crypto ipsec transform-set 3desmd5 esp-3des esp-md5-hmac crypto ipsec transform-set 3desmd5 mode transport crypto ipsec transform-set

aes128sha esp-aes esp-sha-hmac crypto ipsec transform-set aes128sha mode transport crypto ipsec transform-set aes256sha esp-aes-256 esp-sha-hmac crypto ipsec transform-set aes256sha mode transport crypto ipsec security-association lifetime seconds 28800 crypto ipsec security-association lifetime kilobytes 4608000 crypto dynamic-map out_dyn_map 10 set transform-set 3desmd5 aes128sha aes256sha crypto map outside_map 65000 ipsec-isakmp dynamic out_dyn_map crypto map outside_map interface outside crypto isakmp identity address crypto isakmp enable outside crypto isakmp policy 10 authentication pre-share encryption 3des hash md5 group 2 lifetime 86400 crypto isakmp policy 65535

authentication pre-share encryption 3des hash sha group 2 lifetime 86400 group-policy DefaultRAGroup internal group-policy DefaultRAGroup attributes dns-server value 172.16.2.2 vpn-tunnel-protocol IPSec l2tp-ipsec tunnel-group DefaultRAGroup general-attributes address-pool vpn12 default-group-policy DefaultRAGroup ! this is a default command and is normally hidden tunnel-group DefaultRAGroup ipsec-attributes pre-shared-key 12345 tunnel-group DefaultRAGroup ppp-attributes no authentication chap authentication ms-chap-v2 *-*-*-*-*-*-*-*-*-*-************************************ para arrancar sin hacer todo de nuevo crypto map outside_map 65000 ipsec-isakmp dynamic out_dyn_map

crypto map outside_map interface outside crypto isakmp identity address crypto isakmp enable outside