R3#sh run
Building configuration...

Current configuration : 3030 bytes
!
! Last configuration change at 23:01:03 CET Sun Aug 29 2021
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
!
vrf definition DFN-L3VPN
 rd 2:1
 route-target export 2:1
 route-target import 2:1
 !
 address-family ipv4
 exit-address-family
!
vrf definition Sprache-AST
 rd 20:1
 route-target export 20:1
 route-target import 20:1
 !
 address-family ipv4
 exit-address-family
!
!
no aaa new-model
clock timezone CET 1 0
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
!
!
!
ip vrf DFN-X
 rd 1:1
 route-target export 1:1
 route-target import 1:1
!
ip vrf Daten-AST
 rd 10:1
 route-target export 10:1
 route-target import 10:1
!
!
!
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
redundancy
!
!         
! 
!
crypto ikev2 proposal PROP1 
 encryption aes-cbc-256
 integrity sha512
 group 14
!
crypto ikev2 policy POLICY_IKEV2 
 match fvrf DFN-L3VPN
 match address local 188.100.3.2
 proposal PROP1
!
crypto ikev2 keyring KEYRING1
 peer ANY
  address 0.0.0.0 0.0.0.0
  pre-shared-key cisco123
 !
!
!
crypto ikev2 profile IKEv2-PROF1
 match fvrf DFN-L3VPN
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local KEYRING1
!
!
!
crypto ipsec transform-set TS1 esp-aes 256 esp-sha-hmac 
 mode transport
!
crypto ipsec profile IPSEC-PROF1
 set transform-set TS1 
 set ikev2-profile IKEv2-PROF1
!
!
!
crypto map CMAP 1 ipsec-isakmp 
 ! Incomplete
!
!
!
!
!
interface Loopback0
 ip address 3.3.3.3 255.255.255.0
!
interface Loopback1
 vrf forwarding DFN-L3VPN
 ip address 33.33.33.1 255.255.255.0
!
interface Tunnel1
 vrf forwarding Sprache-AST
 ip address 172.27.1.6 255.255.255.252
 tunnel source 188.100.3.2
 tunnel mode ipsec ipv4
 tunnel destination 188.100.1.2
 tunnel key 777
 tunnel vrf DFN-L3VPN
 tunnel protection ipsec profile IPSEC-PROF1
!
interface Ethernet0/0
 ip vrf forwarding DFN-X
 ip address 188.0.3.2 255.255.255.252
!
interface Ethernet0/0.101
 encapsulation dot1Q 101
 vrf forwarding DFN-L3VPN
 ip address 188.100.3.2 255.255.255.252
!
interface Ethernet0/1
 ip vrf forwarding Daten-AST
 ip address 192.168.30.1 255.255.255.0
!
interface Ethernet0/2
 vrf forwarding Sprache-AST
 ip address 192.168.33.1 255.255.255.0
!
interface Ethernet0/3
 no ip address
!
router bgp 65502
 bgp router-id 3.3.3.3
 bgp log-neighbor-changes
 !
 address-family ipv4 vrf DFN-L3VPN
  bgp router-id 3.3.3.3
  neighbor 188.100.3.1 remote-as 680
  neighbor 188.100.3.1 activate
 exit-address-family
 !
 address-family ipv4 vrf DFN-X
  bgp router-id 3.3.3.3
  neighbor 188.0.3.1 remote-as 680
  neighbor 188.0.3.1 activate
 exit-address-family
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
ip route vrf Sprache-AST 192.168.11.0 255.255.255.0 Tunnel1
!
!
!
!
control-plane
!
!
!
!
!
!
!         
line con 0
 logging synchronous
line aux 0
line vty 0 4
 login
 transport input all
!
!
end

R3#  
R3#