config t

hostname ciscoasa

interface eth0/0
  nameif inside
  security-level 100
  ip address 10.0.0.1 255.255.255.0
  no shutdown
  exit
interface eth0/1
  nameif outside
  security-level 0
  ip address 20.0.0.1 255.255.255.0
  no shutdown
  exit

username test password test mschap

ip local pool vpn-pool 10.0.1.2-10.0.1.254 mask 255.255.255.0

crypto isakmp enable outside

crypto isakmp policy 10
  authentication pre-share
  encryption 3des
  hash sha
  group 2
  lifetime 86400
  exit

crypto ipsec transform-set vpn-ts esp-3des esp-sha-hmac
crypto ipsec transform-set vpn-ts mode transport

crypto dynamic-map vpn-map 10 set transform-set vpn-ts
crypto map mymap 65535 ipsec-isakmp dynamic vpn-map
crypto map mymap interface outside

same-security-traffic permit intra-interface

tunnel-group DefaultRAGroup type ipsec-ra
tunnel-group DefaultRAGroup general-attributes
  address-pool vpn-pool
  authentication-server-group LOCAL
  exit
tunnel-group DefaultRAGroup ipsec-attributes
  pre-shared-key cisco
  exit

tunnel-group DefaultRAGroup ppp-attributes
  no authentication chap
  authentication ms-chap-v1
  authentication ms-chap-v2
  exit

isakmp nat-traversal