppp0 to public.wan
rule 60 permit esp from public.wan to public.wan.ppp0
rule 70 permit dns from public.wan.ppp0 to public.wan
rule 80 permit https from public.wan.ppp0 to public.wan
protect
interface ppp0
ip ddns-update-method example
ppp ipcp dns request
keepalive
ip address negotiated
ppp username user@isp2
ppp password isppasswd2
ip tcp adjust-mss pmtu
firewall
rule 10 permit any from private to private
rule 20 permit any from private to public
rule 30 permit isakmp from public.wan.ppp0 to public.wan
rule 40 permit isakmp from public.wan to public.wan.ppp0
rule 50 permit esp from public.wan.ppp0 to public.wan
rule 60 permit esp from public.wan to public.wan.ppp0
rule 70 permit dns from public.wan.ppp0 to public.wan
rule 80 permit https from public.wan.ppp0 to public.wan
protect
!
no spanning-tree rstp enable
!
ddns enable
!
ddns-update-method example
update-url https://<USERNAME>:<PASSWORD>@members.example.com/nic/update?SYSTEM=dyndns&hostname=<HOST-NAME>&myip=<IPADDRESS>
host-name test1.example.com
username test
password test
update-interval 60
retry-interval 1 maximum-retries 5
!
interface eth1
encapsulation ppp 0
!
interface ppp0
ip ddns-update-method example
ppp ipcp dns request
keepalive
ip address negotiated
ppp username user@ispA
ppp password isppasswdA
ip tcp adjust-mss pmtu
!
interface vlan1
ip address 192.168.10.1/24
!
zone private
network lan
ip subnet 192.168.10.0/24
network peer
ip subnet 192.168.20.0/24 interface tunnel0
network tunnel
ip subnet 172.16.0.0/30
!
zone public
network wan
ip subnet 0.0.0.0/0 interface ppp0
host ppp0
ip address dynamic interface ppp0
!
application esp
protocol 50
!
application isakmp
protocol udp
sport 500
dport 500
!
firewall
rule 10 permit any from private to private
rule 20 permit any from private to public
rule 30 permit isakmp from public.wan.ppp0 to public.wan
rule 40 permit isakmp from public.wan to public.wan.ppp0
rule 50 permit esp from public.wan.ppp0 to public.wan
rule 60 permit esp from public.wan to public.wan.ppp0
rule 70 permit dns from public.wan.ppp0 to public.wan
rule 80 permit https from public.wan.ppp0 to public.wan
protect
!
nat
rule 10 masq any from private to public
enable
!
crypto isakmp key secret hostname test2.example.com
!
interface tunnel0
mtu 1300
tunnel source ppp0
tunnel destination test2.example.com
tunnel local name test1.example.com
tunnel remote name test2.example.com
tunnel protection ipsec
tunnel mode ipsec ipv4
ip address 172.16.0.1/30
ip tcp adjust-mss 1260
!
ping-poll 1
ip 172.16.0.2
active
!
trigger 1
type ping-poll 1 down
script 1 periodic-update.scp
trigger 2
type ping-poll 1 up
script 1 periodic-update-delete.scp
trigger 3
type periodic 1
script 1 host-change.scp
!
ip route 0.0.0.0/0 ppp0
ip route 192.168.20.0/24 tunnel0
ip route 192.168.20.0/24 Null 254
!
ip dns forwarding
!
end
!
no spanning-tree rstp enable
!
ddns enable
!
ddns-update-method example
update-url https://<USERNAME>:<PASSWORD>@members.example.com/nic/update?SYSTEM=dyndns&hostname=<HOST-NAME>&myip=<IPADDRESS>
host-name test2.example.com
username test
password test
update-interval 60
retry-interval 10 maximum-retries 5
!
interface eth1
encapsulation ppp 0
!
interface ppp0
ip ddns-update-method example
ppp ipcp dns request
keepalive
ip address negotiated
ppp username user@isp2
ppp password isppasswd2
ip tcp adjust-mss pmtu
!
interface vlan1
ip address 192.168.20.1/24
!
zone private
network lan
ip subnet 192.168.20.0/24
network peer
ip subnet 192.168.10.0/24 interface tunnel0
network tunnel
ip subnet 172.16.0.0/30
!
zone public
network wan
ip subnet 0.0.0.0/0 interface ppp0
host ppp0
ip address dynamic interface ppp0
!
application esp
protocol 50
!
application isakmp
protocol udp
sport 500
dport 500
!
firewall
rule 10 permit any from private to private
rule 20 permit any from private to public
rule 30 permit isakmp from public.wan.ppp0 to public.wan
rule 40 permit isakmp from public.wan to public.wan.ppp0
rule 50 permit esp from public.wan.ppp0 to public.wan
rule 60 permit esp from public.wan to public.wan.ppp0
rule 70 permit dns from public.wan.ppp0 to public.wan
rule 80 permit https from public.wan.ppp0 to public.wan
protect
!
nat
rule 10 masq any from private to public
enable
!
crypto isakmp key secret hostname test1.example.com
!
interface tunnel0
mtu 1300
tunnel source ppp0
tunnel destination test1.example.com
tunnel local name test2.example.com
tunnel remote name test1.example.com
tunnel protection ipsec
tunnel mode ipsec ipv4
ip address 172.16.0.2/30
ip tcp adjust-mss 1260
!
ping-poll 1
ip 172.16.0.1
active
!
trigger 1
type ping-poll 1 down
script 1 periodic-update.scp
trigger 2
type ping-poll 1 up
script 1 periodic-update-delete.scp
trigger 3
type periodic 1
script 1 host-change.scp
!
ip route 0.0.0.0/0 ppp0
ip route 192.168.10.0/24 tunnel0
ip route 192.168.10.0/24 Null 254
!
ip dns forwarding
!
end