Есть доступ к пару сиско свитчам en15 что можно из этого выжать? Сделать VPN или еще чего? Привожу конфиг Building configuration... ! ! ! ADTRAN, Inc. OS version 13.12.00.E ! Boot ROM version 08.02.XB ! Platform: NetVanta 1224R, part number 1200510L1 ! Serial number LBADTN0520AD478 ! ! hostname "Switch" enable password encrypted 3f37ea7402d74f14b05451e8b4b7bcfd4720 ! clock timezone -5-Eastern-Time ! ip subnet-zero ip classless ip name-server 65.106.1.196 65.106.7.196 ip default-gateway 67.152.240.225 ip routing ! no auto-config ! event-history on no logging forwarding no logging email logging email priority-level info ! service password-encryption ! username "pwebber" password encrypted "151c2fb1fcfaec69076c6c2184e0a21588ac" username "admin" password encrypted "2523c5106c74fb131a68834f6a8f51cf3304" ! ! ip firewall no ip firewall alg msn no ip firewall alg h323 no ip firewall alg sip ! ! ! ! ! ! ! ! ! ip dhcp-server excluded-address 192.168.1.200 192.168.1.255 ! ip dhcp-server pool "Local PCs" network 192.167.1.0 255.255.255.0 domain-name "allcomm.local" dns-server 192.167.1.204 192.167.1.200 netbios-name-server 192.167.1.200 netbios-node-type h-node default-router 192.167.1.240 lease 8 4 0 option 66 ascii tftp://192.167.1.210 option 2 hex 0xFFFFB9B0 option 4 ip 192.167.1.200 option 160 ascii http://allcommcic1.allcomm.local:8088 ! ip crypto ! crypto ike client configuration pool "Allcomm VPN access" ip-range 192.167.2.1 192.167.2.254 dns-server 192.167.1.200 192.167.1.204 netbios-name-server 192.167.1.200 ! crypto ike policy 100 initiate main respond anymode local-id address 67.152.240.226 peer 12.51.161.178 attribute 3 encryption 3des hash md5 authentication pre-share ! crypto ike policy 101 no initiate respond anymode local-id fqdn vpn.goallcomm.com peer any client configuration pool "Allcomm VPN access" attribute 1 encryption 3des hash md5 authentication pre-share ! crypto ike policy 102 initiate main respond anymode local-id address 67.152.240.226 peer 64.3.7.154 attribute 3 encryption 3des hash md5 authentication pre-share ! crypto ike policy 103 initiate main respond anymode local-id address 67.152.240.226 peer 65.44.167.50 attribute 3 encryption 3des hash md5 authentication pre-share ! crypto ike policy 104 initiate main respond anymode local-id address 67.152.240.226 peer 74.7.237.46 attribute 3 encryption 3des hash md5 authentication pre-share ! crypto ike policy 105 initiate main respond anymode local-id address 67.152.240.226 peer 74.7.237.50 attribute 3 encryption 3des hash md5 authentication pre-share ! crypto ike policy 106 initiate main respond anymode local-id address 67.152.240.226 peer 66.79.219.18 attribute 1 encryption 3des hash md5 authentication pre-share ! crypto ike remote-id user-fqdn bberry@goallcomm.com preshared-key Goallcomm1 ike-policy 101 crypto map VPN 20 no-xauth crypto ike remote-id user-fqdn dolson@goallcomm.com preshared-key Goallcomm1 ike-policy 101 crypto map VPN 20 no-xauth crypto ike remote-id user-fqdn jgiannola@goallcomm.com preshared-key Goallcomm1 ike-policy 101 crypto map VPN 20 no-xauth crypto ike remote-id user-fqdn mhenry@goallcomm.com preshared-key Goallcomm1 ike-policy 101 crypto map VPN 20 no-xauth crypto ike remote-id user-fqdn mszlaga@goallcomm.com preshared-key Goallcomm1 ike-policy 101 crypto map VPN 20 no-xauth crypto ike remote-id user-fqdn paul.moore@goallcomm.com preshared-key Goallcomm1 ike-policy 101 crypto map VPN 20 no-xauth crypto ike remote-id user-fqdn pspagnuolo@goallcomm.com preshared-key Goallcomm1 ike-policy 101 crypto