!

crypto map cmap 10 ipsec-isakmp

set peer 11.1.1.1
set transform-set tset
match address abc
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
interface Loopback0
ip address 192.168.5.5 255.255.255.0
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface FastEthernet1/0
ip address 11.1.1.15 255.255.255.0
duplex auto
speed auto
crypto map cmap
!
interface FastEthernet1/1
no ip address
shutdown
duplex auto
speed auto
!
ip route 192.168.1.0 255.255.255.0 11.1.1.1
no ip http server
no ip http secure-server
!
!
!
ip access-list extended abc
permit ip 192.168.5.0 0.0.0.255 192.168.1.0 0.0.0.255
!
logging alarm informational
!
!
!
!
!
control-plane
!
!
!
!
!
!
gatekeeper

shutdown
!
!
line con 0
exec-timeout 0 0
logging synchronous
stopbits 1
line aux 0
stopbits 1
line vty 0 4
!
!
webvpn cef
!
end
R1(config)#
R1(config)#
R1(config)#
R1(config)#
R1(config)#do show config
Using 1296 out of 129016 bytes
!
upgrade fpd auto
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip cef
!
!
!
!
no ip domain lookup
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
crypto isakmp policy 10

encr 3des
hash md5
authentication pre-share
group 2
!
!
crypto ipsec transform-set tset esp-3des esp-md5-hmac
!
crypto map cmap 10 ipsec-isakmp
set peer 11.1.1.1
set transform-set tset
match address abc
R1(config)#exit
R1#wr me
*Jan 29 04:29:52.782: %SYS-5-CONFIG_I: Configured from console by console
R1#wr mem
Building configuration...
[OK]
R1#sh run
Building configuration...
Current configuration : 1337 bytes
!
upgrade fpd auto
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip cef
!
!
!
!
no ip domain lookup
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
crypto isakmp policy 10

encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key cisco address 11.1.1.1
!
!
crypto ipsec transform-set tset esp-3des esp-md5-hmac
!
crypto map cmap 10 ipsec-isakmp
set peer 11.1.1.1
set transform-set tset
match address abc
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
interface Loopback0
ip address 192.168.5.5 255.255.255.0
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface FastEthernet1/0
ip address 11.1.1.15 255.255.255.0
duplex auto
speed auto
crypto map cmap
!
interface FastEthernet1/1
no ip address
shutdown
duplex auto
speed auto
!
ip route 192.168.1.0 255.255.255.0 11.1.1.1
no ip http server
no ip http secure-server
!
!
!
ip access-list extended abc
permit ip 192.168.5.0 0.0.0.255 192.168.1.0 0.0.0.255
!
logging alarm informational
!
!
!
!
!

control-plane
!
!
!