PIX Version 6.3(5)
interface ethernet0 auto
interface ethernet1 auto
interface ethernet2 auto shutdown
interface ethernet3 auto shutdown


access-list encrypt-acl permit ip 172.0.0.0 255.0.0.0 192.168.120.0 255.255.255.0 

access-list clsvpn permit ip 172.20.0.0 255.255.0.0 172.17.0.0 255.255.0.0 

access-list brisol permit ip 172.0.0.0 255.0.0.0 192.168.20.0 255.255.255.0 
access-list brisol permit ip 172.0.0.0 255.0.0.0 192.168.30.0 255.255.255.0 
access-list brisol permit ip 192.168.215.0 255.255.255.0 192.168.30.0 255.255.255.0 
access-list brisol permit ip 192.168.215.0 255.255.255.0 192.168.20.0 255.255.255.0 
access-list brisol permit ip 10.1.0.0 255.255.0.0 192.168.20.0 255.255.255.0 
access-list brisol permit ip 10.1.0.0 255.255.0.0 192.168.30.0 255.255.255.0 

access-list nonat-acl permit ip 172.0.0.0 255.0.0.0 192.168.20.0 255.255.255.0 
access-list nonat-acl permit ip 172.0.0.0 255.0.0.0 192.168.30.0 255.255.255.0 
access-list nonat-acl permit ip 192.168.215.0 255.255.255.0 192.168.30.0 255.255.255.0 
access-list nonat-acl permit ip 192.168.215.0 255.255.255.0 192.168.20.0 255.255.255.0 
access-list nonat-acl permit ip 10.1.0.0 255.255.0.0 192.168.20.0 255.255.255.0 
access-list nonat-acl permit ip 10.1.0.0 255.255.0.0 192.168.30.0 255.255.255.0 
access-list nonat-acl permit ip 172.0.0.0 255.0.0.0 192.168.120.0 255.255.255.0 

ip address outside 69.24.43.130 255.255.255.240
ip address inside 172.20.16.2 255.255.252.0


sysopt connection permit-ipsec
crypto ipsec transform-set clsset esp-3des esp-md5-hmac 
crypto ipsec transform-set aptset esp-3des esp-md5-hmac 



crypto map cry_map 10 ipsec-isakmp
crypto map cry_map 10 match address brisol
crypto map cry_map 10 set peer 88.221.227.216
crypto map cry_map 10 set transform-set clsset

crypto map cry_map 20 ipsec-isakmp
crypto map cry_map 20 match address brisol
crypto map cry_map 20 set peer 173.24.125.54
crypto map cry_map 20 set transform-set clsset

crypto map cry_map interface outside
isakmp enable outside

isakmp key ******** address 173.24.125.54 netmask 255.255.255.255 
isakmp key ******** address 88.221.227.216 netmask 255.255.255.255 

isakmp identity address
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption 3des
isakmp policy 10 hash md5
isakmp policy 10 group 2
isakmp policy 10 lifetime 3600