R(config)#aaa new-model
R(config)#aaa authentication login ciscocp_vpn_xauth_ml_1 local
R(config)#aaa authorization network ciscocp_vpn_group_ml_1 local
crypto isakmp profile ciscocp-ike-profile-1
match identity group ciscoex
client authentication list ciscocp_vpn_xauth_ml_1
isakmp authorization list ciscocp_vpn_group_ml_1
client configuration address respond
virtual-template 1
interface Virtual-Template1 type tunnel
ip unnumbered FastEthernet0/0
tunnel mode ipsec ipv4
tunnel protection ipsec profile CiscoCP_Profile1
crypto ipsec profile CiscoCP_Profile1
set transform-set ESP-3DES-SHA
set isakmp-profile ciscocp-ike-profile-1
crypto isakmp client configuration group CISCOGROUP
key THEKEY
pool addr_pool
max-users 3
crypto pki trustpoint TP-self-signed-3803248207
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3803248207
revocation-check none
rsakeypair TP-self-signed-3803248207