interface FastEthernet0/0 description OPTONLINE - CABLE MODEM ip address 75.127.175.2 255.255.255.248 ip access-group outside in ip inspect myfw out ip nat outside ip virtual-reassembly ip route-cache flow duplex auto speed auto crypto map mymap ! crypto map mymap 10 ipsec-isakmp set peer 69.20.72.8 set transform-set myset match address ACL_VPN ip access-list extended outside permit icmp any any echo-reply permit icmp any 10.10.6.0 0.0.1.255 time-exceeded permit icmp any 10.10.6.0 0.0.1.255 packet-too-big permit icmp any 10.10.6.0 0.0.1.255 traceroute permit icmp any 10.10.6.0 0.0.1.255 unreachable deny icmp any any permit udp host 69.20.72.8 host 75.127.175.2 eq isakmp permit udp host 69.20.72.8 host 75.127.175.2 eq non500-isakmp deny ip any any log ip access-list extended ACL_VPN permit icmp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255 permit udp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255 eq snmp permit tcp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255 eq 22 permit tcp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255 eq 50001 permit tcp 10.10.6.0 0.0.1.255 host 192.168.1.159 eq 5432