version 12.2
hostname c3600
crypto isakmp policy 1
 encr 3des
 hash md5
 authentication pre-share
 group 2
crypto isakmp key Ci$$c0 address 91.192.0.185

crypto ipsec transform-set linux esp-3des esp-md5-hmac
crypto map linux 10 ipsec-isakmp
 set peer 91.192.0.185
 set transform-set linux
 set pfs group2
 match address 100

interface Ethernet2/0
 ip address 83.19.73.234 255.255.255.248
 ip nat outside
 crypto map linux

interface Ethernet2/1
 ip address 192.168.200.1 255.255.255.0
 ip nat inside


ip nat inside source list 101 interface Ethernet2/0 overload
ip route 0.0.0.0 0.0.0.0 83.19.73.233

access-list 100 permit ip 192.168.200.0 0.0.0.255 192.168.150.0 0.0.0.255
access-list 101 deny   ip 192.168.200.0 0.0.0.255 192.168.150.0 0.0.0.255
access-list 101 permit ip 192.168.200.0 0.0.0.255 any
