! crypto isakmp policy 10 encr 3des hash md5 authentication pre-share ! crypto isakmp key PASSKEY address 211.11.10.55 ! ! crypto ipsec transform-set SED esp-3des esp-md5-hmac ! crypto map VPN1 local-address GigabitEthernet0/1.10 crypto map VPN1 10 ipsec-isakmp set peer 211.11.10.55 set transform-set SED match address VPN1_ACL ! crypto map VPN2 local-address GigabitEthernet0/1.11 crypto map VPN2 10 ipsec-isakmp set peer 211.11.10.55 set transform-set SED match address VPN2_ACL ! crypto map VPN3 local-address GigabitEthernet0/1.12 crypto map VPN3 10 ipsec-isakmp set peer 211.11.10.55 set transform-set SED match address VPN3_ACL ! interface Loopback5 ip address 172.1.0.1 255.255.255.255 ! interface Tunnel25 ip address 172.17.17.1 255.255.255.252 keepalive 3 10 tunnel source 192.168.10.2 tunnel destination 10.200.200.2 ! interface Tunnel35 ip address 172.17.17.21 255.255.255.252 keepalive 3 10 tunnel source 192.168.20.2 tunnel destination 10.200.200.2 ! interface Tunnel45 ip address 172.17.17.101 255.255.255.252 tunnel source 192.168.30.2 tunnel destination 10.200.200.2 ! interface GigabitEthernet0/0 ip address 192.168.10.2 255.255.255.240 secondary ip address 192.168.20.2 255.255.255.240 secondary ip address 192.168.30.2 255.255.255.240 duplex auto speed auto ! interface GigabitEthernet0/1 no ip address duplex auto speed auto ! interface GigabitEthernet0/1.28 encapsulation dot1Q 28 ip address 192.168.200.72 255.255.255.240 secondary ip address 192.168.200.73 255.255.255.24 ! interface GigabitEthernet0/1.25 encapsulation dot1Q 25 ip address 219.15.20.71 255.255.255.240 secondary ip address 219.15.20.72 255.255.255.240 crypto map VPN1 ! interface GigabitEthernet0/1.26 encapsulation dot1Q 26 ip address 219.15.20.101 255.255.255.248 secondary ip address 219.15.20.102 255.255.255.248 crypto map vpn2 interface GigabitEthernet0/1.27 encapsulation dot1Q 27 ip address 219.15.88.101 255.255.255.248 secondary ip address 219.15.88.102 255.255.255.248 crypto map vpn3 router eigrp 4 variance 128 redistribute static redistribute ospf 5 network 172.17.17.0 0.0.0.3 network 172.17.17.20 0.0.0.3 network 172.17.17.100 0.0.0.3 metric weights 0 1 1 1 0 0 default-metric 100000 1000 255 1 1500 distance eigrp 120 190 no auto-summary ! router ospf 5 redistribute static redistribute eigrp 4 subnets network 192.168.10.0 0.0.0.15 area 0 ! ip route 0.0.0.0 0.0.0.0 219.15.20.75 ip access-list extended VPN1_ACL permit gre host 192.168.10.2 host 10.200.200.2 ip access-list extended VPN2_ACL permit gre host 192.168.20.2 host 10.200.200.2 ip access-list extended VPN3_ACL permit gre host 192.168.30.2 host 10.200.200.2 !