SM#sh run Building configuration... Current configuration : 2482 bytes ! version 12.4 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname SM ! boot-start-marker boot-end-marker ! no logging buffered enable secret 5 $1$Czap$UTFXOMRj2LSJJ8J35Rj0z1 ! no aaa new-model ! resource policy ! ip subnet-zero ip cef ! ! no ip dhcp use vrf connected ! ! no ip domain lookup no ip ips deny-action ips-interface ! ! ! username zaid privilege 15 secret 5 $1$q0XZd0 ! ! ! crypto isakmp policy 1 encr 3des hash md5 authentication pre-share group 2 crypto isakmp key hello address 192.168.93.254 crypto isakmp keepalive 10 ! crypto ipsec security-association lifetime seconds 86400 ! crypto ipsec transform-set vpntest esp-3des esp-md5-hmac ! crypto map vpntest 10 ipsec-isakmp set peer 192.168.93.254 set transform-set vpntest match address 101 ! ! ! interface ATM0 no ip address backup delay 3 3 backup interface Async1 no atm ilmi-keepalive pvc 0/35 pppoe-client dial-pool-number 1 ! dsl operating-mode auto ! interface FastEthernet0 switchport access vlan 2 ! interface FastEthernet1 ! interface FastEthernet2 ! interface FastEthernet3 ! interface Vlan1 ip address 192.168.3.254 255.255.255.0 ip tcp adjust-mss 1460 ! interface Vlan2 ip address 192.168.28.251 255.255.255.0 ! interface Async1 ip address negotiated encapsulation ppp dialer in-band dialer string 13134569 dialer-group 1 ppp authentication pap callin ppp pap sent-username smbackup password 7 182F3D23 crypto map vpntest ! interface Dialer1 ip address negotiated encapsulation ppp dialer pool 1 ppp authentication pap callin ppp pap sent-username dsl password 7 01F08 crypto map vpntest ! ip classless ip route 0.0.0.0 0.0.0.0 Async1 ip route 0.0.0.0 0.0.0.0 Dialer1 5 ! ! ip http server ip http authentication local no ip http secure-server ip http timeout-policy idle 600 life 86400 requests 10000 ! access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.0.0 0.0.0.255 access-list 101 permit ip 192.168.3.0 0.0.0.255 172.16.0.0 0.0.15.255 dialer-list 1 protocol ip permit snmp-server community DWP RW snmp-server community daw RO no cdp run ! ! control-plane ! ! line con 0 password 7 0756 logging synchronous login modem autoconfigure discovery modem enable line aux 0 line vty 0 4 exec-timeout 120 0 password 7 0302 login length 0 ! scheduler max-task-time 5000 end SM# ########### HEAD OFFICE ROUTER CRYPTO CONFIG ############### crypto isakmp policy 1 encr 3des hash md5 authentication pre-share group 2 crypto isakmp key hello address 0.0.0.0 0.0.0.0 crypto isakmp keepalive 10 ! crypto ipsec security-association lifetime seconds 86400 ! crypto ipsec transform-set rtpset esp-3des esp-md5-hmac ! crypto dynamic-map rtpmap 10 set transform-set rtpset match address 107 ! ! crypto map rtptrans local-address Loopback0 crypto map rtptrans 10 ipsec-isakmp dynamic rtpmap !