wr t Building configuration... : Saved : PIX Version 6.1(1) nameif ethernet0 outside security0 nameif ethernet1 inside security100 enable password 2KFQnbNIdI.2KYOU encrypted passwd 2KFQnbNIdI.2KYOU encrypted hostname mnmt-pix domain-name test.com fixup protocol ftp 21 fixup protocol http 80 fixup protocol h323 1720 fixup protocol rsh 514 fixup protocol rtsp 554 fixup protocol smtp 25 fixup protocol sqlnet 1521 fixup protocol sip 5060 fixup protocol skinny 2000 names access-list non-nat permit ip 10.0.0.0 255.0.0.0 10.0.0.0 255.0.0.0 access-list vpn-tunnel permit ip host 10.0.0.10 host 10.0.1.10 no pager interface ethernet0 10baset interface ethernet1 10full mtu outside 1500 mtu inside 1500 ip address outside 5.1.1.2 255.255.255.0 ip address inside 10.1.2.253 255.255.255.0 ip audit info action alarm ip audit attack action alarm pdm history enable arp timeout 14400 nat (inside) 0 access-list vpn-tunnel nat (inside) 1 10.0.0.0 255.0.0.0 0 0 route outside 0.0.0.0 0.0.0.0 5.1.1.1 1 route inside 10.0.0.0 255.0.0.0 10.1.2.253 1 route outside 10.0.1.10 255.255.255.255 5.1.1.1 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h323 0:05:00 sip 0:30:00 sip_media 0:02:00 timeout uauth 0:05:00 absolute aaa-server TACACS+ protocol tacacs+ aaa-server RADIUS protocol radius no snmp-server location no snmp-server contact snmp-server community public no snmp-server enable traps floodguard enable sysopt connection permit-ipsec no sysopt route dnat crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac crypto map vpntunnel 1 ipsec-isakmp crypto map vpntunnel 1 match address vpn-tunnel crypto map vpntunnel 1 set peer 5.1.1.1 crypto map vpntunnel 1 set transform-set ESP-DES-MD5 crypto map vpntunnel interface outside isakmp enable outside isakmp key ******** address 5.1.1.1 netmask 255.255.255.255 isakmp policy 1 authentication pre-share isakmp policy 1 encryption des isakmp policy 1 hash md5 isakmp policy 1 group 1 isakmp policy 1 lifetime 86400 telnet timeout 5 ssh timeout 5 dhcpd address 10.1.2.1-10.1.2.20 inside dhcpd dns 24.221.95.3 dhcpd wins 10.1.64.7 dhcpd lease 5760 dhcpd ping_timeout 750 dhcpd domain test.com dhcpd enable inside terminal width 80 Cryptochecksum:0b15745c2c3b43da8d4284f434420edb : end [OK] mnmt-pix(config)#