name 192.168.1.0 lan_bukarest
name 10.10.10.16 archive
name 10.10.10.15 sevsvr
access-list no-nat permit ip host sevsvr lan_bukarest 255.255.255.0
access-list no-nat permit ip host archive lan_bukarest 255.255.255.0
access-list outside_cryptomap_120 permit ip host sevsvr lan_bukarest 255.255.255.0
access-list outside_cryptomap_120 permit ip host archive lan_bukarest 255.255.255.0
ip address outside cisco_ip cisco_netmask
ip address inside 10.10.10.18 255.255.255.0
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto map outside_map 120 ipsec-isakmp
crypto map outside_map 120 match address outside_cryptomap_120
crypto map outside_map 120 set peer linux_ip
crypto map outside_map 120 set transform-set ESP-3DES-SHA
isakmp key ******** address other_linux_ip netmask 255.255.255.255 no-xauth no-config-mode
isakmp key ******** address linux_ip netmask 255.255.255.255 no-xauth no-config-mode
isakmp policy 40 authentication pre-share
isakmp policy 40 encryption 3des
isakmp policy 40 hash sha
isakmp policy 40 group 2
isakmp policy 40 lifetime 28800