!--- uwierzytelnianie uzytkownikow przez serwer radius
aaa authentication login userauthen group radius 

!--- uwierzytelnianie grupowe  lokalne
aaa authorization network groupauthor local 

crypto isakmp policy 3 
 encr 3des 
 authentication pre-share 
 group 2 
! 
crypto isakmp client configuration group grupa2 
 key grupa2 
 pool grupa2
 acl 101 


! 
crypto ipsec transform-set myset esp-3des esp-sha-hmac 
! 
crypto dynamic-map dynmap 10 
 set transform-set myset 
! 
crypto map clientmap client authentication list userauthen 
crypto map clientmap isakmp authorization list groupauthor 
crypto map clientmap client configuration address respond 
crypto map clientmap 10 ipsec-isakmp dynamic dynmap 

interface FastEthernet0/0 
 ip address 83.19.73.234 255.255.255.248 
 no shutdown 
 crypto map clientmap 
! 
interface FastEthernet0/1 
 ip address 10.6.6.246 255.255.255.248 
 no shutdown 
  
!--- pula adresow z ktorej uzytkownicy mobilni dostana adres IP
ip local pool grupa2 172.18.18.100 172.18.18.120 

ip route 0.0.0.0 0.0.0.0 83.19.73.233 
!--- zdefiniowanie serwera radius
radius-server host 10.6.6.245 auth-port 1645 acct-port 1646 key 7 095D59097516134359 
radius-server authorization permit missing Service-Type
