R1

hostname R1

!

crypto isakmp policy 1

 authentication pre-share

crypto isakmp key cisco address 200.0.0.1

!        

!

crypto ipsec transform-set AES128-SHA esp-aes esp-sha-hmac

!

crypto map MAP1 10 ipsec-isakmp

 set peer 200.0.0.1

 set transform-set AES128-SHA

 match address 101

!

!

!

!

interface Loopback0

 ip address 10.0.0.0 255.255.255.255

!

         

interface FastEthernet0/0

 ip address 100.0.0.1 255.255.255.252

 duplex auto

 speed auto

 crypto map MAP1

ip route 0.0.0.0 0.0.0.0 100.0.0.2

!

access-list 101 permit ip host 10.0.0.0 host 10.1.1.0

!


R2

hostname R2

!

interface FastEthernet0/0

ip address 100.0.0.2 255.255.255.252

duplex auto

speed auto

!

interface FastEthernet0/1

ip address 200.0.0.2 255.255.255.252

duplex auto

speed auto


R3

hostname R3

!

crypto isakmp policy 1

 authentication pre-share

crypto isakmp key cisco address 100.0.0.1

!        

!

crypto ipsec transform-set AES128-SHA esp-aes esp-sha-hmac

!

crypto map MAP1 10 ipsec-isakmp

 set peer 100.0.0.1

 set transform-set AES128-SHA

 match address 101

!

!

!

!

interface Loopback0

 ip address 10.1.1.0 255.255.255.255

!

interface FastEthernet0/1

 ip address 200.0.0.1 255.255.255.0

 duplex auto

 speed auto

 crypto map MAP1

!

!

ip route 0.0.0.0 0.0.0.0 200.0.0.2

!

!access-list 101 permit ip host 10.1.1.0 host 10.0.0.0