! hostname higashiokayama-ei ! crypto isakmp policy 10 encr aes 256 hash sha256 authentication pre-share group 2 crypto isakmp key cisco address 1.1.1.1 ! crypto ipsec transform-set MYSET esp-aes esp-sha256-hmac ! ! crypto map MYMAP 10 ipsec-isakmp set peer 1.1.1.1 set transform-set MYSET match address IPSEC ! crypto isakmp keepalive 600 periodic ! interface FastEthernet0 ip address 192.168.20.20 255.255.255.0 no ip proxy-arp ! interface GigabitEthernet8 ip address 1.1.1.2 255.255.255.0 no ip proxy-arp crypto map MYMAP ! ip route 0.0.0.0 0.0.0.0 GigabitEthernet 8 ! ! ip access-list extended IPSEC permit ip 192.168.20.0 0.0.0.255 any ! end