crypto ikev2 proposal SITE2SITE_Proposal
 encryption 3des aes-cbc-256
 integrity md5 sha256
 group 2 14

crypto ikev2 policy SITE2SITE_Policy
 proposal SITE2SITE_Proposal

crypto ikev2 keyring SITE2SITE
 peer PEER_PCC
  address x.x.x.18
  pre-shared-key local (key)
  pre-shared-key remote (key)

crypto ikev2 profile SITE2SITE_Profile
 match identity remote address x.x.x.18 255.255.255.255
 identity local address x.x.x.202
 authentication local pre-share
 authentication remote pre-share
 keyring SITE2SITE

crypto ipsec transform-set SITE2SITE_SET2 esp-aes 256 esp-md5-hmac

crypto map SITE2SITE_MAP 10 ipsec-isakmp
 set peer x.x.x.18
 set transform-set SITE2SITE_SET2
 set pfs group2
 set ikev2-profile SITE2SITE_Profile
 match address SITE2SITE-ACL


interface GigabitEthernet0/1
 description OUTSIDE WAN
 ip address x.x.x.202 255.255.255.252
 crypto map SITE2SITE_MAP

interface GigabitEthernet0/2
 description INSIDE LAN
 ip address 192.168.201.1 255.255.255.0
 
ip access-list extended SITE2SITE-ACL
 permit ip 192.168.201.0 0.0.0.255 192.168.200.0 0.0.0.255