ASA Version 8.0(3) ! hostname CentralASA ! interface Vlan1 nameif inside security-level 100 ip address A.B.C.254 255.255.255.0 ! interface Vlan2 nameif outside security-level 0 ip address I.J.K.L 255.255.255.248 ! interface Ethernet0/0 ! interface Ethernet0/1 switchport access vlan 2 ! [...] access-list inside_nat0_outbound extended permit ip any PoolVPN 255.255.255.240 access-list inside_nat0_outbound extended permit ip A.B.C.0 255.255.255.0 RemoteLAN 255.255.255.0 access-list outside_2_cryptomap extended permit ip A.B.C.0 255.255.255.0 RemoteLAN 255.255.255.0 [...] crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set pfs crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5 [...] crypto isakmp enable outside crypto isakmp policy 10 authentication pre-share encryption aes-256 hash md5 group 2 lifetime 86400 crypto isakmp policy 30 authentication pre-share encryption aes-256 hash sha group 2 lifetime 86400 crypto isakmp policy 50 authentication pre-share encryption 3des hash md5 group 2 lifetime 86400 crypto isakmp policy 70 authentication pre-share encryption 3des hash sha group 2 lifetime 86400 [...] tunnel-group RemoteAsa type ipsec-l2l tunnel-group RemoteASA ipsec-attributes pre-shared-key *