hostname WA1512
!
username admin password plain admin administrator
!
http-username admin password plain admin administrator
!
bridge ieee enable
!
ip dhcp profile default
  assignable-range 192.168.1.10 50
  subnet-mask 255.255.255.0
  dns-server 192.168.1.200
  default-gateway 192.168.1.200
  subnet-mask 24
!
interface GigaEthernet1.0
  ip address 192.168.1.200/24
  ip dhcp-server binding default
  bridge ieee 1
  
  no shutdown
!
interface MobileEthernet0.0
  ip address dhcp
  ipsec map ipsecprof1
  ip napt enable
  ip napt reserve icmp
  ip napt reserve udp 500
  ip napt reserve esp
  ip napt reserve udp 4500
  mobile id IP example.jp
  mobile username user@example.com
  mobile password plain example
  auto-connect
  no shutdown
!
interface EtherIP0
  bridge ieee 1
  ether-ip peer 100.100.100.100
  ether-ip source MobileEthernet0.0
  no shutdown
!
ip route default MobileEthernet0.0
!
proxy-dns ip enable
proxy-dns server default MobileEthernet0.0 dhcp
!
ike proposal ikeprop1
  encryption-algorithm aes256-cbc
  authentication-algorithm hmac-sha2-256
  lifetime 28800 
!
ike policy ikepol1
  mode main
  dpd-keepalive enable ph1 20 3
  proposal ikeprop1
  pre-shared-key plain secret
!
ipsec proposal ipsecprop1
  protocol esp enc-algo aes256-cbc auth-algo hmac-sha2-256
  lifetime 28800
!
ipsec policy ipsecpol1
  rekey enable always
  proposal ipsecprop1
!
ipsec profile ipsecprof1
  mode transport
  ipsec policy ipsecpol1
  ike policy ikepol1
  source MobileEthernet0.0
  peer 100.100.100.100
!
https-server ip enable
https-server ip permit 192.168.1.0/24
https-server ip redirect enable
!
led vpn ipsec
!