Do you mean IPSEC endpoint. if so, yes.. You can configure the following:
No nat:
nat (inside) 0 access-list 100
access-list 100 permit ip host 192.168.180.1 10.1.1.0 255.255.255.0
ip local pool vpnpool 10.1.1.1-10.1.1.254
Crypto map configuration:
sysopt connection permit-ipsec
crypto ipsec transform-set myset esp-3des esp-md5-hmac
crypto dynamic-map dynmap 10 set transform-set myset
crypto map mymap 10 ipsec-isakmp dynamic dynmap
crypto map mymap client configuration address initiate
crypto map mymap client configuration address respond
crypto map mymap client authentication LOCAL
crypto map mymap interface outside
isakmp enable outside
isakmp identity address
Policy configuration:
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption 3des
isakmp policy 10 hash md5
isakmp policy 10 group 2
isakmp policy 10 lifetime 86400
VPN group configuration:
vpngroup abcvpn address-pool vpnpool
vpngroup abcvpn split-tunnel 100
vpngroup abcvpn idle-time 1800
vpngroup abcvpn password ********
username cisco password cisco
