interface FastEthernet0
 ip address 4.4.4.4 255.255.255.248
 crypto map SDM_CMAP_1

crypto map SDM_CMAP_1 3 ipsec-isakmp
 set peer 5.5.5.5
 set transform-set trans
 match address 116

ip nat inside source route-map nonat interface FastEthernet1 overload

access-list 116 permit ip 192.168.201.0 0.0.0.255 host 192.168.7.5
access-list 120 deny   ip 192.168.201.0 0.0.0.255 192.0.100.0 0.0.0.255
access-list 120 deny   ip 192.168.201.0 0.0.0.255 192.168.1.0 0.0.0.255
access-list 120 deny   ip 192.168.201.0 0.0.0.255 192.168.7.0 0.0.0.255

route-map nonat permit 10
 match ip address 120


ip nat inside source static tcp 192.168.7.5 80 4.4.4.4 80 extendable