Current configuration : 2956 bytes
!
! Last configuration change at 18:20:46 utc Thu May 3 2007 by hile
! NVRAM config last updated at 16:06:45 utc Tue May 1 2007 by hile
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname sentinel-new
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$tTdl$z/yOSz0.N5RCpyaEmWkwl.
!
clock timezone utc 0
aaa new-model
!
!
aaa authentication login default local
aaa authentication login userauthen local
aaa authorization network groupauthor local 
aaa session-id common
ip subnet-zero
ip cef
!
!
ip dhcp excluded-address 172.20.1.129
!
ip dhcp pool dhcp-pool
   network 172.20.1.128 255.255.255.192
   default-router 172.20.1.190 
   domain-name coyhile.com
!
ip audit po max-events 100
!
!
!
!
!
!
!crypto isakmp policy 3
 encr 3des
 authentication pre-share
 group 2
!
crypto isakmp client configuration group vpnclient
 key cisco123
 dns 172.20.1.34
 domain cisco.com
 pool ippool
!
!
crypto ipsec transform-set myset esp-3des esp-md5-hmac 
!
crypto dynamic-map dynmap 10
 set transform-set myset 
 reverse-route
!
!
crypto map clientmap client authentication list userauthen
crypto map clientmap isakmp authorization list groupauthor
crypto map clientmap client configuration address respond
crypto map clientmap 10 ipsec-isakmp dynamic dynmap 
!
!
!
!
interface FastEthernet0/0
 no ip address
 ip nat inside
 duplex auto
 speed auto
!
interface FastEthernet0/0.1
 encapsulation dot1Q 1 native
 ip address 172.20.1.30 255.255.255.224
 no snmp trap link-status
!         
interface FastEthernet0/0.32
 encapsulation dot1Q 32
 ip address 172.20.1.62 255.255.255.224
 ip nat inside
 no snmp trap link-status
!
interface FastEthernet0/0.64
 encapsulation dot1Q 64
 ip address 172.20.1.94 255.255.255.224
 ip nat inside
 no snmp trap link-status
!
interface FastEthernet0/0.96
 encapsulation dot1Q 96
 ip address 172.20.1.126 255.255.255.224
 ip nat inside
 no snmp trap link-status
!
interface FastEthernet0/0.128
 encapsulation dot1Q 128
 ip address 172.20.1.190 255.255.255.192
 ip policy route-map VPN-Client
 no snmp trap link-status
 crypto map clientmap
!
interface FastEthernet0/0.192
 encapsulation dot1Q 192
 ip address 172.20.1.198 255.255.255.248
 no snmp trap link-status
!
interface FastEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface Ethernet1/0
 ip address dhcp
 ip nat outside
 full-duplex
!
ip local pool ippool 172.20.1.97 172.20.1.125
ip nat inside source list 1 interface Ethernet1/0 overload
ip http server
no ip http secure-server
ip classless
!
!
access-list 1 permit 172.20.1.0 0.0.0.255
access-list 144 permit ip 172.20.1.96 0.0.0.31 any
!
route-map VPN-Client permit 10
 match ip address 144
 set interface FastEthernet0/0.96
!
!
!
!
gateway 
!
!
!
line con 0
line aux 0
line vty 0 4
!
ntp clock-period 17180419
ntp server 128.118.25.3