!
!

!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname RouterA
!
boot-start-marker
boot-end-marker
!
logging buffered 4096 debugging
!
no aaa new-model
memory-size iomem 5
no ip icmp rate-limit unreachable
ip cef
!
!
!
!
no ip domain lookup
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
ip tcp synwait-time 5
! 
crypto keyring test-keyring 
  local-address 1.1.1.1
  pre-shared-key address 1.1.1.2 key test-key
!
crypto isakmp policy 200
 encr aes
 authentication pre-share
 group 2
 lifetime 28800
crypto isakmp keepalive 10 10
crypto isakmp profile test-isakmp-profile
   keyring test-keyring
   match identity address 1.1.1.2 255.255.255.255 
   local-address 1.1.1.1
!
crypto ipsec security-association replay window-size 128
!
crypto ipsec transform-set myset esp-aes esp-sha-hmac 
crypto ipsec df-bit clear
!
crypto ipsec profile test-ipsec-profile
 set transform-set myset 
 set pfs group2
!
!
!
!
!
interface Tunnel1
 ip address 169.254.254.62 255.255.255.252
 ip virtual-reassembly
 ip tcp adjust-mss 1387
 tunnel source 1.1.1.1
 tunnel destination 1.1.1.2
 tunnel mode ipsec ipv4
 tunnel protection ipsec profile test-ipsec-profile
!
interface FastEthernet0/0
 ip address 1.1.1.1 255.255.255.0
 duplex auto
 speed auto
!
interface FastEthernet0/1
 ip address 10.1.1.1 255.255.255.0
 duplex auto
 speed auto
!
ip forward-protocol nd
ip route 10.10.200.0 255.255.255.0 Tunnel1
!
!
ip http server
ip http authentication local
no ip http secure-server
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
line aux 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
line vty 0 4
 login
!
!
end