Current configuration : 9749 bytes
!
version 12.4
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname 1156
!
boot-start-marker
boot-end-marker
!
!
!
aaa new-model
!
!
aaa authentication login default local
!
aaa session-id common
!
resource policy
!
clock timezone CST -6
clock summer-time CDT recurring
!
!
ip cef
!
!
no ip domain lookup
ip domain name *.com
ip inspect name firewall tcp
ip inspect name firewall dns
ip inspect name firewall ftp
ip inspect name firewall h323
ip inspect name firewall rtsp
ip inspect name firewall sip
ip inspect name firewall skinny
ip inspect name firewall smtp
ip inspect name firewall sqlnet
ip inspect name firewall tftp
ip inspect name firewall udp
ip inspect name firewall http
ip inspect name firewall https
!
!
voice-card 0
 no dspfarm
!
!
!
!
!
!
! 
!
crypto isakmp policy 10
 encr 3des
 authentication pre-share
crypto isakmp key *** address ***
!
!
crypto ipsec transform-set abc esp-3des esp-sha-hmac 
!
crypto map lft 10 ipsec-isakmp 
 set peer ***
 set transform-set abc 
 match address 102
 qos pre-classify
!
!
!
!
!
interface GigabitEthernet0/0
 description Connect to DSL Modem
 ip address * 255.255.255.248
 ip inspect firewall out
 ip virtual-reassembly
 duplex auto
 speed auto
 media-type rj45
 crypto map lft
!
!
!
interface ATM0/0/0
 no ip address
 shutdown
 no atm ilmi-keepalive
 dsl operating-mode auto 
!
interface GigabitEthernet0/1/0
 description Corp Network
 ip address 192.168.204.1 255.255.255.0
 ip flow ingress
 ip flow egress
 ip virtual-reassembly
 ip tcp adjust-mss 1452
 negotiation auto
!
router eigrp 10
 network 192.168.204.0
 no auto-summary
!
ip route 0.0.0.0 0.0.0.0 ***
!
ip flow-cache timeout active 1
ip flow-export version 5 peer-as
ip flow-export source GigabitEthernet0/1/0
ip flow-export destination 192.168.32.144 2055
!
!
access-list 102 remark IPsec-Interesting-Traffic
access-list 102 permit ip 192.168.204.0 0.0.0.255 192.168.0.0 0.0.255.255
access-list 102 permit ip 192.168.204.0 0.0.0.255 10.253.0.0 0.0.255.255
access-list 102 permit ip 192.168.204.0 0.0.0.255 192.83.226.0 0.0.0.255
access-list 102 permit ip 192.168.204.0 0.0.0.255 192.83.227.0 0.0.0.255
access-list 102 permit ip 192.168.204.0 0.0.0.255 198.51.24.0 0.0.7.255