crypto isakmp policy 11 hash md5 authentication pre-share crypto isakmp key monkeybut address x.x.x.x crypto isakmp key monkeybut address r.r.r.r ! ! crypto ipsec transform-set sharks esp-3des esp-md5-hmac ! crypto map nolan 1 ipsec-isakmp set peer x.x.x.x set peer y.y.y.y set transform-set sharks match address 120 ! ip http timeout-policy idle 60 life 86400 requests 10000 ip nat pool branch y.y.y.y y.y.y.y netmask 255.255.255.248 ip nat inside source route-map nonat pool branch overload ip nat inside source static tcp 10.5.0.4 22 interface GigabitEthernet0/0 22 ! access-list 1 permit 10.5.0.0 0.0.255.255 access-list 23 permit 10.5.0.0 0.0.255.255 access-list 120 permit ip 10.5.0.0 0.0.255.255 192.168.5.0 0.0.0.255 access-list 120 permit ip 10.5.0.0 0.0.255.255 192.168.1.0 0.0.0.255 access-list 130 remark SDM_ACL Category=18 access-list 130 deny ip 10.5.0.0 0.0.255.255 192.168.5.0 0.0.0.255 access-list 130 permit ip 10.5.0.0 0.0.255.255 any access-list 130 deny ip 10.5.0.0 0.0.255.255 192.168.1.0 0.0.0.255