# If you want to clear ALL configuration to default,
#  remove `#' of next line.

#clear configuration


#
# System configuration
#

login password abcdefgh
administrator password pqrstuvw
security class 2 on on
console character ascii
console lines infinity

#
# IP configuration
#

ip route default gateway 172.16.0.1
ip route 172.16.1.0/24 gateway tunnel 1 filter 1 2 3 hide

#
# IPv6 configuration
#


#
# LAN configuration
#

ip lan1 address 192.168.1.254/24
ip lan2 address 172.16.0.254/24
ip lan2 nat descriptor 1

#
# ISDN configuration
#


### BRI 1 ###


#
# PP configuration
#

pp disable all

#
# TUNNEL configuration
#

tunnel disable all

### TUNNEL 1 ###

tunnel select 1
 ipsec tunnel 101
  ipsec sa policy 101 1 esp aes-cbc md5-hmac
  ipsec ike encryption 1 aes-cbc
  ipsec ike group 1 modp1024
  ipsec ike local address 1 192.168.1.254
  ipsec ike pre-shared-key 1 text himitsu
  ipsec ike remote address 1 any
  ipsec ike remote name 1 sl-zaurus
 tunnel enable 1

#
# IP filter configuration
#

ip filter 1 reject * * udp * 500
ip filter 2 reject * * esp
ip filter 3 pass * *

#
# IP dynamic filter configuration
#


#
# NAT Descriptor configuration
#

nat descriptor type 1 masquerade
nat descriptor address outer 1 primary
nat descriptor masquerade static 1 1 192.168.1.254 udp 500
nat descriptor masquerade static 1 2 192.168.1.254 esp

#
# IPSEC configuration
#

ipsec auto refresh on

#
# IPv6 filter configuration
#


#
# IPv6 dynamic filter configuration
#


#
# Queueing configuration
#


#
# SYSLOG configuration
#

syslog notice on
syslog info on

#
# TFTP configuration
#


#
# TELNETD configuration
#


#
# DHCP configuration
#


#
# DHCPC configuration
#


#
# DNS configuration
#


#
# WINS configuration
#


#
# SNMP configuration
#


#
# Schedule configuration
#


#
# Netvolante DNS configuration
#


# If you want to save configuration to Nonvolatile memory,
#  remove `#' of next line.

#save