Cisco IOS VPN to IPCop

crypto isakmp key supersecertkey address AAA.BBB.CCC.DDD
!
crypto isakmp policy 20
 encr 3des
 hash md5
 authentication pre-share
 group 2
!
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
!
crypto map CSM_CME_FastEthernet0.831 131 ipsec-isakmp
 set peer AAA.BBB.CCC.DDD
 set transform-set ESP-3DES-SHA
 match address XY-TEST-CRYPTO-ACL
 reverse-route
!
ip nat outside source static 192.168.XX.121 10.4.YYY.243 add-route
!
ip access-list extended XY-TEST-CRYPTO-ACL
 permit ip 10.0.YYY.40 0.0.0.252 192.168.XX.0 0.0.0.255
!

# Do not modify 'ipsec.conf' directly since any changes you make will be
# overwritten whenever you change IPsec settings using the web interface!
#
version 2.0
config setup
       protostack=netkey
       klipsdebug="none"
       plutodebug="none"
       #plutoload=%search
       #plutostart=%search
       uniqueids=yes
       nat_traversal=yes   
       virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16,%v4:!192.168.5.0/255.255.255.0,%v4:!10.0.244.40/30

conn %default
       keyingtries=0
       disablearrivalcheck=no
       leftupdown=/usr/local/bin/ipsecupdown.sh

#RED
conn RED
       left=192.168.0.1
       leftsubnet=192.168.XXX.0/24
       right=AAA.BBB.CCC.EEE
       rightsubnet=10.0.YYYY.40/30
       ike=3des-sha-modp1024
       esp=3des-sha1
       ikelifetime=1h
       keylife=24h
       dpddelay=30
       dpdtimeout=120
       dpdaction=restart
       pfs=no
       authby=secret
       auto=start