crypto isakmp policy 10
hash md5
authentication pre-share
crypto isakmp key <keyphrase> address 0.0.0.0 0.0.0.0
crypto ipsec transform-set md5-des ah-md5-hmac esp-des
crypto map normal 1 ipsec-isakmp
description *** Customer One ***
set peer <cpe_ip_1>
set transform-set md5-des
match address 101
crypto map normal 2 ipsec-isakmp
description *** Customer Two ***
set peer <cpe_ip_2>
set transform-set md5-des
match address 102
interface Ethernet0
description *** Outside Interface ***
ip address x.x.176.122 255.255.255.248
no ip redirects
ip mtu 1440
ip tcp adjust-mss 1400
crypto map normal
interface Ethernet1
description *** Inside Interface ***
ip address 192.168.0.1 255.255.255.0
no ip redirects
ip mtu 1440
ip tcp adjust-mss 1400
duplex auto
ip route 0.0.0.0 0.0.0.0 192.168.0.5 (That's the lan's gateway to intahweb)
ip route 192.168.0.0 255.255.0.0 x.x.176.121
ip route <cpe_ip_1> 255.255.255.255 x.x.176.121
ip route <cpe_ip_2> 255.255.255.255 x.x.176.121
access-list 101 remark *** Entry for Customer One ***
access-list 101 permit ip any 192.168.101.0 0.0.0.255
access-list 102 remark *** Entry for Customer Two ***
access-list 102 permit ip any 192.168.102.0 0.0.0.255