version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
no aaa new-model
resource policy
ip cef
no ip domain lookup
!
crypto isakmp policy 10
 encr 3des
 hash md5
 authentication pre-share
crypto isakmp key ciscokey address 10.128.90.128
!
!
crypto ipsec transform-set myset esp-3des esp-md5-hmac
 mode transport
!
crypto map mymap local-address Loopback0
!
crypto map myvpn 10 ipsec-isakmp
 set peer 10.128.90.128
 set transform-set myset
 match address 101
!
interface Loopback0
 ip address 212.71.17.65 255.255.255.255
!
interface FastEthernet0/0
 ip address 10.1.1.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 duplex half
!
interface Serial1/1
 ip address 200.1.1.1 255.255.255.0
 ip nat outside
 ip virtual-reassembly
 serial restart-delay 0
 crypto map myvpn
!
router eigrp 100
 redistribute connected
 network 200.1.1.0
 no auto-summary
!
no ip http server
no ip http secure-server
!
ip nat inside source list 122 interface Serial1/1 overload
!
logging alarm informational
access-list 101 permit ip 10.1.1.0 0.0.0.255 172.16.1.0 0.0.0.255
access-list 122 deny   ip 10.1.1.0 0.0.0.255 172.16.1.0 0.0.0.255
access-list 122 permit ip 10.1.1.0 0.0.0.255 any
!
control-plane
gatekeeper
 shutdown
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login
!
!
end