!
controller VDSL 0/0/0
!
!
!
crypto isakmp policy 1
 encr 3des
 authentication pre-share
 group 5
 lifetime 28800
crypto isakmp key XXXXXX address 10.168.92.73
!
!
crypto ipsec transform-set myset esp-3des esp-sha-hmac
 mode tunnel
crypto ipsec df-bit clear
!
!
!
crypto map mymap 1 ipsec-isakmp
 description ***VPN to HEAD OFFICE***
 set peer 10.168.92.73
 set security-association lifetime seconds 86400
 set transform-set myset
 match address vpn_branch
!
bridge irb
!
!
!
!
interface Embedded-Service-Engine0/0
 no ip address
 shutdown
!
interface GigabitEthernet0/0
 description ****BRANCH LAN NETWORK***
 ip address 192.168.62.1 255.255.255.0
 duplex auto
 speed auto
!
interface GigabitEthernet0/1
 no ip address
 duplex auto
 speed auto
!
interface GigabitEthernet0/2
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface ATM0/0/0
 no ip address
 no atm ilmi-keepalive
!
interface ATM0/0/0.1 point-to-point
 description ***ADSL STATIC INTERFACE WITH BRIDGED IRB***
 bridge-group 1
 pvc 0/35
  encapsulation aal5snap
 !
!
interface Ethernet0/0/0
 no ip address
 shutdown
!
interface BVI1
 description ****ISP's ADSL BRIDGED INTERFACE WITH STATIC IP****
 ip address 10.18.1.105 255.255.255.252
 ip tcp adjust-mss 1300
 crypto map mymap
 crypto ipsec df-bit clear
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 10.18.1.106
!
ip access-list extended vpn_branch
 permit ip 192.168.62.0 0.0.0.255 any
!
control-plane
!
bridge 1 protocol ieee
bridge 1 route ip
!
end