map VPN 20 no-xauth crypto ike remote-id address 12.51.161.178 preshared-key Goallcomm1 ike-policy 100 crypto map VPN 10 no-mode-config no-xauth crypto ike remote-id address 64.3.7.154 preshared-key Goallcomm1 ike-policy 102 crypto map VPN 30 no-mode-config no-xauth crypto ike remote-id address 65.44.167.50 preshared-key Goallcomm1 ike-policy 103 crypto map VPN 40 no-mode-config no-xauth crypto ike remote-id address 66.79.219.18 preshared-key Goallcomm1 ike-policy 106 crypto map VPN 70 no-mode-config no-xauth crypto ike remote-id address 74.7.237.46 preshared-key Goallcomm1 ike-policy 104 crypto map VPN 50 no-mode-config no-xauth crypto ike remote-id address 74.7.237.50 preshared-key Goallcomm1 ike-policy 105 crypto map VPN 60 no-mode-config no-xauth ! crypto ipsec transform-set esp-3des-esp-md5-hmac esp-3des esp-md5-hmac mode tunnel ! crypto map VPN 10 ipsec-ike description Porretta Novi match address VPN-10-vpn-selectors set peer 12.51.161.178 set transform-set esp-3des-esp-md5-hmac ike-policy 100 crypto map VPN 20 ipsec-ike description Allcomm VPN access match address VPN-20-vpn-selectors set transform-set esp-3des-esp-md5-hmac ike-policy 101 mobile crypto map VPN 30 ipsec-ike description AssociatedDerm Commerce match address VPN-30-vpn-selectors1 set peer 64.3.7.154 set transform-set esp-3des-esp-md5-hmac ike-policy 102 crypto map VPN 40 ipsec-ike description AssociatedDerm WB match address VPN-40-vpn-selectors1 set peer 65.44.167.50 set transform-set esp-3des-esp-md5-hmac ike-policy 103 crypto map VPN 50 ipsec-ike description MCFC - Dearborn match address VPN-50-vpn-selectors1 set peer 74.7.237.46 set transform-set esp-3des-esp-md5-hmac ike-policy 104 crypto map VPN 60 ipsec-ike description MCFC - Clinton match address VPN-60-vpn-selectors1 set peer 74.7.237.50 set transform-set esp-3des-esp-md5-hmac ike-policy 105 crypto map VPN 70 ipsec-ike description Porretta Southfield match address VPN-70-vpn-selectors set peer 66.79.219.18 set transform-set esp-3des-esp-md5-hmac ike-policy 106 ! qos cos-map 1 0 1 qos cos-map 2 2 3 qos cos-map 3 4 qos cos-map 4 5 6 7 qos queue-type strict-priority ! qos dscp-cos 0 8 16 24 32 40 48 56 to 0 1 2 3 4 5 6 7 ! ! ! vlan 1 name "Default" vlan 2 name "Public" vlan 6 name "BCM" ! interface eth 0/1 spanning-tree edgeport no shutdown switchport mode trunk qos default-cos 5 ! interface eth 0/2 spanning-tree edgeport no shutdown switchport mode trunk qos default-cos 5 ! interface eth 0/3 spanning-tree edgeport no shutdown qos default-cos 5 ! interface eth 0/4 spanning-tree edgeport no shutdown qos default-cos 5 ! interface eth 0/5 spanning-tree edgeport no shutdown ! interface eth 0/6 spanning-tree edgeport no shutdown switchport access vlan 6 qos default-cos 5 no lldp send-and-receive ! interface eth 0/7 spanning-tree edgeport no shutdown ! interface eth 0/8 spanning-tree edgeport no shutdown qos default-cos 5 ! interface eth 0/9 spanning-tree edgeport no shutdown ! interface eth 0/10 description Lab PC spanning-tree edgeport no shutdown ! interface eth 0/11 description BCM Test Port spanning-tree edgeport no shutdown ! interface eth 0/12 spanning-tree edgeport no shutdown ! interface eth 0/13 description Card access spanning-tree edgeport no shutdown ! interface eth 0/14 spanning-tree edgeport no shutdown ! interface eth 0/15 spanning-tree edgeport no shutdown ! interface eth 0/16 spanning-tree edgeport no shutdown ! interface eth 0/17 spanning-tree edgeport no shutdown ! interface eth 0/18 no shutdown ! interface eth 0/19 spanning-tree edgeport no