sysopt connection permit-ipsec

ip local PIX_vpn 10.10.12.100 - 10.10.12.200

isakmp policy 10 authentication pre-share
isakmp policy 10 encryption 3des
isakmp policy 10 group 1
isakmp policy 10 hash md5
isakmp policy 10 lifetime 86400

isakmp identity address
isakmp key IjasttlAasttr address 0.0.0.0 netmask 0.0.0.0
isakmp client configuration address-pool local PIX_vpn outside
isakmp enable outside




crypto ipsec transform-set vpn_client esp-3des
crypto dynamic-map vpn 1 set transform-set vpn_client

crypto map vpn 1 ipsec-isakmp dynamic vpn_client
crypto map vpn interface outside
crypto map vpn match address 110
crypto map vpn interface outside


access-list 110 permit ip 10.10.10.0 255.255.255.0 10.10.12.0 255.255.255.0
access-list 110 permit ip 10.10.12.0 255.255.255.0 10.10.10.0 255.255.255.0