ip access-list extended TUNNEL-DEV 11 permit ip 10.80.158.90 0.0.0.0 10.223.251.0 0.0.0.255 12 permit ip 10.80.164.90 0.0.0.0 10.223.251.0 0.0.0.255 13 permit ip 10.80.158.46 0.0.0.0 10.223.251.0 0.0.0.255 14 permit ip 10.80.164.29 0.0.0.0 10.223.251.0 0.0.0.255 15 permit ip 10.40.39.53 0.0.0.0 10.223.251.0 0.0.0.255 16 permit ip 10.40.39.54 0.0.0.0 10.223.251.0 0.0.0.255 17 permit ip 10.40.39.55 0.0.0.0 10.223.251.0 0.0.0.255 18 permit ip 10.40.39.50 0.0.0.0 10.223.251.0 0.0.0.255 19 permit ip 10.40.39.51 0.0.0.0 10.223.251.0 0.0.0.255 20 permit ip 10.40.39.52 0.0.0.0 10.223.251.0 0.0.0.255 21 permit ip 10.40.39.56 0.0.0.0 10.223.251.0 0.0.0.255 22 permit ip 10.80.0.0 0.0.1.255 10.223.251.0 0.0.0.255 exit ! crypto keyring TUNNEL-DEV local-address 111.111.111.111 pre-shared-key address 44.X.X.X key BLAHBLAHBLAH exit ! crypto isakmp policy 10 encr aes 256 hash sha256 authentication pre-share group 14 lifetime 28800 ! crypto isakmp profile TUNNEL-DEV keyring TUNNEL-DEV match identity address 44.X.X.X 255.255.255.255 local-address 111.111.111.111 ! crypto ipsec transform-set TUNNEL-DEV esp-aes 256 esp-sha256-hmac mode tunnel ! crypto map TUNNEL-DEV 10 ipsec-isakmp match address TUNNEL-DEV set peer 44.X.X.X set transform-set TUNNEL-DEV set pfs group14 set security-association lifetime second 3600 ! interface TenGigabitEthernet0/0/0 crypto map TUNNEL-DEV