crypto isakmp policy 10 encr aes 256 authentication pre-share group 2 crypto isakmp key xxxxxxxx address y.y.y.y ! ! crypto ipsec transform-set ESP-AES-256 esp-aes 256 esp-sha-hmac ! ! crypto map First2 10 ipsec-isakmp set peer y.y.y.y set transform-set ESP-AES-256 match address 101 ! ! ! ! interface Tunnel1 ip unnumbered Loopback1 no ip redirects no ip unreachables no ip proxy-arp ip route-cache flow keepalive 10 3 tunnel source Loopback1 tunnel destination 192.168.5.22 crypto map First2 ! interface Loopback1 ip address 192.168.5.23 255.255.255.255 no ip redirects no ip unreachables no ip proxy-arp ip route-cache flow ! interface FastEthernet0/0 ip address z.z.z.z 255.255.255.248 no ip redirects no ip unreachables no ip proxy-arp no ip route-cache cef no ip route-cache duplex auto speed auto no cdp enable crypto map First2 ! ! ip route 0.0.0.0 0.0.0.0 u.u.u.u access-list 101 permit ip host 192.168.5.23 host 192.168.5.22