Mine

Building configuration...

Current configuration : 5668 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname router1841
!
boot-start-marker
boot-end-marker
!
logging buffered 52000 debugging

!
aaa new-model
!
!
aaa authentication login clientauth local
aaa authorization network groupauthor local 
!
aaa session-id common
!
resource policy
!
clock timezone EST -5
clock summer-time EDT recurring
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip subnet-zero
ip cef
!
!
no ip dhcp use vrf connected
no ip dhcp conflict logging
ip dhcp excluded-address 10.10.6.0 10.10.6.9
ip dhcp excluded-address 10.10.7.0 10.10.7.254
!
ip dhcp pool 0
   network 10.10.6.0 255.255.254.0
   domain-name lmm.local
   netbios-name-server 10.10.7.209 
   netbios-node-type h-node
   default-router 10.10.6.1 
   dns-server 10.10.7.200 
   lease 30
!
!
no ip domain lookup
ip domain name lmm.local
!
!
!
!
! 
!
crypto isakmp policy 10
 encr 3des
 hash md5
 authentication pre-share
 group 2
crypto isakmp key xxxxxxxxxxxxxxxxx address xx.xx.xx.xx
!
!
crypto ipsec transform-set myset esp-3des esp-md5-hmac 
!
crypto map mymap 10 ipsec-isakmp 
 set peer xx.xx.xx.xx
 set transform-set myset 
 match address ACL_VPN
!
!
!
interface FastEthernet0/0
 description OPTONLINE - CABLE MODEM
 ip address dhcp
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
 crypto map mymap
!
interface FastEthernet0/1
 description AT&T - T1
 ip address 12.171.215.194 255.255.255.240
 ip virtual-reassembly
 ip policy route-map t1
 duplex auto
 speed auto
!
interface FastEthernet0/1/0
!
interface FastEthernet0/1/1
 switchport access vlan 2
!
interface FastEthernet0/1/2
 shutdown
!
interface FastEthernet0/1/3
 shutdown
!
interface Vlan1
 ip address 10.10.6.1 255.255.254.0
 ip nat inside
 ip virtual-reassembly
!
router rip
 network 10.0.0.0
!
ip classless
ip route 192.168.1.0 255.255.255.0 FastEthernet0/0
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list INSIDE_NAT_ADDRESSES interface FastEthernet0/0 overload
ip nat inside source static tcp 10.10.7.209 1723 interface FastEthernet0/0 1723
ip nat inside source static udp 10.10.7.200 500 interface FastEthernet0/0 500
ip nat inside source static udp 10.10.7.200 4500 interface FastEthernet0/0 4500
!         
ip access-list extended ACL_VPN
 permit icmp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255
 permit udp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255 eq snmp
 permit tcp 10.10.6.0 0.0.1.255 192.168.1.0 0.0.0.255 eq 22
ip access-list extended INSIDE_NAT_ADDRESSES
 deny   ip 10.10.0.0 0.0.255.255 192.168.1.0 0.0.0.255
 permit ip 10.10.6.0 0.0.1.255 any
ip access-list extended match-t1-traffic
 permit ip 12.171.215.192 0.0.0.15 host 0.0.0.0
!
access-list 20 permit 10.10.6.0 0.0.1.255
snmp-server community public RO
route-map t1 permit 20
 match ip address match-t1-traffic
 set ip next-hop 12.171.215.193
!
!
!
control-plane
!
banner login ^C
*************************
cisco router
*************************
^C
!
line con 0
line aux 0
line vty 0 4
 access-class 20 in
 privilege level 15
 transport input ssh
line vty 5 15
 access-class 20 in
 privilege level 15
 transport input ssh
!
end

router1841#