interface Vlan1
 ip address 10.10.6.1 255.255.254.0
 ip nat inside
 ip virtual-reassembly

interface Vlan2
 ip address 10.10.8.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly

ip access-list extended ACL_VPN
 permit icmp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255
 permit icmp 10.10.7.0 0.0.1.255 192.168.1.0 0.0.0.255
 permit udp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255 eq snmp
 permit udp 10.10.7.0 0.0.1.255 192.168.1.0 0.0.0.255 eq snmp
 permit tcp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255 eq 22
 permit tcp 10.10.7.0 0.0.1.255 192.168.1.0 0.0.0.255 eq 22

ip access-list extended INSIDE_NAT_ADDRESSES
 deny   ip 10.10.0.0 0.0.255.255 192.168.1.0 0.0.0.255
 permit ip 10.10.6.0 0.0.1.255 any
 permit ip 10.10.7.0 0.0.1.255 any
 permit ip 10.10.8.0 0.0.0.255 any
!
access-list 23 permit 207.97.226.72
access-list 23 permit 10.10.6.0 0.0.1.255
access-list 23 permit 10.10.7.0 0.0.1.255