Using 3816 out of 196600 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname xcm3
!
boot-start-marker
boot-end-marker
!
no logging buffered
enable secret 5 
!
no aaa new-model
!
crypto pki trustpoint TP-self-signed-2167486914
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2167486914
 revocation-check none
 rsakeypair TP-self-signed-2167486914
!
!
crypto pki certificate chain TP-self-signed-2167486914
 certificate self-signed 01 nvram:IOS-Self-Sig#35.cer
dot11 syslog
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.11.1 192.168.11.49
ip dhcp excluded-address 192.168.11.100 192.168.11.254

!
ip dhcp pool LAN
   network 192.168.11.0 255.255.255.0
   default-router 192.168.11.1
   dns-server 192.168.2.254
!
!
!
multilink bundle-name authenticated
!
!
!
!
crypto isakmp policy 1
 encr 3des
 authentication pre-share
 group 2
crypto isakmp key 
!
!
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
!
crypto map SDM_CMAP_1 1 ipsec-isakmp
 description Tunnel to66.46.40.24
 set peer 66.46.40.24
 set transform-set ESP-3DES-SHA
 match address 100
!
archive
 log config
  hidekeys
!
!
!
class-map match-any voicetraffic
 match ip dscp ef
 match ip dscp cs5
 match ip dscp cs7
!
!
policy-map VoiceQoS
 class voicetraffic
  priority 600
policy-map VoiceQoSLAN
 class voicetraffic
  priority 1000
!
!
!
!
interface Tunnel0
 ip address 192.168.100.46 255.255.255.252
 ip mtu 1420
 tunnel source FastEthernet0
 tunnel destination 66.46.40.24
 tunnel path-mtu-discovery
 crypto map SDM_CMAP_1
!
interface Tunnel10
 description NS
 ip address 192.168.74.45 255.255.255.252
 tunnel source 173.209.137.152
 tunnel destination 71.33.240.50
!
interface FastEthernet0

 description WAN
 bandwidth 800
 ip address 173.209.137.152 255.255.255.252
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
 crypto map SDM_CMAP_1
 service-policy output VoiceQoS
!
interface FastEthernet1
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface FastEthernet2
 service-policy output VoiceQoSLAN
!
interface FastEthernet3
 service-policy output VoiceQoSLAN
!
interface FastEthernet4
 service-policy output VoiceQoSLAN
!
interface FastEthernet5
 service-policy output VoiceQoSLAN
!
interface FastEthernet6
 service-policy output VoiceQoSLAN
!
interface FastEthernet7
 service-policy output VoiceQoSLAN

!
interface FastEthernet8
 service-policy output VoiceQoSLAN
!
interface FastEthernet9
 service-policy output VoiceQoSLAN
!
interface Vlan1
 description LAN
 ip address 192.168.11.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
!
interface Async1
 no ip address
 encapsulation slip
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 173.209.137.157
ip route 192.168.2.0 255.255.255.0 Tunnel0
ip route 192.168.80.0 255.255.255.0 192.168.75.46
ip route 192.168.80.0 255.255.255.0 192.168.74.46
!
!
ip http server
ip http authentication local
ip http secure-server
no ip nat service sip udp port 5060
no ip nat service allow-sip-even-rtp-port
ip nat inside source route-map SDM_RMAP_1 interface FastEthernet0 overload
!
access-list 100 remark SDM_ACL Category=4
access-list 100 permit gre host 173.209.137.152 host 66.46.40.24

ip nat inside source route-map SDM_RMAP_1 interface FastEthernet0 overload
!
access-list 100 remark SDM_ACL Category=4
access-list 100 permit gre host 173.209.137.152 host 66.46.40.24
access-list 110 remark SDM_ACL Category=16
access-list 110 deny   gre host 173.209.137.152 host 66.46.40.24
access-list 110 permit ip 192.168.11.0 0.0.0.255 any
!
!
!
route-map SDM_RMAP_1 permit 1
 match ip address 110
!
!
!
!
control-plane
!
!
line con 0
line 1
 modem InOut
 stopbits 1
 speed 115200
 flowcontrol hardware
line aux 0
line vty 0 4
 login local
!
end