ip lan1 address 172.16.2.1/24 pp select 1 pp always-on on pppoe use lan2 pp auth accept pap chap pp auth myname test@yamaha test ppp ipcp ipaddress on ip pp mtu 1454 ip pp nat descriptor 1 pp enable 1 pp select 2 pp bind bri1 isdn remote address call 01 pp enable 2 tunnel select 1 ipsec tunnel 101 tunnel enable 1 ip route 172.16.1.0/24 gateway tunnel 1 ip route default gateway pp 1 nat descriptor type 1 masquerade nat descriptor address outer 1 ipcp nat descriptor address inner 1 auto nat descriptor masquerade static 1 1 172.16.2.1 esp nat descriptor masquerade static 1 2 172.16.2.1 udp 500 ipsec auto refresh on ipsec ike always-on 1 on ipsec ike keepalive log 1 off ipsec ike keepalive use 1 on ipsec ike local address 1 172.16.2.1 ipsec ike pre-shared-key 1 text router ipsec ike remote address 1 xxx.1.1.1 ipsec sa policy 101 1 esp 3des-cbc sha-hmac syslog debug on