crypto keyring spokes pre-shared-key address 0.0.0.0 0.0.0.0 key xxxxxx crypto isakmp key xxxx address x.x.x.x no-xauth crypto isakmp key xxxx address x.x.x.x no-xauth crypto isakmp key xxxx address x.x.x.x no-xauth crypto isakmp client configuration group CiscoClient key xxx dns x.x.x.x x.x.x.x wins x.x.x.x domain x.com pool VPNpool crypto isakmp profile L2L description lan to lan profile keyring spokes match identity address 0.0.0.0 crypto isakmp profile VPNclient description vpn clients match identity group CiscoClient client authentication list VPNauthen isakmp authorization list VPNauthor client configuration address respond crypto ipsec transform-set 3des esp-3des esp-md5-hmac crypto ipsec transform-set aes esp-aes esp-md5-hmac crypto dynamic-map DYNmap 20 description VPN Clients set transform-set 3des set isakmp-profile VPNclient reverse-route crypto dynamic-map DYNmap 30 set transform-set 3des set pfs group2 set isakmp-profile L2L crypto map lim 115 ipsec-isakmp set peer x.x.x.x set transform-set 3des match address 115 reverse-route crypto map lim 116 ipsec-isakmp set peer x.x.x.x set transform-set 3des set pfs group2 match address 116 crypto map lim 164 ipsec-isakmp set peer x.x.x.x set transform-set 3des match address 164 reverse-route crypto map lim 199 ipsec-isakmp dynamic DYNmap