Router-1 ===================================================== sh run Building configuration... Current configuration : 2831 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router ! boot-start-marker boot-end-marker ! ! card type command needed for slot/vwic-slot 0/0 ! no aaa new-model ! resource policy ! ! ! ip cef ! --More--  ! ! ! voice-card 0 no dspfarm ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! --More--  ! ! ! ! crypto isakmp policy 10 encr 3des authentication pre-share group 2 crypto isakmp key del_tkp address 10.10.108.1 ! ! crypto ipsec transform-set BSF_CISCO esp-des esp-md5-hmac ! crypto map VPN-TKP 10 ipsec-isakmp set peer 10.10.108.1 set transform-set BSF_CISCO match address 113 ! ! ! ! ! interface Tunnel12 --More--   description GRE tunnel between FHQ and Tekanpur ip address 192.168.12.2 255.255.255.0 qos pre-classify tunnel source Serial1/0 tunnel destination 10.10.108.1 crypto map VPN-TKP ! interface GigabitEthernet0/0 description BACK-TO-BACCk ip address 170.128.0.10 255.255.255.0 ip ospf message-digest-key 1 md5 BSF_AMS duplex auto speed auto media-type rj45 ! interface GigabitEthernet0/1 no ip address shutdown duplex auto speed auto media-type rj45 ! interface Serial1/0 description Tekanpur --More--   ip address 10.10.108.2 255.255.255.0 encapsulation ppp ip ospf message-digest-key 1 md5 BSF_AMS serial restart-delay 0 crypto map VPN-TKP ! interface Serial1/1 no ip address shutdown serial restart-delay 0 ! interface Serial1/2 no ip address shutdown serial restart-delay 0 ! interface Serial1/3 no ip address shutdown serial restart-delay 0 ! interface Serial2/0 no ip address --More--   shutdown serial restart-delay 0 ! interface Serial2/1 no ip address shutdown serial restart-delay 0 ! interface Serial2/2 no ip address shutdown serial restart-delay 0 ! interface Serial2/3 no ip address shutdown serial restart-delay 0 ! interface Serial3/0 no ip address shutdown serial restart-delay 0 ! --More--  interface Serial3/1 no ip address shutdown serial restart-delay 0 ! interface Serial3/2 no ip address shutdown serial restart-delay 0 ! interface Serial3/3 no ip address shutdown serial restart-delay 0 ! interface Serial4/0 no ip address shutdown serial restart-delay 0 ! interface Serial4/1 no ip address shutdown --More--   serial restart-delay 0 ! interface Serial4/2 no ip address shutdown serial restart-delay 0 ! interface Serial4/3 no ip address shutdown serial restart-delay 0 ! router ospf 100 log-adjacency-changes area 0 authentication message-digest network 170.128.0.0 0.0.0.255 area 0 network 192.168.12.0 0.0.0.255 area 0 ! ! ! ip http server no ip http secure-server --More--  ! access-list 113 permit gre host 10.10.108.2 host 10.10.108.1 ! ! ! ! ! ! control-plane ! ! ! voice-port 0/1/0 ! voice-port 0/1/1 ! ! ! ! ! ! ! ! --More--  ! line con 0 line aux 0 line vty 0 4 login ! scheduler allocate 20000 1000 ! end Router# ============================================================ Router-2 ============================================================ sh run Building configuration... Current configuration : 2831 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router ! boot-start-marker boot-end-marker ! ! card type command needed for slot/vwic-slot 0/0 ! no aaa new-model ! resource policy ! ! ! ip cef ! --More--  ! ! ! voice-card 0 no dspfarm ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! --More--  ! ! ! ! crypto isakmp policy 10 encr 3des authentication pre-share group 2 crypto isakmp key del_slc address 10.10.90.1 ! ! crypto ipsec transform-set BSF_CISCO esp-des esp-md5-hmac ! crypto map VPN-TKP 10 ipsec-isakmp set peer 10.10.90.1 set transform-set BSF_CISCO match address 112 ! ! ! ! ! interface Tunnel12 --More--   description GRE tunnel between FHQ and Tekanpur ip address 192.168.11.2 255.255.255.0 qos pre-classify tunnel source Serial1/0 tunnel destination 10.10.90.1 crypto map VPN-SLC ! interface GigabitEthernet0/0 description BACK-TO-BACK ip address 170.128.0.10 255.255.255.0 ip ospf message-digest-key 1 md5 BSF_AMS duplex auto speed auto media-type rj45 ! interface GigabitEthernet0/1 ip address 200.100.1.1 255.255.255.0 ip ospf message-digest-key 1 md5 BSF_AMS duplex auto speed auto media-type rj45 ! interface Serial1/0 description SilchAR --More--   ip address 10.10.90.2 255.255.255.0 encapsulation ppp ip ospf message-digest-key 1 md5 BSF_AMS serial restart-delay 0 crypto map VPN-slc ! interface Serial1/1 no ip address shutdown serial restart-delay 0 ! interface Serial1/2 no ip address shutdown serial restart-delay 0 ! interface Serial1/3 no ip address shutdown serial restart-delay 0 ! interface Serial2/0 no ip address --More--   shutdown serial restart-delay 0 ! interface Serial2/1 no ip address shutdown serial restart-delay 0 ! interface Serial2/2 no ip address shutdown serial restart-delay 0 ! interface Serial2/3 no ip address shutdown serial restart-delay 0 ! interface Serial3/0 no ip address shutdown serial restart-delay 0 ! --More--  interface Serial3/1 no ip address shutdown serial restart-delay 0 ! interface Serial3/2 no ip address shutdown serial restart-delay 0 ! interface Serial3/3 no ip address shutdown serial restart-delay 0 ! interface Serial4/0 no ip address shutdown serial restart-delay 0 ! interface Serial4/1 no ip address shutdown --More--   serial restart-delay 0 ! interface Serial4/2 no ip address shutdown serial restart-delay 0 ! interface Serial4/3 no ip address shutdown serial restart-delay 0 ! router ospf 100 log-adjacency-changes area 0 authentication message-digest network 200.100.1.0 0.0.0.255 area 0 network 170.128.0.0 0.0.0.255 area 0 network 192.168.11.0 0.0.0.255 area 0 ! ! ! ip http server no ip http secure-server --More--  ! access-list 113 permit gre host 10.10.90.2 host 10.10.90.1 ! ! ! ! ! ! control-plane ! ! ! voice-port 0/1/0 ! voice-port 0/1/1 ! ! ! ! ! ! ! ! --More--  ! line con 0 line aux 0 line vty 0 4 login ! scheduler allocate 20000 1000 ! end