!!!!!!!!!!!!!!!on R1

crypto isakmp policy 1
hash md5
authentication pre-share
lifetime 3600
grou 1 
encry des
!
crypto isakmp key cisco123 address 30.0.0.3
!
access-list 101 permit ip 10.1.1.0 0.0.0.255 10.1.3.0 0.0.0.255
!
crypto ipsec transform-set TS esp-des esp-md5-hmac
!
crypto map CMAP 1 ipsec-isakmp
 set peer 30.0.0.3
 set transform-set TS
 match address 101
!
interface FastEthernet0/0
 ip address 20.0.0.1 255.255.255.0
 crypto map CMAP
end
!
R1#sho run | in route
ip route 30.0.0.0 255.255.255.0 20.0.0.2
ip route 40.0.0.0 255.255.255.0 20.0.0.2
ip route 10.1.3.0 255.255.255.0 20.0.0.2 (was added afterwards)
R1#
R1#sh ip int br | ex un
Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0/0            20.0.0.1        YES NVRAM  up                    up
Loopback0                  10.1.1.1        YES NVRAM  up                    up
R1#







!!!!!!!!!!!!!!!on R3

crypto isakmp policy 1
hash md5
authentication pre-share
lifetime 3600
grou 1 
encry des
!
crypto isakmp key cisco123 address 20.0.0.1
!
access-list 101 permit ip 10.1.3.0 0.0.0.255 10.1.1.0 0.0.0.255
!
crypto ipsec transform-set TS esp-des esp-md5-hmac
!
crypto map CMAP 1 ipsec-isakmp
 set peer 20.0.0.1
 set transform-set TS
 match address 101
 crypto map CMAP
!

interface FastEthernet0/0
 ip address 30.0.0.3 255.255.255.0
 crypto map CMAP
!
R3#SHOW RUN | in route
ip route 20.0.0.0 255.255.255.0 30.0.0.2
ip route 40.0.0.0 255.255.255.0 30.0.0.2
ip route 10.1.1.0 255.255.255.0 30.0.0.2 (was added afterwards)
R3#
R3#sh ip int br | ex un
Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0/0            30.0.0.3        YES NVRAM  up                    up
Loopback0                  10.1.3.1        YES NVRAM  up                    up




!!!!!!!!!!!!!!!on ISP


ISP#show ip int br | ex un
Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0/0            30.0.0.2        YES NVRAM  up                    up
FastEthernet0/1            20.0.0.2        YES NVRAM  up                    up
FastEthernet1/0            40.0.0.2        YES NVRAM  up                    up
Loopback0                  10.1.2.1        YES NVRAM  up                    up
ISP#
ISP#show run | in route
ISP#
ISP#
ISP#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

     20.0.0.0/24 is subnetted, 1 subnets
C       20.0.0.0 is directly connected, FastEthernet0/1
     40.0.0.0/24 is subnetted, 1 subnets
C       40.0.0.0 is directly connected, FastEthernet1/0
     10.0.0.0/24 is subnetted, 1 subnets
C       10.1.2.0 is directly connected, Loopback0
     30.0.0.0/24 is subnetted, 1 subnets
C       30.0.0.0 is directly connected, FastEthernet0/0

ISP#