sh   show run
Building configuration...

Current configuration : 1042 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname RouterA
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip audit po max-events 100
!
 --More--         !
 --More--         !
!
! 
!
crypto isakmp policy 1
 encr 3des
 hash md5
 authentication pre-share
 group 2
crypto isakmp key cisco address 10.0.0.2
!
!
crypto ipsec transform-set myset esp-3des esp-md5-hmac 
!
crypto map test 1 ipsec-isakmp 
 set peer 10.0.0.2
 set transform-set myset 
 match address 100
!
!
!
interface FastEthernet0/0
 ip address 10.0.0.1 255.255.255.0
 --More--          duplex auto
 speed auto
 crypto map test
!
interface Serial0/0
 no ip address
 shutdown
!
interface FastEthernet0/1
 no ip address
 duplex auto
 speed auto
!
interface Serial0/1
 no ip address
 shutdown
!
ip classless
no ip http server
no ip http secure-server
!
access-list 100 permit ip 150.49.52.0 0.0.3.255 150.59.59.0 0.0.0.255
!
 --More--         !
!
line con 0
line aux 0
line vty 0 4
 password cisco
 login
!
!
end



RouterB#
    
RouterB#show run
Building configuration...

Current configuration : 1046 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname RouterB
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
no network-clock-participate slot 1 
no network-clock-participate wic 0 
no aaa new-model
ip subnet-zero
ip cef
!
!
!
 --More--         ip audit po max-events 100
!
!
!
!
! 
!
crypto isakmp policy 1
 encr 3des
 hash md5
 authentication pre-share
 group 2
crypto isakmp key cisco address 10.0.0.1
!
!
crypto ipsec transform-set myset esp-3des esp-md5-hmac 
!
crypto map test 1 ipsec-isakmp 
 set peer 10.0.0.1
 set transform-set myset 
 match address 100
!
!
 --More--         !
interface FastEthernet0/0
 ip address 10.0.0.2 255.255.255.0
 duplex auto
 speed auto
 crypto map test
!
interface FastEthernet0/1
 ip address 150.59.59.101 255.255.255.0
 duplex auto
 speed auto
!
ip classless
no ip http server
no ip http secure-server
!
access-list 100 permit ip 150.59.59.0 0.0.0.255 150.59.52.0 0.0.3.255
!
!
!
line con 0
line aux 0
line vty 0 4
 --More--          password cisco
 login
!
!
end

RouterB#  ping      
RouterB#
RouterB#ping 10.0.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
RouterB#show cdp neig detail
-------------------------
Device ID: RouterA
Entry address(es): 
  IP address: 10.0.0.1
Platform: cisco 2621,  Capabilities: Router Switch 
Interface: FastEthernet0/0,  Port ID (outgoing port): FastEthernet0/0
Holdtime : 124 sec

Version :
Cisco Internetwork Operating System Software 
IOS (tm) C2600 Software (C2600-ADVSECURITYK9-M), Version 12.3(22a), RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2007 by cisco Systems, Inc.
Compiled Fri 20-Jul-07 20:52 by hqluong

advertisement version: 2
VTP Management Domain: ''
Duplex: full

RouterB#show crh ypto ejg9je       ngine connections av ctive

  ID Interface            IP-Address      State  Algorithm           Encrypt  Decrypt

RouterB