1001-sp1#sh run
Building configuration...

Current configuration : 3467 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname 1001-sp1
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
no aaa new-model
clock timezone EST 0
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip source-route
!
!
ip vrf DSL#1
 rd 172.26.0.0:1
!
!
!
ip cef
!
crypto keyring tec-test vrf DSL#1
  pre-shared-key address 0.0.0.0 0.0.0.0 key cisco123
!
crypto isakmp policy 5
 hash md5
 authentication pre-share
 group 2
!
crypto isakmp policy 10
 encr 3des
 hash md5
 authentication pre-share
 group 2
crypto isakmp profile tac-test
   keyring tec-test
   match identity address 0.0.0.0 DSL#1
!
!
crypto ipsec transform-set encrypted-inet-dmvpn esp-3des e                                                                   sp-sha-hmac
 mode transport
!
crypto ipsec profile encrypted-inet-dmvpn
 set security-association lifetime seconds 1440
 set transform-set encrypted-inet-dmvpn
 set isakmp-profile tac-test
!
!
interface Loopback0
 ip address 11.11.11.11 255.255.255.0
!
interface Tunnel100
 ip address 172.26.253.100 255.255.255.0
 no ip redirects
 ip mtu 1400
 ip flow ingress
 ip nhrp authentication abc123
 ip nhrp map multicast dynamic
 ip nhrp map multicast 172.26.253.1
 ip nhrp map 172.26.253.1 6.1.1.2
 ip nhrp map multicast 6.1.1.2
 ip nhrp network-id 1234
 ip nhrp holdtime 120
 ip nhrp nhs 172.26.253.1
 ip nhrp registration no-unique
 ip tcp adjust-mss 1360
 tunnel source Ethernet0/1
 tunnel mode gre multipoint
 tunnel key 1234
 tunnel path-mtu-discovery
 tunnel vrf DSL#1
 tunnel protection ipsec profile encrypted-inet-dmvpn
!
interface Ethernet0/0
 ip address 1.1.1.2 255.255.255.0
!
interface Ethernet0/1
 ip vrf forwarding DSL#1
 ip address 2.1.1.2 255.255.255.0
!
interface Ethernet0/2
 ip address 8.1.1.1 255.255.255.0
!
!
router eigrp 100
 no auto-summary
 !
 address-family ipv4 vrf DSL#1
  network 2.0.0.0
  no auto-summary
  autonomous-system 100
 exit-address-family
!
router bgp 1
 no synchronization
 bgp log-neighbor-changes
 network 11.11.11.0 mask 255.255.255.0
 network 172.26.253.0 mask 255.255.255.0
 neighbor 172.26.253.1 remote-as 1
 no auto-summary
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 2.1.1.1
!
!
no ip http server
no ip http secure-server
!
access-list 190 permit ip 2.1.1.0 0.0.0.255 14.1.1.0 0.0.0.255
access-list 190 permit ip 5.1.1.0 0.0.0.255 14.1.1.0 0.0.0.255

!
control-plane
!
!
line con 0
 logging synchronous
line aux 0
line vty 0 4
 login
!
end

1001-sp1#
1001-sp1#
1001-sp1#
1001-sp1#sh crypto isa sa
IPv4 Crypto ISAKMP SA
dst             src             state          conn-id status
7.1.1.2         2.1.1.2         QM_IDLE           1020 ACTIVE
2.1.1.2         6.1.1.2         QM_IDLE           1017 ACTIVE

