aaa authorization network vpnauthor local ip local pool vpnpool 10.99.98.8 10.99.98.254 crypto isakmp policy 10 encr 3des hash sha authentication pre-share group 2 crypto isakmp client configuration group vpnuser key cisco pool vpnpool crypto isakmp profile ikp1 match identity group vpnuser isakmp authorization list vpnauthor client configuration address respond virtual-template 1 crypto ipsec transform-set ts2 esp-3des esp-sha-hmac crypto ipsec profile isp1 set transform-set ts2 set isakmp-profile ikp1 interface Virtual-Template 1 type tunnel ip unnumbered loopback 1 tunnel mode ipsec ipv4 tunnel protection ipsec profile isp1