s
Router#sh
Router#show u run
Router#show running-config 
Building configuration...

Current configuration : 3292 bytes
!
! Last configuration change at 02:49:02 UTC Sat Aug 2 2014 by GKC
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
enable secret 4 N65ssO/UpKvfT/0gS.bH3c.BnU2r2wEGsR6URZ/P2OU
!
aaa new-model
!
!
aaa authentication login userauthen local
aaa authorization network groupauthor local 
!
!

!
!
aaa session-id common
!
dot11 syslog
ip source-route
!
!
!
ip dhcp excluded-address 192.168.1.1 192.168.1.20
ip dhcp excluded-address 192.168.1.240 192.168.1.254
!
ip dhcp pool Local
 network 192.168.1.0 255.255.255.0
 default-router 192.168.1.1 
 dns-server 8.8.8.8 203.162.4.190 
!
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
 crypto pki token default removal timeout 0
!
!
!
!
license udi pid CISCO1841 sn FTX144202QZ
username GKC1 privilege 15 secret 4 9E350.9H8wVRXZGvOkA6WM2swbn/4xVXuZliG55qATA
username GKC privilege 15 secret 4 9E350.9H8wVRXZGvOkA6WM2swbn/4xVXuZliG55qATA
!
redundancy
!
!
! 
!
crypto isakmp policy 1
 encr 3des
 authentication pre-share
 group 2
!
crypto isakmp client configuration group gkc-vpn-client
 key gkchotel
 dns 8.8.8.8 8.8.4.4
 domain gkc.local
 pool vpnpool
 acl 120
 netmask 255.255.255.0
!
!
crypto ipsec transform-set vpn-ts-set esp-3des esp-sha-hmac 
!
crypto dynamic-map dynamicmap 10
 set transform-set vpn-ts-set 
 reverse-route
!
!
crypto map client-vpn-map client authentication list userauthen
crypto map client-vpn-map isakmp authorization list groupauthor
crypto map client-vpn-map client configuration address initiate
crypto map client-vpn-map client configuration address respond
crypto map client-vpn-map 10 ipsec-isakmp dynamic dynamicmap 
!
!
!
!
!
interface FastEthernet0/0
description $WAN$
 no ip address
 duplex auto
 speed auto
 pppoe enable group global
 pppoe-client dial-pool-number 1
!
interface FastEthernet0/1
 description $Lan$
 ip address 192.168.1.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly in
 ip tcp adjust-mss 1412
 duplex auto
 speed auto
!
interface Dialer0
 ip address negotiated
 ip mtu 1452
 ip nat outside
 ip virtual-reassembly in
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 ppp authentication chap pap callin
 ppp chap hostname xxxxxx
 ppp chap password 0 xxxxx
 ppp pap sent-username xxxxx password 0 xxxxx
 crypto map client-vpn-map
!
ip local pool vpnpool 10.10.1.1 10.10.1.254
ip forward-protocol nd
ip http server
ip http authentication local
no ip http secure-server
!
!

ip nat inside source list Lan interface Dialer0 overload

ip route 0.0.0.0 0.0.0.0 Dialer0
!
ip access-list extended Lan
 deny   ip 192.168.1.0 0.0.0.255 10.10.1.0 0.0.0.255
 permit ip 192.168.1.0 0.0.0.255 any
 
access-list 120 permit ip 192.168.1.0 0.0.0.255 any
access-list 120 permit ip 10.10.1.0 0.0.0.255 192.168.1.0 0.0.0.255
dialer-list 1 protocol ip permit
!
!
!
!
!
!
!
!
control-plane
!
!
!
line con 0
line aux 0
line vty 0 4
 password Idb123!@#
 transport input all
!
scheduler allocate 20000 1000
end

Router#