aaa new-model
aaa authentication login clientauth local 
aaa authorization network groupauthor local  
!
crypto isakmp policy 10 
 encr 3des 
 authentication pre-share 
 group 2 
!
crypto isakmp client configuration group testgroup 
 key cisco321 
 dns 1.1.1.1 2.2.2.2 
 wins 3.3.3.3 4.4.4.4 
 domain cisco.com 
 pool ippool 
!
crypto isakmp profile VPNclient 
   description VPN clients profile 
   match identity group testgroup 
   client authentication list clientauth 
   isakmp authorization list groupauthor 
   client configuration address respond 
!
crypto ipsec transform-set myset esp-3des esp-sha-hmac 
! 
crypto dynamic-map dynmap 5 
 set transform-set myset  
 set isakmp-profile VPNclient 
!
crypto map mymap 10 ipsec-isakmp dynamic dynmap  
interface FastEthernet0/0 
 description Outside interface 
 ip address 10.48.67.181 255.255.255.224 
 no ip mroute-cache 
 duplex auto 
 speed auto 
 crypto map mymap 
!  
ip local pool ippool 10.5.5.1 10.5.5.254