hostname R1
username cisco123 privilege 15 password 0 cisco123
!
crypto isakmp policy 2
 authentication pre-share
!
crypto isakmp key cisco123 address 172.17.1.1
!
!
crypto ipsec transform-set Router-IPSEC esp-des esp-sha-hmac
!
crypto map SDM_CMAP_1 1 ipsec-isakmp 
 description Tunnel to172.17.1.1
 set peer 172.17.1.1
 set transform-set Router-IPSEC 
 match address 100
!
spanning-tree mode pvst
interface FastEthernet0/0
 ip address 10.10.10.1 255.255.255.0
 duplex auto
 speed auto
!
interface FastEthernet0/1
 ip address 172.16.1.1 255.255.255.0
 duplex auto
 speed auto
 crypto map SDM_CMAP_1
!
interface Vlan1
 no ip address
 shutdown
!
ip classless
ip route 0.0.0.0 0.0.0.0 172.16.1.2 
!
!
access-list 100 remark SDM_ACL Category=4
access-list 100 remark IPSec Rule
access-list 100 permit ip 10.10.10.0 0.0.0.255 10.20.10.0 0.0.0.255
!
line con 0
 login local
!
line aux 0
!
line vty 0 4
 login local
 privilege level 15
!
!
!