! Cisco FP1010 in ASA mode: dirty-to-clean IKEv1 protocol breakhostname An_SYDNEY-FW!interface GigabitEthernet1/1 description FROM-DIRTY-INTERNET-ISR1111 nameif outside security-level 0 no shutdowninterface GigabitEthernet1/2 description TO-CLEAN-OVERLAY-ISR1111 nameif inside security-level 100 no shutdown!object network PARTNER-LAN subnet 10.42.1.0 255.255.255.240object network COUNTRY-SUMMARY subnet 10.42.0.0 255.255.0.0object-group network USA-CORES network-object 10.255.0.1 255.255.255.255 network-object 10.255.0.2 255.255.255.255!access-list CLEAN-CRYPTO extended permit ip object PARTNER-LAN object-group USA-CORESaccess-list CLEAN-CRYPTO extended permit ip object PARTNER-LAN host 10.250.2.1access-list PARTNER-ISOLATION extended deny ip object PARTNER-LAN object COUNTRY-SUMMARYaccess-list PARTNER-ISOLATION extended permit ip object PARTNER-LAN object-group USA-CORESaccess-group PARTNER-ISOLATION in interface insidenat (inside,outside) source static PARTNER-LAN PARTNER-LAN destination static USA-CORES USA-CORES no-proxy-arp route-lookup!crypto ikev1 enable outsidecrypto ikev1 policy 10 authentication pre-share encryption aes-256 hash sha256 group 14 lifetime 86400crypto ipsec ikev1 transform-set CLEAN-SET esp-aes-256 esp-sha256-hmactunnel-group An_SYDNEY_OVERLAY type ipsec-l2ltunnel-group An_SYDNEY_OVERLAY ipsec-attributes ikev1 pre-shared-key wsRf#v^d%$N(Bii9jN4c(bsql7F$!w!KM(RmIeijcrypto map CLEAN-MAP 10 match address CLEAN-CRYPTOcrypto map CLEAN-MAP 10 set peer An_SYDNEY_OVERLAYcrypto map CLEAN-MAP 10 set ikev1 transform-set CLEAN-SETcrypto map CLEAN-MAP interface outside!! Relationship source: geJSIcE4999ncOD3xGD-W! Resolved allocation: AU_SLOT_1 / 10.42.1.0/28write memory