SM#sh run
Building configuration...

Current configuration : 2359 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Dawlance_SM
!
boot-start-marker
boot-end-marker
!
no logging buffered
enable secret 5 $1
!
no aaa new-model
!
resource policy
!
ip subnet-zero
ip cef
!
!
no ip dhcp use vrf connected
!
!
no ip domain lookup
no ip ips deny-action ips-interface
!
!
!
username zaid privilege 15 secret 5 $d0
!
!
!
crypto isakmp policy 1
 encr 3des
 hash md5
 authentication pre-share
 group 2
crypto isakmp key hello address 192.168.93.254
crypto isakmp keepalive 10
!
crypto ipsec security-association lifetime seconds 86400
!
crypto ipsec transform-set vpntest esp-3des esp-md5-hmac
!
crypto map vpntest 10 ipsec-isakmp
 set peer 192.168.93.254
 set transform-set vpntest
 match address 101
!
!
!
interface ATM0
 no ip address
 load-interval 30
 no atm ilmi-keepalive
 pvc 0/35
  pppoe-client dial-pool-number 1
 !
 dsl operating-mode auto
!
interface FastEthernet0
 switchport access vlan 2
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
 ip address 192.168.3.254 255.255.255.0
 ip tcp adjust-mss 1452
!
interface Vlan2
 ip address 192.168.28.251 255.255.255.0
 crypto map vpntest
!
interface Dialer1
 ip address negotiated
 ip mtu 1492
 encapsulation ppp
 dialer pool 1
 ppp authentication pap callin
 ppp pap sent-username lancedsl password 7 0708
 crypto map vpntest
!
router eigrp 10
 redistribute static
 network 192.168.3.0
 network 192.168.28.0
 no auto-summary
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.28.250   (this is the wan interface ip of the head office router)

ip route 0.0.0.0 0.0.0.0 Dialer1 50
!
!
ip http server
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
!
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.0.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 172.16.0.0 0.0.15.255
dialer-list 1 protocol ip permit
snmp-server community PK RW
snmp-server community lance RO
no cdp run
!
!
control-plane
!
!
line con 0
 password 7 000
 logging synchronous
 login
 modem autoconfigure discovery
 modem enable
line aux 0
line vty 0 4
 exec-timeout 120 0
 password 7 002
 login
 length 0
!
scheduler max-task-time 5000
end

SM#