R3#sh run Building configuration... Current configuration : 2175 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname R3 ! boot-start-marker boot-end-marker ! no aaa new-model memory-size iomem 5 no ip icmp rate-limit unreachable ip cef ! no ip domain lookup ! multilink bundle-name authenticated ! archive log config hidekeys ! crypto isakmp policy 1 encr 3des hash md5 authentication pre-share group 2 crypto isakmp key cisco123! address 192.168.5.2 ! crypto ipsec transform-set TS esp-3des esp-md5-hmac mode transport ! crypto ipsec profile protect-gre set security-association lifetime seconds 86400 set transform-set TS ! ip tcp synwait-time 5 ! interface Loopback1 ip address 1.1.1.1 255.255.255.255 ! interface Tunnel0 ip address 172.16.0.1 255.255.255.0 tunnel source Loopback1 tunnel destination 2.2.2.2 tunnel protection ipsec profile protect-gre ! interface FastEthernet0/0 description *** Connection to R2 *** ip address 192.168.4.2 255.255.255.0 duplex auto speed auto ! interface Serial0/0 no ip address shutdown clock rate 2000000 ! interface FastEthernet0/1 description *** Connection to PC2 *** ip address 192.168.1.1 255.255.255.0 duplex auto speed auto ! interface Serial0/1 no ip address shutdown clock rate 2000000 ! interface Serial0/2 no ip address shutdown clock rate 2000000 ! interface FastEthernet1/0 no ip address shutdown duplex auto speed auto ! interface Serial2/0 no ip address shutdown serial restart-delay 0 ! interface Serial2/1 no ip address shutdown serial restart-delay 0 ! interface Serial2/2 no ip address shutdown serial restart-delay 0 ! interface Serial2/3 no ip address shutdown serial restart-delay 0 ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 192.168.4.1 ip route 192.168.2.0 255.255.255.0 172.16.0.2 ! no ip http server no ip http secure-server ! no cdp log mismatch duplex ! control-plane ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 login ! ! end R3#ping 1.1.1.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms ! R3#trace 2.2.2.2 Type escape sequence to abort. Tracing the route to 2.2.2.2 1 192.168.4.1 20 msec 36 msec 28 msec 2 10.10.10.2 64 msec 72 msec 36 msec 3 192.168.5.2 88 msec 96 msec 88 msec R3# Connected to Dynamips VM "R3" (ID 1, type c3725) - Console port Press ENTER to get the prompt. abort. Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 60/85/96 ms R3#trace 2.2.2.2 Type escape sequence to abort. Tracing the route to 2.2.2.2 1 192.168.4.1 20 msec 40 msec 36 msec 2 10.10.10.2 48 msec 68 msec 44 msec 3 192.168.5.2 80 msec 96 msec 104 msec R3#ping 172.16.0.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 172.16.0.2, timeout is 2 seconds: ..... Success rate is 0 percent (0/5) R3#ping 192.168.2.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds: ..... Success rate is 0 percent (0/5) R3#ping 2.2.2.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 88/94/100 ms R3# R3#sh run Building configuration... Current configuration : 2175 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname R3 ! boot-start-marker boot-end-marker ! ! no aaa new-model memory-size iomem 5 no ip icmp rate-limit unreachable ip cef ! ! ! ! no ip domain lookup ! multilink bundle-name authenticated ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! archive log config hidekeys ! ! crypto isakmp policy 1 encr 3des hash md5 authentication pre-share group 2 crypto isakmp key cisco123! address 192.168.5.2 ! ! crypto ipsec transform-set TS esp-3des esp-md5-hmac mode transport ! crypto ipsec profile protect-gre set security-association lifetime seconds 86400 set transform-set TS ! ! ! ! ip tcp synwait-time 5 ! ! ! ! interface Loopback1 ip address 1.1.1.1 255.255.255.255 ! interface Tunnel0 ip address 172.16.0.1 255.255.255.0 tunnel source Loopback1 tunnel destination 2.2.2.2 tunnel protection ipsec profile protect-gre ! interface FastEthernet0/0 description *** Connection to R2 *** ip address 192.168.4.2 255.255.255.0 duplex auto speed auto ! interface Serial0/0 no ip address shutdown clock rate 2000000 ! interface FastEthernet0/1 description *** Connection to PC2 *** ip address 192.168.1.1 255.255.255.0 duplex auto speed auto ! interface Serial0/1 no ip address shutdown clock rate 2000000 ! interface Serial0/2 no ip address shutdown clock rate 2000000 ! interface FastEthernet1/0 no ip address shutdown duplex auto speed auto ! interface Serial2/0 no ip address shutdown serial restart-delay 0 ! interface Serial2/1 no ip address shutdown serial restart-delay 0 ! interface Serial2/2 no ip address shutdown serial restart-delay 0 ! interface Serial2/3 no ip address shutdown serial restart-delay 0 ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 192.168.4.1 ip route 192.168.2.0 255.255.255.0 172.16.0.2 ! ! no ip http server no ip http secure-server ! no cdp log mismatch duplex ! ! ! ! ! ! control-plane ! ! ! ! ! ! ! ! ! ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 login ! ! end R3#ping 1.1.1.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms R3#trace 1.1.1.1 Type escape sequence to abort. Tracing the route to 1.1.1.1 1 1.1.1.1 0 msec 4 msec 4 msec R3#trace 2.2.2.2 Type escape sequence to abort. Tracing the route to 2.2.2.2 1 192.168.4.1 20 msec 36 msec 28 msec 2 10.10.10.2 64 msec 72 msec 36 msec 3 192.168.5.2 88 msec 96 msec 88 msec R3# R3#ping 192.168.2.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds: ..... Success rate is 0 percent (0/5) R3#