Hi Godwin,
The IPSec doesn't bother whether you have a static route or you are using a routing protocol as long as you are able to reach it. That is to say, even before you establish the IPSec tunnel, the WAN interfaces should be up and running. Only then ISAKMP can start Phase-1 negotiation. If you want the SAs to come up when you ping, then the crypto access-list should look like
access-list 101 permit ip host host
Then a simple ping will trigger ISAKMP negotiations. Otherwise, whatever networks you mention in the crypto access-list to be permitted, packets from that network will trigger the ISAKMP negotiations. Its that easy :-))
For the other question you had asked... Dialer configs are used when you want some interesting traffic to be send to the ISDN network whereas crypto configs are used to select interesting traffic (based on the crypto access-list) for encryption and send it out of the crypto interface. If the crypto interface is your dialer interface, then the packets are first protected with IPSec and then are sent out through the Dialer/crypto interface (since both are same). Note that this may not be the case always. All traffic going through the dialer interface need not be IPSec protected !! Think over ... :-))
If you need more info, you can write to me directly to my cisco id.
Naveen.
mnaveen@cisco.com