IPv6 Crypto ISAKMP SA

1001-sp1#sh crypto ipsec sa

interface: Tunnel100
    Crypto map tag: Tunnel100-head-0, local addr 2.1.1.2

   protected vrf: (none)
   local  ident (addr/mask/prot/port): (2.1.1.2/255.255.255.255/47/0)
   remote ident (addr/mask/prot/port): (6.1.1.2/255.255.255.255/47/0)
   current_peer 6.1.1.2 port 500
     PERMIT, flags={origin_is_acl,}
    #pkts encaps: 13620, #pkts encrypt: 13620, #pkts digest: 13620
    #pkts decaps: 13633, #pkts decrypt: 13633, #pkts verify: 13633
    #pkts compressed: 0, #pkts decompressed: 0
    #pkts not compressed: 0, #pkts compr. failed: 0
    #pkts not decompressed: 0, #pkts decompress failed: 0
    #send errors 111, #recv errors 0

     local crypto endpt.: 2.1.1.2, remote crypto endpt.: 6.1.1.2
     path mtu 1500, ip mtu 1500, ip mtu idb Ethernet0/1
     current outbound spi: 0x170477CE(386168782)
     PFS (Y/N): N, DH group: none

     inbound esp sas:
      spi: 0xDE7ABCB3(3732585651)
        transform: esp-3des esp-sha-hmac ,
        in use settings ={Transport, }
        conn id: 671, flow_id: SW:671, sibling_flags 80000006, crypto map: Tunnel100-head-0
        sa timing: remaining key lifetime (k/sec): (4570114/134)
        IV size: 8 bytes
        replay detection support: Y
        Status: ACTIVE

     inbound ah sas:

     inbound pcp sas:

     outbound esp sas:
      spi: 0x170477CE(386168782)
        transform: esp-3des esp-sha-hmac ,
        in use settings ={Transport, }
        conn id: 672, flow_id: SW:672, sibling_flags 80000006, crypto map: Tunnel100-head-0
        sa timing: remaining key lifetime (k/sec): (4570116/134)
        IV size: 8 bytes
        replay detection support: Y
        Status: ACTIVE

     outbound ah sas:

     outbound pcp sas:

   protected vrf: (none)
   local  ident (addr/mask/prot/port): (2.1.1.2/255.255.255.255/47/0)
   remote ident (addr/mask/prot/port): (7.1.1.2/255.255.255.255/47/0)
   current_peer 7.1.1.2 port 500
     PERMIT, flags={origin_is_acl,}
    #pkts encaps: 54, #pkts encrypt: 54, #pkts digest: 54
    #pkts decaps: 53, #pkts decrypt: 53, #pkts verify: 53
    #pkts compressed: 0, #pkts decompressed: 0
    #pkts not compressed: 0, #pkts compr. failed: 0
    #pkts not decompressed: 0, #pkts decompress failed: 0
    #send errors 0, #recv errors 0

     local crypto endpt.: 2.1.1.2, remote crypto endpt.: 7.1.1.2
     path mtu 1500, ip mtu 1500, ip mtu idb Ethernet0/1
     current outbound spi: 0x200B79F3(537623027)
     PFS (Y/N): N, DH group: none

     inbound esp sas:
      spi: 0xBE3817C1(3191347137)
        transform: esp-3des esp-sha-hmac ,
        in use settings ={Transport, }
        conn id: 673, flow_id: SW:673, sibling_flags 80000006, crypto map: Tunnel100-head-0
        sa timing: remaining key lifetime (k/sec): (4579703/769)
        IV size: 8 bytes
        replay detection support: Y
        Status: ACTIVE

     inbound ah sas:

     inbound pcp sas:

     outbound esp sas:
      spi: 0x200B79F3(537623027)
        transform: esp-3des esp-sha-hmac ,
        in use settings ={Transport, }
        conn id: 674, flow_id: SW:674, sibling_flags 80000006, crypto map: Tunnel100-head-0
        sa timing: remaining key lifetime (k/sec): (4579703/769)
        IV size: 8 bytes
        replay detection support: Y
        Status: ACTIVE

     outbound ah sas:

     outbound pcp sas:
1001-sp1#
1001-sp1#
1001-sp1#

1001-sp1#sh crypto session fvrf DSL#1
Crypto session current status

Interface: Tunnel100
Profile: tac-test
Session status: UP-ACTIVE
Peer: 6.1.1.2 port 500
  IKE SA: local 2.1.1.2/500 remote 6.1.1.2/500 Active
  IPSEC FLOW: permit 47 host 2.1.1.2 host 6.1.1.2
        Active SAs: 2, origin: crypto map

