crypto isakmp policy 10
 encr 3des
 authentication pre-share
 group 2
!
crypto isakmp client configuration group xxxxxx
 key xxxxxx
 dns 10.10.7.200
 domain lmm.local
 pool vpnippool
crypto isakmp profile VPNclient
   description VPN clients profile 
   match identity group xxxxxx
   client authentication list clientauth
   isakmp authorization list groupauthor
   client configuration address respond
!
!
crypto ipsec transform-set myset esp-3des esp-sha-hmac 
!
crypto dynamic-map dynmap 5
 set transform-set myset 
 set isakmp-profile VPNclient
 reverse-route
!
!
crypto map mymap 10 ipsec-isakmp dynamic dynmap 
!
!
!
interface FastEthernet0/0
 description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FE 0$
 ip address dhcp
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
 crypto map mymap
!
interface FastEthernet0/1/0
!
interface FastEthernet0/1/1
 switchport access vlan 2
!
interface FastEthernet0/1/2
 switchport access vlan 3
!
interface FastEthernet0/1/3
 shutdown
!
interface Vlan1
 ip address 10.10.7.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
!
interface Vlan2
 ip address 10.10.8.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
!
interface Vlan3
 ip address 10.10.9.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
!
router rip
 network 10.0.0.0
!
ip local pool vpnippool 10.10.10.1 10.10.10.10
ip classless
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list INSIDE_NAT_ADDRESSES interface FastEthernet0/0 overload
!
ip access-list standard INSIDE_NAT_ADDRESSES
 permit 10.10.7.0 0.0.0.255
 permit 10.10.8.0 0.0.0.255
 permit 10.10.9.0 0.0.0.255
!
access-list 23 permit 10.10.7.0 0.0.0.255
access-list 23 permit 10.10.8.0 0.0.0.255
access-list 23 permit 10.10.10.0 0.0.0.255
snmp-server community public RO