crypto isakmp policy 10 encryption aes hash sha authentication pre-share group 14 lifetime 21600 crypto isakmp key RisING address 10.23.152.18 ! ! crypto ipsec transform-set VTI esp-aes esp-sha-hmac mode tunnel ! crypto ipsec profile VTIPROFILE set transform-set VTI set pfs group14 ! ! ! ! ! ! ! ! interface Loopback0 ip address 10.23.127.80 255.255.255.255 ! interface Tunnel314 ip address 10.23.152.21 255.255.255.252 tunnel source 10.23.152.17 tunnel mode ipsec ipv4 tunnel destination 10.23.152.18 tunnel protection ipsec profile VTIPROFILE ! interface Ethernet0/0 ip address 10.23.152.17 255.255.255.252 ! router ospf 1 router-id 10.23.127.80 network 10.23.127.80 0.0.0.0 area 3 network 10.23.152.20 0.0.0.3 area 0 ! control-plane ! ! ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 line vty 0 4 login transport input ssh ! ! ! ! end