hostname R2
!
ip cef
!
crypto isakmp policy 1
 encr aes
 authentication pre-share
 group 2
crypto isakmp key MY_PASSWORD address 192.168.12.1     
!
crypto ipsec transform-set MY_TRANSFORM_SET esp-aes esp-sha-hmac 
 mode tunnel
!
crypto ipsec profile IPSEC_PROFILE
 set transform-set MY_TRANSFORM_SET 
!
interface Tunnel0
 ip address 12.12.12.2 255.255.255.0
 tunnel source 192.168.12.2
 tunnel mode ipsec ipv4
 tunnel destination 192.168.12.1
 tunnel protection ipsec profile IPSEC_PROFILE
!
interface fa1/0
 ip address 192.168.2.200 255.255.255.0
!
interface fa0/0
 ip address 192.168.12.2 255.255.255.0
!
ip route 192.168.1.0 255.255.255.0 Tunnel0
!
end