R1

hostname R1

!

crypto isakmp policy 1

 authentication pre-share

crypto isakmp key cisco address 200.0.0.1

!        

!

crypto ipsec transform-set AES128-SHA esp-aes esp-sha-hmac

mode transport

!

crypto ipsec profile P1

 set transform-set AES128-SHA

!

!

!

!

!

!

interface Loopback0

 ip address 10.0.0.0 255.255.255.255

!

!

interface Tunnel0

 ip address 10.2.2.1 255.255.255.252

 tunnel source 100.0.0.1

 tunnel destination 200.0.0.1

 tunnel mode ipsec ipv4

 tunnel protection ipsec profile P1

!

interface FastEthernet0/0

 ip address 100.0.0.1 255.255.255.252

 duplex auto

 speed auto

!

ip route 0.0.0.0 0.0.0.0 100.0.0.2

ip route 10.1.1.0 255.255.255.255 10.2.2.2


R2

hostname R2

!

interface FastEthernet0/0

ip address 100.0.0.2 255.255.255.252

duplex auto

speed auto

!

interface FastEthernet0/1

ip address 200.0.0.2 255.255.255.252

duplex auto

speed auto


R3

hostname R3

!

crypto isakmp policy 1

 authentication pre-share

crypto isakmp key cisco address 100.0.0.1

!        

!

crypto ipsec transform-set AES128-SHA esp-aes esp-sha-hmac

mode transport

!

crypto ipsec profile P1

 set transform-set AES128-SHA

!

!

!

!

!

!

interface Loopback0

 ip address 10.1.1.0 255.255.255.255

!

interface Tunnel0

 ip address 10.2.2.2 255.255.255.252

 tunnel source 200.0.0.1

 tunnel destination 100.0.0.1

 tunnel mode ipsec ipv4

 tunnel protection ipsec profile P1

!

interface FastEthernet0/1

 ip address 200.0.0.1 255.255.255.0

 duplex auto

 speed auto

!

!

ip route 0.0.0.0 0.0.0.0 200.0.0.2

ip route 10.0.0.0 255.255.255.255 Tunnel0

!