hostname IX2106
!
username admin password plain admin administrator
!
ip ufs-cache enable
ip route default GigaEthernet0.1
ip route 192.168.2.0/24 Tunnel0.0
ip dhcp enable
ip access-list sec-list permit ip src any dest any
!
ike proposal ikeprop encryption aes-256 hash sha2-256
!
ike policy ike-policy peer any key secret mode aggressive ikeprop
ike remote-id ike-policy keyid testkey
ike nat-traversal policy ike-policy
!
ipsec autokey-proposal secprop esp-aes-256 esp-sha2-256
!
ipsec dynamic-map ipsec-policy sec-list secprop ike ike-policy
ipsec local-id ipsec-policy 192.168.1.0/24
ipsec remote-id ipsec-policy 192.168.2.0/24
!
http-server ip access-list web-http-acl
http-server ip enable
!
nm ip enable
nm account example password plain test
nm sitename example-site
!
ppp profile ppp_profile
  authentication myname example@example.com
  authentication password example@example.com example
!
ip dhcp profile default
  assignable-range 192.168.1.10 192.168.1.99
  default-gateway 192.168.1.254
  dns-server 192.168.1.254
!
interface GigaEthernet1.0
  ip address 192.168.1.254/24
  ip dhcp binding default
  no shutdown
!
proxy-dns ip enable
proxy-dns interface GigaEthernet0.1 priority 254
!
interface GigaEthernet0.1
  encapsulation pppoe
  auto-connect
  ppp binding ppp_profile
  ip address ipcp
  ip tcp adjust-mss auto
  ip napt enable
  ip napt static GigaEthernet0.1 udp 500
  ip napt static GigaEthernet0.1 50
  ip napt static GigaEthernet0.1 udp 4500
  no shutdown
!
interface Tunnel0.0
  tunnel mode ipsec
  ip unnumbered GigaEthernet1.0
  ip tcp adjust-mss auto
  ipsec policy tunnel ipsec-policy
  no shutdown
!