shutdown ! interface eth 0/20 spanning-tree edgeport no shutdown ! interface eth 0/21 spanning-tree edgeport no shutdown switchport access vlan 6 ! interface eth 0/22 spanning-tree edgeport no shutdown switchport access vlan 2 ! interface eth 0/23 spanning-tree edgeport no shutdown switchport access vlan 2 ! interface eth 0/24 description Uplink to SBC spanning-tree edgeport no shutdown switchport access vlan 2 ! ! interface vlan 1 ip address 192.167.1.240 255.255.255.0 access-policy Private no shutdown interface vlan 2 description External Connection ip address 192.167.1.240 255.255.255.0 access-policy Private no shutdown interface vlan 2 description External Connection ip address 67.152.240.226 255.255.255.248 ip address 67.152.240.227 255.255.255.248 secondary ip address 67.152.240.228 255.255.255.248 secondary ip address 67.152.240.229 255.255.255.248 secondary ip address 67.152.240.230 255.255.255.248 secondary access-policy Public crypto map VPN no shutdown interface vlan 6 ip address 192.168.15.1 255.255.255.0 access-policy BCM no shutdown ! ! interface t1 1/1 description Connect to Netopia Router no shutdown ! ! ! ! ! ! ip access-list standard wizard-ics remark Internet Connection Sharing permit any ! ! ip access-list extended self remark Traffic to Netvanta permit ip any any log ! ip access-list extended VPN-10-vpn-selectors permit ip 192.167.1.0 0.0.0.255 192.168.124.0 0.0.0.255 ! ip access-list extended VPN-20-vpn-selectors permit ip 192.167.1.0 0.0.0.255 192.167.2.0 0.0.0.255 ! ip access-list extended VPN-30-vpn-selectors1 permit ip 192.167.1.0 0.0.0.255 192.168.4.0 0.0.0.255 ! ip access-list extended VPN-40-vpn-selectors1 permit ip 192.167.1.0 0.0.0.255 192.168.1.0 0.0.0.255 ! ip access-list extended VPN-50-vpn-selectors1 permit ip 192.167.1.0 0.0.0.255 192.168.2.0 0.0.0.255 ! ip access-list extended VPN-60-vpn-selectors1 permit ip 192.167.1.0 0.0.0.255 192.168.3.0 0.0.0.255 ! ip access-list extended VPN-70-vpn-selectors permit ip 192.167.1.0 0.0.0.255 192.168.125.0 0.0.0.255 log ! ip access-list extended web-acl-10 remark Remote Admin permit tcp any any eq telnet log remark Remote Admin permit tcp any any eq telnet log permit tcp any any eq ssh log permit icmp any any echo log ! ip access-list extended web-acl-14 remark ACSERVX permit ip host 192.167.1.204 any ! ip access-list extended web-acl-15 remark Voxitas to I3 SIP & RTP, UDP & TCP permit tcp any host 67.152.240.226 range 5004 5082 log permit udp any host 67.152.240.226 range 5004 5082 log permit tcp any host 67.152.240.226 range 10001 20000 log permit udp any host 67.152.240.226 range 10001 20000 log ! ip access-list extended web-acl-18 remark Allcomm1 permit ip host 192.167.1.200 any ! ip access-list extended web-acl-19 remark Allcomm1 permit tcp any host 67.152.240.228 eq ftp-data log permit tcp any host 67.152.240.228 eq ftp log permit tcp any host 67.152.240.228 eq smtp log permit tcp any host 67.152.240.228 eq www log permit tcp any host 67.152.240.228 eq 143 log permit tcp any host 67.152.240.228 eq https log permit tcp any host 67.152.240.228 eq 2000 log permit tcp any host 67.152.240.228 eq 3389 log permit tcp any host 67.152.240.228 eq 4125 log ! ip access-list extended web-acl-20 remark ACServX permit tcp any host 67.152.240.230 eq ftp-data log permit tcp any host 67.152.240.230 eq ftp log permit tcp any host 67.152.240.230 eq www log permit tcp any host 67.152.240.230 eq https log permit tcp any host 67.152.240.230 eq 2002 log ! ip access-list extended web-acl-21 remark Allcom2 permit ip host 192.167.1.201 any ! ip access-list extended web-acl-22 remark Allcom2 permit tcp any host 67.152.240.227 eq ftp-data log permit tcp any host 67.152.240.227 eq ftp log permit tcp any host 67.152.240.227 eq www log permit tcp any host 67.152.240.227 eq https log permit tcp any host 67.152.240.227 eq 2000 log ! ip access-list extended web-acl-23 remark BCM permit ip any any ! ip access-list extended web-acl-24 remark BCM ! ip access-list extended web-acl-24 remark BCM permit ip any any ! ip access-list extended web-acl-27 remark Traffic to Netvanta permit ip any any ! ip access-list extended web-acl-28 remark NAT list wizard-ics permit ip any any log ! ip access-list extended web-acl-8 remark ACTestBench permit ip any host 67.152.240.229 log ! ip access-list extended web-acl-9 remark ACTestBench permit ip host 192.167.1.250 any ! ip policy-class BCM allow list VPN-70-vpn-selectors stateless allow list web-acl-23 policy Private stateless allow list web-acl-27 self nat source list web-acl-28 interface vlan 2 overload ! ip policy-class Private allow list web-acl-24 policy BCM stateless allow list VPN-60-vpn-selectors1 allow list VPN-50-vpn-selectors1 allow list VPN-40-vpn-selectors1 allow list VPN-30-vpn-selectors1 allow list VPN-20-vpn-selectors stateless allow list VPN-70-vpn-selectors stateless allow list VPN-10-vpn-selectors stateless nat source list web-acl-18 address 67.152.240.228 overload nat source list web-acl-21 address 67.152.240.227 overload nat source list web-acl-9 address 67.152.240.229 overload nat source list web-acl-14 address 67.152.240.230 overload allow list self self nat source list wizard-ics interface vlan 2 overload ! ip policy-class Public allow reverse list VPN-70-vpn-selectors stateless allow reverse list VPN-10-vpn-selectors stateless allow reverse list VPN-60-vpn-selectors1 allow reverse list VPN-50-vpn-selectors1 allow reverse list VPN-40-vpn-selectors1 allow reverse list VPN-30-vpn-selectors1 stateless allow reverse list VPN-20-vpn-selectors stateless nat destination list web-acl-15 address 192.168.15.100 nat destination list web-acl-19 address 192.167.1.200 nat destination list web-acl-22 address 192.167.1.201 nat destination list web-acl-8 address 192.167.1.250 nat destination list web-acl-20 address 192.167.1.204 allow list web-acl-10 self ! ! nat source list web-acl-9 address 67.152.240.229 overload nat source list web-acl-14 address 67.152.240.230 overload allow list self self nat source list wizard-ics interface vlan 2 overload ! ip policy-class Public allow reverse list VPN-70-vpn-selectors stateless allow reverse list VPN-10-vpn-selectors stateless allow reverse list VPN-60-vpn-selectors1 allow reverse list VPN-50-vpn-selectors1 allow reverse list VPN-40-vpn-selectors1 allow reverse list VPN-30-vpn-selectors1 stateless allow reverse list VPN-20-vpn-selectors stateless nat destination list web-acl-15 address 192.168.15.100 nat destination list web-acl-19 address 192.167.1.200 nat destination list web-acl-22 address 192.167.1.201 nat destination list web-acl-8 address 192.167.1.250 nat destination list web-acl-20 address 192.167.1.204 allow list web-acl-10 self ! ! ! ip route 0.0.0.0 0.0.0.0 67.152.240.225 ! no ip tftp server no ip tftp server overwrite ip http server no ip http secure-server ip http language English no ip snmp agent no ip ftp server no ip scp server no ip sntp server ! ! ! ! ! ! ! ! ! line con 0 no login ! line telnet 0 4 login password encrypted 2f276d40e01aaad68379dff3045b5a8dbd9f no shutdown line ssh 0 4 login local-userlist no shutdown ! ! ! ! ! end