SLAPPA.ORG

83x Example
(In this example 10.0.1.0/24 is the local network. And 10.0.0.0/24 is the remote network.)

crypto isakmp policy 10
encr 3des
hash md5
authen pre-share

crypto isakmp key MyCrypt0k3y address x.x.x.x (Address of remote site)

crypto ipsec transform-set MD5DES ah-md5-hmac esp-des

crypto map VPN 10 ipsec-isakmp
description Link to Head Office
set peer x.x.x.x (Address of remote site)
set transform-set MD5DES
match address IPSEC-HO

interface Dialer1 (Internet Interface)
crypto map VPN

ip nat inside source list LocalNATNetworks interface Dialer1 overload

ip access-list extended IPSEC-HO
remark IPESEC Match List- Site to Head Office
permit ip 10.0.1.0 0.0.0.255 10.0.0.0 0.0.0.255

ip access-list extended LocalNATNetworks
remark Don’t Nat VPN Traffic
deny ip 10.0.1.0 0.0.0.255 10.0.0.0 0.0.0.255
remark NAT local Network
permit ip 10.0.1.0 0.0.0.255 any