crypto ikev1 policy 10
 authentication pre-share
 encryption aes
 hash sha
 group 2
 lifetime 28800

crypto map VPN 10 match address ACL-VPN
crypto map VPN 10 set pfs
crypto map VPN 10 set peer 201.222.X.X
crypto map VPN 10 set ikev1 transform-set VPN-ESP-AES-SHA
crypto map VPN 10 set security-association lifetime seconds 3600
crypto map VPN interface outside

tunnel-group 201.222.X.X type ipsec-l2l
tunnel-group 201.222.X.X ipsec-attributes
 ikev1 pre-shared-key *****
 isakmp keepalive threshold 10 retry 10