floodguard enable sysopt connection permit-ipsec crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac crypto map outside1_map 20 ipsec-isakmp crypto map outside1_map 20 match address outside1_cryptomap_20 crypto map outside1_map 20 set pfs group2 crypto map outside1_map 20 set peer 200.x.x.138 crypto map outside1_map 20 set transform-set ESP-3DES-SHA crypto map outside1_map 20 set security-association lifetime seconds 7200 kilobytes 4608000 crypto map outside1_map interface outside1 isakmp enable inside isakmp enable outside1 isakmp key ******** address 200.x.x.138 netmask 255.255.255.255 no-xauth no-config-mode isakmp keepalive 10 isakmp nat-traversal 20 isakmp policy 20 authentication pre-share isakmp policy 20 encryption 3des isakmp policy 20 hash sha isakmp policy 20 group 2 isakmp policy 20 lifetime 28800