ASA Version 8.0(3) ! hostname remoteasa names name X.Y.Z.Y CentralLAN ! interface Vlan1 nameif inside security-level 100 ip address A.B.C.D 255.255.255.0 ! interface Vlan2 nameif outside security-level 0 ip address E.F.G.2 255.255.255.252 ! interface Ethernet0/0 ! interface Ethernet0/1 switchport access vlan 2 ! [...] access-list inside_nat0_outbound extended permit ip A.B.C.0 255.255.255.0 CentralLAN 255.255.255.0 access-list outside_1_cryptomap extended permit ip A.B.C.0 255.255.255.0 CentralLAN 255.255.255.0 [...] global (outside) 1 interface nat (inside) 0 access-list inside_nat0_outbound nat (inside) 1 0.0.0.0 0.0.0.0 route outside 0.0.0.0 0.0.0.0 E.F.G.1 1 crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac crypto map outside_map 1 match address outside_1_cryptomap crypto map outside_map 1 set pfs crypto map outside_map 1 set peer I.J.K.L crypto map outside_map 1 set transform-set ESP-AES-256-SHA crypto map outside_map interface outside crypto isakmp enable outside crypto isakmp policy 10 authentication pre-share encryption aes hash sha group 2 lifetime 86400 no crypto isakmp nat-traversal [...] tunnel-group I.J.K.L type ipsec-l2l tunnel-group I.J.K.L ipsec-attributes pre-shared-key *