VPN用户权限过大。求助

haman

我是一个初级用户，碰到一个VPN的小问题，就是用户的权限太大不知道如何设置。<br>
具体问题如下：<br>
通过WINDOWS2000自带的PPP VPN虚拟隧道连接。路由上设置了用户和密码，可是现在我发现居然在用户名和密码上空的也能连接。所以我想控制这个漏洞，不知道如何进行具体的设置。<br>
<br>
现在具体的设置如下：<br>
XXXX>en<br>
Password:<br>
XXXX#show run<br>
Building configuration...<br>
<br>
Current configuration : 2539 bytes<br>
!<br>
version 12.3<br>
service timestamps debug datetime msec<br>
service timestamps log datetime msec<br>
service password-encryption<br>
!<br>
hostname XXX<br>
!<br>
boot-start-marker<br>
boot-end-marker<br>
!<br>
enable secret level 7 5 $1$uja1$50zoee.tAYUDgzjUPGt8n/<br>
enable password 7 094F471A1A0A<br>
!<br>
username cisco password 7 110A1016141D<br>
aaa new-model<br>
!<br>
!<br>
aaa authentication login userauth local<br>
aaa authorization network groupauth local<br>
aaa session-id common<br>
ip subnet-zero<br>
!<br>
!<br>
<br>
XXXX#en<br>
XXXX#show run<br>
Building configuration...<br>
<br>
Current configuration : 2539 bytes<br>
!<br>
version 12.3<br>
service timestamps debug datetime msec<br>
service timestamps log datetime msec<br>
service password-encryption<br>
!<br>
hostname XXXX<br>
!<br>
boot-start-marker<br>
boot-end-marker<br>
!<br>
enable secret level 7 5 $1$uja1$50zoee.tAYUDgzjUPGt8n/<br>
enable password 7 094F471A1A0A<br>
!<br>
username cisco password 7 110A1016141D<br>
aaa new-model<br>
!<br>
!<br>
aaa authentication login userauth local<br>
aaa authorization network groupauth local<br>
aaa session-id common<br>
ip subnet-zero<br>
!<br>
!<br>
no ip domain lookup<br>
ip domain name nnbus.com<br>
!<br>
ip audit notify log<br>
ip audit po max-events 100<br>
vpdn enable<br>
!<br>
vpdn-group PPTP_Windows<br>
! Default PPTP VPDN group<br>accept-dialin<br>protocol pptp<br>virtual-template 1<br>
!<br>
no ftp-server write-enable<br>
!<br>
!<br>
!<br>
crypto isakmp policy 3<br>hash md5<br>authentication pre-share<br>group 2<br>
crypto isakmp client configuration address-pool local ippool<br>
!<br>
crypto isakmp client configuration group haman<br>key haman<br>pool ippool<br>
!<br>
crypto isakmp client configuration group hamanclient<br>key hamancisco123<br>pool ippool<br>acl 133<br>
!<br>
!<br>
crypto ipsec transform-set myset esp-des esp-md5-hmac<br>
!<br>
crypto dynamic-map dynmap 10<br>set transform-set myset<br>
!<br>
!<br>
crypto map clientmap client authentication list userauth<br>
crypto map clientmap isakmp authorization list groupauth<br>
crypto map clientmap client configuration address respond<br>
crypto map clientmap 10 ipsec-isakmp dynamic dynmap<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
interface FastEthernet0/0<br>ip address 192.168.5.1 255.255.255.0<br>ip nat inside<br>duplex auto<br>speed auto<br>
!<br>
interface Serial0/0<br>ip address 10.101.206.22 255.255.255.240 secondary<br>ip address 10.101.206.21 255.255.255.240 secondary<br>ip address 10.254.101.122 255.255.255.240<br>ip accounting output-packets<br>ip nat outside<br>crypto map clientmap<br>
!<br>
interface FastEthernet0/1<br>no ip address<br>shutdown<br>duplex auto<br>speed auto<br>
!<br>
interface Virtual-Template1<br>ip unnumbered Serial0/0<br>peer default ip address pool ippool<br>no keepalive<br>ppp encrypt mppe auto<br>
!<br>
ip local pool ippool 172.145.0.8 172.145.0.8<br>
ip nat inside source list 1 interface Serial0/0 overload<br>
ip nat inside source static 172.145.0.8 10.101.206.22<br>
no ip http server<br>
no ip http secure-server<br>
ip classless<br>
ip route 0.0.0.0 0.0.0.0 202.103.228.29<br>
!<br>
!<br>
access-list 1 permit 10.101.206.22 0.0.0.255<br>
access-list 133 permit ip 110.101.206.22 0.0.0.255 any<br>
access-list 133 permit ip 10.101.206.22 0.0.0.255 any<br>
!<br>
snmp-server community public RO<br>
snmp-server community private RW<br>
snmp-server enable traps tty<br>
!<br>
!<br>
!<br>
!<br>
dial-peer cor custom<br>
!<br>
!<br>
!<br>
!<br>
!<br>
line con 0<br>
line aux 0<br>
line vty 0 4<br>password 7 05080F1C2243<br>
!<br>
!<br>
!<br>
end<br>
<br>
XXXX#<br>
<br>
为了安全具体的主机名称和IP我都改过了。请谅解。<br>

bad

你可以在“管理工具”的“VPN_IAS里面做设置，如果没有这个组件请用“添加/删除Windows组件”进行添加