REMOTE Office


crypto isakmp policy 1
 encr 3des
 hash md5
 authentication pre-share
 group 2

crypto isakmp key HIDDEN address 25.25.25.25


crypto ipsec transform-set TS esp-3des esp-md5-hmac
 mode tunnel


crypto map CMAP 10 ipsec-isakmp
 set peer 25.25.25.25
 set transform-set TS
 match address VPN-TRAFFIC


interface FastEthernet4
 ip address 33.33.33.33 255.255.255.252
 ip nat outside
 ip virtual-reassembly in
 duplex auto
 speed auto
 crypto map CMAP

interface Vlan1
 ip address 192.168.51.253 255.255.255.0
 ip nat inside
 ip virtual-reassembly in


ip nat inside source list FAST4 interface FastEthernet4 overload

ip route 0.0.0.0 0.0.0.0 33.33.33.32
!
ip access-list extended FAST4
 deny   ip 192.168.51.0 0.0.0.255 192.168.50.0 0.0.0.255
 deny   ip 192.168.51.0 0.0.0.255 172.16.2.0 0.0.0.255
 deny   ip 192.168.51.0 0.0.0.255 172.16.201.4 0.0.0.3
 permit ip 192.168.51.0 0.0.0.255 any

ip access-list extended VPN-TRAFFIC
 permit ip 192.168.51.0 0.0.0.255 192.168.50.0 0.0.0.255
 permit ip 192.168.51.0 0.0.0.255 172.16.0.0 0.0.255.255