!
!
crypto isakmp policy 1
 encr 3des
 authentication pre-share
 group 5
 lifetime 28800
crypto isakmp key XXXXXX address 10.18.1.105
!
!
crypto ipsec transform-set myset esp-3des esp-sha-hmac
 mode tunnel
crypto ipsec df-bit clear
!
!
crypto map mymap 4 ipsec-isakmp
 description ***VPN to Branch Office***
 set peer 10.18.1.105
 set security-association lifetime seconds 86400
 set transform-set myset
 match address vpn_branch
!
!
interface GigabitEthernet0/0
 description ***HEAD OFFICE NETWORK***
 ip address 192.168.0.1 255.255.255.0
 duplex auto
 speed auto
!
!
interface GigabitEthernet0/2
 description ***ISP's INTRANET LINK***
 ip address 10.168.92.73 255.255.255.252
 ip tcp adjust-mss 1300
 ip policy route-map dfbit-clear
 duplex auto
 speed auto
 crypto map mymap
!
ip route 192.168.62.0 255.255.255.0 10.168.0.2
!
!
ip access-list extended df-bit
 permit ip any any
ip access-list extended vpn_branch
 permit ip any 192.168.62.0 0.0.0.255
!
!
route-map dfbit-clear permit 10
 match ip address df-bit
 set ip df 0
!
end