The below document explains with a configuration which demonstrates how to form an IPsec tunnel from a PC that runs the Cisco VPN Client (4.x and later) (Static/Dynamic assigned IP address) to a Cisco VPN 3000 Concentrator in order to enable the user to securely access the network inside the VPN Concentrator.