crypto isakmp client configuration group vpn_remote_access
 key cisco
 domain Cisco.com
 pool remote-pool
 acl remote_access
!
!
crypto ipsec transform-set ts esp-3des esp-sha-hmac
crypto ipsec transform-set ts2 ah-md5-hmac esp-3des esp-md5-hmac
!
crypto dynamic-map dynmap 1
 set transform-set ts
 reverse-route
!

!
crypto map client-map client authentication list vpnusers
crypto map client-map isakmp authorization list vpn-remote-access
crypto map client-map client configuration address respond
crypto map client-map 1 ipsec-isakmp dynamic dynmap
!
interface Vlan892
 description Remote_Access Interface Vlan
 ip address 219.80.238.153 255.255.255.248
 crypto map client-map
 crypto engine slot 7
!
interface Vlan893
 description Remote_Access Port Vlan
 no ip address
 crypto connect vlan 892
!
ip local pool remote-pool 10.66.0.1 10.66.0.250
!
ip access-list extended remote_access
 permit ip 10.68.0.0 0.0.255.255 10.66.0.0 0.0.0.255
 permit ip 10.65.0.0 0.0.255.255 10.66.0.0 0.0.0.255
 permit ip 10.64.0.0 0.0.255.255 10.66.0.0 0.0.0.255
 permit ip 10.32.0.0 0.0.255.255 10.66.0.0 0.0.0.255