version 12.4
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
!
hostname DDDDDDD
!
boot-start-marker
boot-end-marker
!
logging buffered 40960 debugging
enable secret 5 fdfategfhg234565fw34
!
no aaa new-model
memory-size iomem 20
clock timezone GMT+7 7
no ip source-route
ip cef
!
!
!
!
no ip domain lookup
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
!
voice-card 0
!
!

!
!
crypto pki trustpoint TP-self-signed-1696786485
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1696786485
 revocation-check none
 rsakeypair TP-self-signed-1696786485
!
!
crypto pki certificate chain TP-self-signed-1696786485
 certificate self-signed 01
  30820242 308201AB A0030201 02020101 300D0609 2A864886 F70D0101 04050030 
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 
  69666963 6174652D 31363936 37383634 3835301E 170D3038 30363330 31303236 
  33315A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 36393637 
  38363438 3530819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 
  8100ADDA 20799F8A 8D756FED E39729EE ABE18155 9DA274B7 A62BF488 CCAAA2FA 
  334F6AE3 E10FB075 04EA066D F39990E1 0F7193AA 8644FBE2 E2CE12A8 E8F894FD 
  02F17B43 EFBDE5CF 2866B287 126E1FA6 EF9520A8 FA1875B4 C7D00594 C7B6CE21 
  32C16540 4C8FF86C 4473FE91 F82749D8 AE765FD6 C80B5251 DF4D972A 3A11EB08 
  7A030203 010001A3 6A306830 0F060355 1D130101 FF040530 030101FF 30150603 
  551D1104 0E300C82 0A495447 2D444E2D 47573130 1F060355 1D230418 30168014 
  DB2C0925 EB3BB311 1A2DAA71 24025212 3EECC569 301D0603 551D0E04 160414DB 
  2C0925EB 3BB3111A 2DAA7124 0252123E ECC56930 0D06092A 864886F7 0D010104 
  05000381 81002FD3 4A00FAD5 B21842DC FCD3E68C 021F7C39 B7BA84BB D69E8D69 
  42D3BF1D 73AF73CB F800F465 F9B2CD3A 021F6846 683A48B8 21C02217 85FD9034 
  51CF01E1 300F38BE B4EA122F 257558F1 2709CB8F 67722641 37E7AF53 6FDC8633 
  3B4F3C3E 1A7D1D7C BBB2320C 8BA15FB1 11C73A07 2CE5EEFA 3D73C0AF FCB53274 
  88EBEC9D EACB
  quit
archive
 log config
  hidekeys
!
!
! 
!
crypto isakmp policy 1
 encr 3des
 hash md5
 authentication pre-share
 group 2
crypto isakmp key vietnam-test-tunnel address 168.241.243.2 no-xauth
!
!
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac 
!
crypto map SDM_CMAP_1 1 ipsec-isakmp 
 ! Incomplete
 description <Tunnel to 168.241.243.2>
 set peer 168.241.243.2
 set transform-set ESP-3DES-MD5 
 match address IPSEC_ACL

interface FastEthernet0/0
 description <VDC Public Subnet>
 ip address 222.255.128.129 255.255.255.248
 ip nat inside
 ip virtual-reassembly
 ip route-cache policy
 ip policy route-map POLICY
 duplex auto
 speed auto
!
interface FastEthernet0/1
 description <EVN Public Subnet>
 ip address 203.190.168.145 255.255.255.240
 ip nat inside
 ip virtual-reassembly
 ip route-cache policy
 ip policy route-map POLICY
 duplex auto
 speed auto
!
interface Serial0/2/0
 description <Connect to EVN>
 bandwidth 2048
 ip address 203.190.166.222 255.255.255.252
 ip nat outside
 ip virtual-reassembly
 encapsulation ppp
 load-interval 30
 shutdown
!
interface Serial0/3/0
 description <Connect to VDC>
 bandwidth 1536
 ip address 222.255.136.58 255.255.255.252
 ip virtual-reassembly
 load-interval 30
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 222.255.136.57
!
!
ip http server
ip http secure-server
ip nat pool NAT-POOL 203.190.168.150 203.190.168.150 netmask 255.255.255.240 type rotary
ip nat inside source list LOCAL pool NAT-POOL overload
!
ip access-list standard INTERNET
 permit 222.255.128.134
 permit 203.190.168.144 0.0.0.15
ip access-list standard LOCAL
 permit 222.255.128.134
!
ip access-list extended US
 permit ip any host 168.241.243.2
 permit ip any host 168.241.243.10
!
route-map POLICY permit 10
 match ip address INTERNET
 set ip next-hop 203.190.166.221
!
route-map POLICY permit 20
 match ip address US
 set ip next-hop 222.255.136.57