access-list SPLITTUNNEL standard permit 172.16.10.0 255.255.255.0
access-list SPLITTUNNEL standard permit 172.20.1.0 255.255.255.0
access-list SPLITTUNNEL standard permit 192.168.0.0 255.255.255.0
access-list SPLITTUNNEL standard permit 192.168.1.0 255.255.255.0
access-list C-TEST extended permit ip 192.168.0.0 255.255.255.0 172.16.10.0 255.255.255.0
access-list C-TEST extended permit ip 192.168.0.0 255.255.255.0 172.20.1.0 255.255.255.0
access-list C-TEST extended permit ip 192.168.200.0 255.255.255.0 172.20.1.0 255.255.255.0
access-list NONAT extended permit ip 192.168.0.0 255.255.255.0 172.16.10.0 255.255.255.0
access-list NONAT extended permit ip 192.168.0.0 255.255.255.0 172.20.1.0 255.255.255.0
access-list NONAT extended permit ip 192.168.200.0 255.255.255.0 172.20.1.0 255.255.255.0

ip local pool IPPOOL 192.168.200.1-192.168.200.254 mask 255.255.255.0

nat (inside) 0 access-list NONAT

group-policy TESTgroup internal
group-policy TESTgroup attributes
 dns-server value 192.168.0.152
 vpn-tunnel-protocol IPSec
 pfs enable
 split-tunnel-policy tunnelspecified
 split-tunnel-network-list value SPLITTUNNEL
 default-domain value test.com

crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto dynamic-map outside_dyn_map 20 set pfs
crypto dynamic-map outside_dyn_map 20 set transform-set ESP-3DES-SHA
crypto map TEST-MAP 10 match address C-TEST
crypto map TEST-MAP 10 set peer 68.15.104.222
crypto map TEST-MAP 10 set transform-set ESP-AES-192-SHA ESP-3DES-MD5
crypto map TEST-MAP 20 ipsec-isakmp dynamic outside_dyn_map
crypto map TEST-MAP interface outside
crypto isakmp enable outside
crypto isakmp policy 10
 authentication pre-share
 encryption 3des
 hash sha
 group 2
 lifetime 86400

crypto isakmp policy 20
 authentication pre-share
 encryption 3des
 hash md5
 group 2
 lifetime 1440
crypto isakmp nat-traversal  20
tunnel-group TESTgroup type ipsec-ra
tunnel-group TESTgroup general-attributes
 address-pool IPPOOL
 default-group-policy TESTgroup
tunnel-group TESTgroup ipsec-attributes
 pre-shared-key *
tunnel-group 68.15.104.222 type ipsec-l2l
tunnel-group 68.15.104.222 ipsec-attributes
 pre-shared-key *