version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Pobocka1
!
!IKE politika
!
crypto isakmp policy 10
 encr aes
 hash md5
 authentication pre-share
 group 2
 lifetime 43200
!
!Sifrovaci predsdileny klic
!
crypto isakmp key HodneSlozityKlic address 192.168.2.2
!
!Transformacni set
!
crypto ipsec transform-set set1 esp-aes esp-md5-hmac
!
!Kryptovaci mapa
!
crypto map map1 10 ipsec-isakmp 
 set peer 192.168.2.2
 set transform-set set1 
 match address 101
!
spanning-tree mode pvst
!
!Vnejsi rozhrani
!
interface FastEthernet0/0
 ip address 192.168.1.1 255.255.255.0
 duplex auto
 speed auto
 crypto map map1
!
!Vnitrni rozhrani
!
interface FastEthernet0/1
 ip address 10.1.1.1 255.255.255.0
 duplex auto
 speed auto
!
interface FastEthernet0/3/0
 switchport mode access
!
interface FastEthernet0/3/1
 switchport mode access
!
interface FastEthernet0/3/2
 switchport mode access
!
interface FastEthernet0/3/3
 switchport mode access
!
interface Vlan1
 no ip address
 shutdown
!
!Smerovani na zakladni branu
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.1.2 
!
!Pristupovy seznam
!
access-list 101 permit ip 10.1.1.0 0.0.0.127 10.2.2.0 0.0.0.127
!
line con 0
line vty 0 4
 login
!
end
