-----------------------------
 MAIN LOCATION ROUTER CONFIG
-----------------------------

crypto isakmp policy 10
 encr 3des
 hash md5
 authentication pre-share
crypto isakmp key Arsikere-LL address 172.22.251.33
crypto isakmp key Arsext-LL address 172.22.251.38
!
!
crypto ipsec transform-set BLR esp-3des esp-md5-hmac
crypto ipsec transform-set ASK esp-3des esp-md5-hmac
!


crypto map Arsext-LL 10 ipsec-isakmp
 set peer 172.22.251.38
 set transform-set ASK
 match address 101        


access-list 101 permit tcp 172.22.72.0 0.0.7.255 172.16.0.0 0.0.255.255
access-list 101 permit tcp 172.22.72.0 0.0.7.255 172.20.0.0 0.0.255.255

------------------------------------------------------------------------------------------------

------------------------------
  EDGE BRANCH ROUTER CONFIG
------------------------------

crypto isakmp policy 10
 encr 3des
 hash md5
 authentication pre-share
crypto isakmp key Arsext-LL address 172.22.251.37
!
!
crypto ipsec transform-set BLR esp-3des esp-md5-hmac
crypto ipsec transform-set ASK esp-3des esp-md5-hmac
!
crypto map Arsext-LL 10 ipsec-isakmp
 set peer 172.22.251.37
 set transform-set ASK
 match address 101
!                                                  
access-list 101 permit tcp 172.22.74.0 0.0.0.255 172.16.0.0 0.0.255.255
access-list 101 permit tcp 172.22.74.0 0.0.0.255 172.20.0.0 0.0.255.255