Current configuration : 1297 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname BranchFirewall
!
!
!
!
!
!
!
!
ip cef
no ipv6 cef
!
!
!
!
license udi pid CISCO2911/K9 sn FTX1524AZ51-
license boot module c2900 technology-package securityk9
!
!
!
crypto isakmp policy 10
 encr aes 256
 authentication pre-share
 group 5
!
crypto isakmp key cxGStDRSyrCs3RQd7sQdLhjV1esSC6A2 address 10.10.10.2
!
!
!
crypto ipsec transform-set BRANCH-HQ esp-aes 256 esp-sha-hmac
!
crypto map AKC-CMAP 100 ipsec-isakmp
 set peer 10.10.10.2
 set pfs group5
 set security-association lifetime seconds 86400
 set transform-set BRANCH-HQ
 match address 100
!
!
!
!
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface GigabitEthernet0/0
 ip address 10.10.20.2 255.255.255.0
 duplex auto
 speed auto
 crypto map CMAP
!
interface GigabitEthernet0/1
 ip address 192.168.1.10 255.255.255.192
 duplex auto
 speed auto
!
interface GigabitEthernet0/2
 no ip address
 duplex auto
 speed auto
 shutdown
!
interface Vlan1
 no ip address
 shutdown
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.10.20.1
!
ip flow-export version 9
!
!
access-list 100 permit ip 192.168.1.0 0.0.0.63 192.168.0.0 0.0.0.255
!
!
!
!
!
!
line con 0
!
line aux 0
!
line vty 0 4
 login
!
!
!
end