crypto ipsec ikev1 transform-set ESP-3DES-SHA esp-3des esp-sha-hmac crypto ipsec ikev1 transform-set TunnelSet esp-3des esp-md5-hmac crypto ipsec ikev1 transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac crypto dynamic-map outside_dyn_map 20 set ikev1 transform-set ESP-AES-256-SHA crypto map outside_map 65535 ipsec-isakmp dynamic DMZ_VPN_dyn_map crypto map outside_map interface outside crypto isakmp identity hostname no crypto isakmp nat-traversal crypto ikev1 enable outside crypto ikev1 policy 10 authentication pre-share encryption aes-256 hash sha group 2 lifetime 86400 group-policy test-group attributes dns-server value 4.2.2.2 vpn-tunnel-protocol ikev1 l2tp-ipsec ssl-client split-tunnel-policy tunnelspecified split-tunnel-network-list value splitTunnelAcl default-domain value foobar.com webvpn url-list none tunnel-group test-group type remote-access tunnel-group test-group general-attributes address-pool test-group authentication-server-group ad default-group-policy test-group tunnel-group test-group ipsec-attributes ikev1 pre-shared-key *****