Interface: Tunnel100
Profile: tac-test
Session status: UP-ACTIVE
Peer: 7.1.1.2 port 500
  IKE SA: local 2.1.1.2/500 remote 7.1.1.2/500 Active
  IPSEC FLOW: permit 47 host 2.1.1.2 host 7.1.1.2
        Active SAs: 2, origin: crypto map

1001-sp1#
1001-sp1#
1001-sp1#
1001-sp1#sh crypto sock
1001-sp1#sh crypto sockets

Number of Crypto Socket connections 2

 Tu100 Peers (local/remote): 2.1.1.2/6.1.1.2
       Local Ident  (addr/mask/port/prot): (2.1.1.2/255.255.255.255/0/47)
       Remote Ident (addr/mask/port/prot): (6.1.1.2/255.255.255.255/0/47)
       IPSec Profile: "encrypted-inet-dmvpn"
       Socket State: Open
       Client: "TUNNEL SEC" (Client State: Active)
 Tu100 Peers (local/remote): 2.1.1.2/7.1.1.2
       Local Ident  (addr/mask/port/prot): (2.1.1.2/255.255.255.255/0/47)
       Remote Ident (addr/mask/port/prot): (7.1.1.2/255.255.255.255/0/47)
       IPSec Profile: "encrypted-inet-dmvpn"
       Socket State: Open
       Client: "TUNNEL SEC" (Client State: Active)

Crypto Sockets in Listen state:
Client: "TUNNEL SEC" Profile: "encrypted-inet-dmvpn" Map-name: "Tunnel100-head-0"

1001-sp1#
1001-sp1#
1001-sp1#
1001-sp1#sh ip nhrp
172.26.253.1/32 via 172.26.253.1
   Tunnel100 created 2d17h, never expire
   Type: static, Flags: used
   NBMA address: 6.1.1.2
172.26.253.100/32 via 172.26.253.100
   Tunnel100 created 00:34:14, expire 00:01:55
   Type: dynamic, Flags: router unique local
   NBMA address: 2.1.1.2
    (no-socket)
172.26.253.200/32 via 172.26.253.200
   Tunnel100 created 00:34:45, expire 00:01:39
   Type: dynamic, Flags: router used
   NBMA address: 7.1.1.2
1001-sp1#

1001-sp1#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

     1.0.0.0/24 is subnetted, 1 subnets
C       1.1.1.0 is directly connected, Ethernet0/0
     172.26.0.0/24 is subnetted, 1 subnets
C       172.26.253.0 is directly connected, Tunnel100
     22.0.0.0/24 is subnetted, 1 subnets
B       22.22.22.0 [200/0] via 172.26.253.200, 2d16h
     8.0.0.0/24 is subnetted, 1 subnets
C       8.1.1.0 is directly connected, Ethernet0/2
     11.0.0.0/24 is subnetted, 1 subnets
C       11.11.11.0 is directly connected, Loopback0
1001-sp1#
1001-sp1#
1001-sp1#
1001-sp1#
1001-sp1#
1001-sp1#
1001-sp1#
1001-sp1#sh ip route vrf DSL#1

Routing Table: DSL#1
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

     2.0.0.0/24 is subnetted, 1 subnets
C       2.1.1.0 is directly connected, Ethernet0/1
     6.0.0.0/24 is subnetted, 1 subnets
D       6.1.1.0 [90/307200] via 2.1.1.1, 2d16h, Ethernet0/1
     7.0.0.0/24 is subnetted, 1 subnets
D       7.1.1.0 [90/307200] via 2.1.1.1, 2d16h, Ethernet0/1
1001-sp1#