hello.

working config

not the changes in the access-list (switching source and destination)

Same for the address components in the crypto sections.

Also, the crypto map my-map should be bound to your external interface (potentially not dialer1)

Tim

!

!

crypto isakmp policy 2

encr 3des

hash md5

authentication pre-share

group 2

crypto isakmp xxx address ip.of.end.B

!

!

crypto ipsec transform-set tf-set esp-3des esp-md5-hmac

!

crypto map my-map 1 ipsec-isakmp

set peer ip.of.end.b

set transform-set tf-set

match address 101

!

!

!

interface Dialer1

crypto map my-map

!

ip classless

ip route 0.0.0.0 0.0.0.0 Dialer1

!

access-list 101 permit ip you.subnet.side.a appropriate.mask.for.this your.subnet.side.b appropriate.mask.for.this

!

!

crypto isakmp policy 2

encr 3des

hash md5

authentication pre-share

group 2

crypto isakmp key xxx address ip.of.end.a

!

!

crypto ipsec transform-set tf-set esp-3des esp-md5-hmac

!

crypto map my-map 1 ipsec-isakmp

set peer ip.of.end.a

set transform-set tf-set

match address 101

!

!

!

interface Dialer1

crypto map my-map

!

ip classless

ip route 0.0.0.0 0.0.0.0 Dialer1

!

access-list 101 permit ip you.subnet.side.b appropriate.mask.for.this your.subnet.side.a appropriate.mask.for.this