anchor.diff:  !
   !
   no ip dhcp use vrf connected
  -ip dhcp excluded-address 10.249.71.64 10.249.71.255
  -!
  -ip dhcp pool vlan1pool
  -   network 10.249.71.0 255.255.255.0
  -   default-router 10.249.71.1
  +ip dhcp excluded-address 192.168.1.32 192.168.1.255
  +!
  +ip dhcp pool vlan20pool
  +   network XXX.XXX.XXX.0 255.255.255.0
  +   default-router XXX.XXX.XXX.1
  +   dns-server 8.8.8.8
  +!
  +ip dhcp pool vlan10pool
  +   network 192.168.1.0 255.255.255.0
  +   default-router 192.168.1.1
      dns-server 8.8.8.8
   !
   !
  
positive.code:  ip address XXX.XXX.XXX.XXX 255.255.255.252
   ip pim sparse-mode
   tunnel source XXX.XXX.XXX.XXX
   tunnel destination XXX.XXX.XXX.XXX
  !
  interface Loopback0
   ip address 10.249.0.229 255.255.255.255
  !
  interface FastEthernet0
  !
  interface FastEthernet1
  !
  interface FastEthernet2
  !
  interface FastEthernet3
  !
  interface FastEthernet4
   ip address dhcp
  
negative.code: = CME New Release VPN
  
  This guide is written to help others go through the process of configuring a system to connect to the Chicago Mercantile Exchange's New Release environment over a self-hosted VPN connection. It's meant not to be an in-depth explanation of all terms and concepts, but rather a guide/map to go from a new router to having a working connection for those with only a high level understanding of routers.
  
  == Step 1: Router
  
  You will need a router with built-in ISAKMP and IPSEC capabilities. One of the low cost options is to go with an 800 series Cisco router such as the 871W which you can pick up on Ebay in the $50 to $60 range, and it includes 802.11 wireless capabilities. This guide is written using an 871W router. 
  
  . For those readers who are not networking experts or Cisco CCNAs, there are many acronyms that are used. A few of them are briefly explained here to help get you up to speed.
  * ISAKMP - This is part of the security mechanism and is a subset of IKE.  http://networkengineering.stackexchange.com/questions/1/whats-the-difference-between-ike-and-isakmp
  * GRE - Generic Routing Encapsulation. This allows multicast traffic to be sent over the VPN tunnel. http://www.cisco.com/c/en/us/support/docs/ip/ip-multicast/43584-mcast-over-gre.html
  * PIM - Protocol Independent Multicast. You'll need to "enable multicast routing" and "pim sparse-mode" on the router for the multicast traffic to work properly.  http://www.cisco.com/c/en/us/td/docs/ios/solutions_docs/ip_multicast/White_papers/mcst_ovr.html
  * VLAN - Virtual LAN. Note that on the 871W, you can not assign a specific IP or DHCP group to the physical interfaces. You must assign the interfaces to be part of a VLAN and then the VLAN can be assigned a DHCP pool for IP assignment.  
  * Advanced Security or Advanced IP - Cisco offers two flavors of software to run on their routers. The "PIM" capabilities are in the Advanced IP package, not the Advanced Security package despite the need for a VPN tunnel! Make sure you are running a package with the K9 designator because it has AES/3DES encryption.
  * ACL - Access Lists. These allow you to choose what traffic can and can not go through your router.
  