: Saved
:
ASA Version 8.4(2)
!
hostname ciscoasa
names
!
interface Ethernet0/0
 switchport access vlan 2
!
interface Ethernet0/1
 switchport access vlan 1
!
interface Ethernet0/2
 switchport access vlan 3
!
interface Ethernet0/3
 switchport access vlan 1
!
interface Ethernet0/4
 switchport access vlan 1
!
interface Ethernet0/5
 switchport access vlan 1
!
interface Ethernet0/6
 switchport access vlan 1
!
interface Ethernet0/7
 switchport access vlan 1
!
interface Vlan1
 nameif inside
 security-level 100
 ip address 192.168.1.1 255.255.255.0
!
interface Vlan2
 nameif outside
 security-level 0
 ip address 209.165.200.226 255.255.255.248
!
interface Vlan3
 no forward interface Vlan1
 nameif dmz
 security-level 70
 ip address 192.168.2.1 255.255.255.0
!
object network INSIDE-NET
 subnet 192.168.1.0 255.255.255.0
 nat (inside,outside) dynamic interface
object network dmz-server
 host 192.168.2.3
 nat (dmz,outside) static 209.165.200.227
!
route outside 0.0.0.0 0.0.0.0 209.165.200.225 1
!
access-list L2L extended permit ip 192.168.1.0 255.255.255.0 172.16.3.0 255.255.255.0
access-list OUTSIDE-DMZ extended permit ip any host 192.168.2.3
!
!
access-group OUTSIDE-DMZ in interface outside
!
!
!
!
!
telnet timeout 5
ssh timeout 5
!
dhcpd auto_config outside
!
!
!
!
crypto ipsec ikev1 transform-set L2L esp-3des esp-sha-hmac
!
crypto map VPN 10 match address L2L
crypto map VPN 10 set peer 10.2.2.1 
crypto map VPN 10 set ikev1 transform-set L2L 
crypto map VPN interface outside
tunnel-group 10.2.2.1 type ipsec-l2l
!
