hostname HCM

interface g0/0

ip address 10.0.2.1 255.255.255.0

ip nat inside

no shutdown

exit

interface g0/1

ip address 203.0.2.2 255.255.255.0

ip nat outside

no shutdown

exit

ip nat inside source list 100 interface g0/1 overload

no access-list 100

access-list 100 deny ip 10.0.2.0 0.0.0.255 192.168.1.0 0.0.0.255

access-list 100 permit ip 10.0.2.0 0.0.0.255 any

ip route 0.0.0.0 0.0.0.0 203.0.2.1

ip dhcp excluded-address 10.0.2.1 10.0.2.10

ip dhcp pool LAN

network 10.0.2.0 255.255.255.0

default-router 10.0.2.1

dns-server 8.8.4.4

exit

line vty 0 4

privilege level 15

no login

transport input telnet

exit

no ip domain-lookup

crypto isakmp policy 1

encryption aes 128 hash sha

authentication pre-share

group 2

lifetime 86400

exit

crypto isakmp key mobile24h address 203.0.1.2

crypto ipsec transform-set myset esp-sha-hmac esp-aes 128

mode tunnel

exit

crypto map mymap 1 ipsec-isakmp

set peer 203.0.1.2

set security-association lifetime seconds 86400

set transform-set myset

set pfs group2

match address vpntraffic

exit

ip access-list extended vpntraffic

permit ip 10.0.2.0 0.0.0.255 192.168.1.0 0.0.0.255

exit

interface g0/1 crypto map mymap

exit

ping 192.168.1.2 source 10.0.2.1