crypto ipsec profile Solucard_Ultrared

set group 2
set transform-set aes256-sha

interface Tunnel24
ip unnumbered GigabitEthernet0/1.1
ip nat inside
ip virtual-reassembly in
tunnel source 138.186.89.226
tunnel mode ipsec ipv4
tunnel destination 107.6.147.14
tunnel protection ipsec profile Solucard_Ultrared

access-list 110 deny ip 192.168.1.0 0.0.0.255 192.168.3.0 0.0.0.255

access-list 110 deny ip 192.168.1.0 0.0.0.255 10.11.10.0 0.0.0.255
access-list 110 permit ip 192.168.1.0 0.0.0.255 any
access-list 110 permit ip 10.11.10.0 0.0.0.255 any
access-list 110 permit ip 172.23.0.0 0.0.0.255 any
access-list 110 permit ip 172.21.10.0 0.0.0.255 any
access-list 110 permit ip 172.21.11.0 0.0.0.255 any
access-list 110 permit ip 172.21.15.0 0.0.0.255 any
access-list 110 permit ip host 10.34.157.23 any

ip route 10.34.157.0 255.255.255.0 Tunnel24