asa vpn & split-tunnel

ciscoasa# wr t
: Saved
:
ASA Version 7.2(4)
!
hostname ciscoasa
domain-name default.domain.invalid
enable password 2KFQnbNIdI.2KYOU encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
!
interface Vlan1
 nameif inside
 security-level 100
 ip address 192.168.0.254 255.255.255.0
!
interface Vlan2
 nameif outside
 security-level 0
 ip address 123.15.44.90 255.255.255.248
!
interface Ethernet0/0
 switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
ftp mode passive
dns server-group DefaultDNS
 domain-name default.domain.invalid
access-list outside-in extended permit tcp any any
access-list outside-in extended permit icmp any any
access-list inside_nat0_outbound extended permit ip any 192.168.0.128 255.255.255.128
access-list 102 standard permit 192.168.0.0 255.255.255.0
pager lines 24
logging asdm informational
mtu inside 1500
mtu outside 1500
ip local pool vpn 192.168.0.190-192.168.0.230 mask 255.255.255.0
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-524.bin
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 0 access-list inside_nat0_outbound
nat (inside) 1 0.0.0.0 0.0.0.0
static (inside,outside) tcp interface www 192.168.0.1 www netmask 255.255.255.255
static (inside,outside) tcp interface 33308 192.168.0.8 33308 netmask 255.255.255.255
static (inside,outside) tcp interface 33310 192.168.0.10 33310 netmask 255.255.255.255
static (inside,outside) tcp interface 88 192.168.0.55 88 netmask 255.255.255.255
static (inside,outside) tcp interface 5872 192.168.0.55 5872 netmask 255.255.255.255
access-group outside-in in interface outside
route outside 0.0.0.0 0.0.0.0 123.15.44.89 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
http server enable
http 0.0.0.0 0.0.0.0 outside
http 0.0.0.0 0.0.0.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto dynamic-map outside_dyn_map 20 set pfs group1
crypto dynamic-map outside_dyn_map 20 set transform-set ESP-3DES-SHA
crypto map outside_map 65535 ipsec-isakmp dynamic outside_dyn_map
crypto map outside_map interface outside
crypto isakmp enable outside
crypto isakmp policy 10
 authentication pre-share
 encryption 3des
 hash sha
 group 2
 lifetime 86400
crypto isakmp policy 65535
 authentication pre-share
 encryption 3des
 hash sha
 group 2
 lifetime 86400
telnet timeout 5
ssh 0.0.0.0 0.0.0.0 inside
ssh 0.0.0.0 0.0.0.0 outside
ssh timeout 60
ssh version 1
console timeout 0

group-policy vpngroup internal
group-policy vpngroup attributes
 dns-server value 202.102.224.68 202.102.227.68
 vpn-tunnel-protocol IPSec
 split-tunnel-policy tunnelspecified
 split-tunnel-network-list value 102
username caiwu1 password 69CVdUDB9Jnzr.vS encrypted privilege 0
username caiwu1 attributes
 vpn-group-policy vpngroup
username caiwu3 password GX4PlBo4vbJ8Gq.G encrypted privilege 0
username caiwu3 attributes
 vpn-group-policy vpngroup
username cangku password y8bHJHZsJljibkPv encrypted privilege 0
username cangku attributes
 vpn-group-policy vpngroup
username caiwu2 password DqhyYygMasPLzH7g encrypted privilege 0
username caiwu2 attributes
 vpn-group-policy vpngroup
username caiwu password aHQwH37KrcUXa6.8 encrypted privilege 0
username caiwu attributes
 vpn-group-policy vpngroup
username myjp password LC6Y5TGpABqMzldO encrypted privilege 0
username myjp attributes
 vpn-group-policy vpngroup
username myabl password pMgjebSdZnkDm2Jp encrypted privilege 0
username myabl attributes
 vpn-group-policy vpngroup
username hongxing password .CY4zxRxmVU5GPTN encrypted privilege 0
username hongxing attributes
 vpn-group-policy vpngroup
username dmcjp password XlA6J6N6wQ4IMiyG encrypted privilege 0
username dmcjp attributes
 vpn-group-policy vpngroup
username dmccz password JGDz5JF2zvQJPQiy encrypted privilege 0
username dmccz attributes
 vpn-group-policy vpngroup
username dmcabl password 3cEhpuEGjCPlkFfj encrypted privilege 0
username dmcabl attributes
 vpn-group-policy vpngroup
username cisco password 3USUcOPFUiMCO4Jk encrypted
tunnel-group vpngroup type ipsec-ra
tunnel-group vpngroup general-attributes
 address-pool vpn
 default-group-policy vpngroup
tunnel-group vpngroup ipsec-attributes
 pre-shared-key *
!
class-map inspection_default
 match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
 parameters
  message-length maximum 512
policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect netbios
  inspect rsh
  inspect rtsp
  inspect skinny
  inspect esmtp
  inspect sqlnet
  inspect sunrpc
  inspect tftp
  inspect sip
  inspect xdmcp
!
service-policy global_policy global
prompt hostname context
Cryptochecksum:eab6f5d4fa2cbbbad788b666b022ad9d
: end
[OK]