Router-A#sh run ! hostname Router-A ! crypto isakmp policy 10 encr aes hash md5 authentication pre-share group 2 ! crypto isakmp key cisco123 address 20.0.0.2 crypto isakmp key cisco123 address 40.0.0.2 ! ! ! crypto ipsec transform-set myset esp-aes esp-md5-hmac ! crypto map crypto-map 10 ipsec-isakmp set peer 20.0.0.2 set transform-set myset match address 100 ! crypto map crypto-map 20 ipsec-isakmp set peer 40.0.0.2 set transform-set myset match address 100 ! interface FastEthernet0/0 ip address 192.168.2.1 255.255.255.0 duplex auto speed auto ! interface FastEthernet0/1 ip address 10.0.0.1 255.255.255.0 duplex auto speed auto crypto map crypto-map ! interface FastEthernet1/0 ip address 30.0.0.1 255.255.255.0 duplex auto speed auto crypto map crypto-map ! ip route 0.0.0.0 0.0.0.0 10.0.0.2 ip route 0.0.0.0 0.0.0.0 30.0.0.2 ! access-list 100 permit ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255 ! end ############################### Router-B#sh run ! hostname Router-B ! crypto isakmp policy 10 encr aes hash md5 authentication pre-share group 2 ! crypto isakmp key cisco123 address 10.0.0.1 crypto isakmp key cisco123 address 30.0.0.1 ! crypto ipsec transform-set myset esp-aes esp-md5-hmac ! crypto map crypto-map 10 ipsec-isakmp set peer 10.0.0.1 set transform-set myset match address 100 ! crypto map crypto-map 20 ipsec-isakmp set peer 30.0.0.1 set transform-set myset match address 100 ! interface FastEthernet0/0 ip address 20.0.0.2 255.255.255.0 duplex auto speed auto crypto map crypto-map ! interface FastEthernet0/1 ip address 40.0.0.2 255.255.255.0 duplex auto speed auto crypto map crypto-map ! interface Ethernet1/0 ip address 192.168.1.1 255.255.255.0 duplex auto speed auto ! ip classless ip route 0.0.0.0 0.0.0.0 20.0.0.1 ip route 0.0.0.0 0.0.0.0 40.0.0.1 ! access-list 100 permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255 ! end Router-B#