sh run Building configuration... Current configuration : 1582 bytes ! version 12.3 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router ! boot-start-marker boot-end-marker ! ! memory-size iomem 25 mmi polling-interval 60 no mmi auto-configure no mmi pvc mmi snmp-timeout 180 no aaa new-model ip subnet-zero ! ! ! ip dhcp pool testpool network 192.168.70.0 255.255.255.0 default-router 192.168.70.1 domain-name domain.ca dns-server 192.168.10.240 192.168.10.246 ! ip cef ip audit po max-events 100 ! ! ! ! ! ! crypto isakmp policy 1 encr 3des hash md5 authentication pre-share group 2 crypto isakmp key !firefight! address 66.x.x.116 ! ! crypto ipsec transform-set weak esp-3des esp-md5-hmac ! crypto map vpn 10 ipsec-isakmp set peer 66.x.x.116 set transform-set weak match address 115 ! ! ! interface Ethernet0 ip address 192.168.70.1 255.255.255.0 ip nat inside full-duplex no cdp log mismatch duplex ! interface FastEthernet0 ip address 216.x.x.40 255.255.255.0 ip nat outside speed auto crypto map vpn ! ip nat inside source route-map nonat interface FastEthernet0 overload ip classless ip route 0.0.0.0 0.0.0.0 externalgatewayaddress ip http server no ip http secure-server ! ! access-list 110 deny ip 192.168.70.0 0.0.0.255 192.168.10.0 0.0.0.255 access-list 110 deny ip 192.168.70.0 0.0.0.255 192.168.40.0 0.0.0.255 access-list 110 deny ip 192.168.70.0 0.0.0.255 192.168.60.0 0.0.0.255 access-list 110 permit ip 192.168.70.0 0.0.0.255 any access-list 115 permit ip 192.168.70.0 0.0.0.255 192.168.10.0 0.0.0.255 access-list 115 permit ip 192.168.70.0 0.0.0.255 192.168.40.0 0.0.0.255 access-list 115 permit ip 192.168.70.0 0.0.0.255 192.168.60.0 0.0.0.255 ! route-map nonat permit 10 match ip address 110 ! ! ! line con 0 line aux 0 line vty 0 4 login ! end