br2.conf

br2.conf

conf t

int f0/1
  ip add 10.3.3.3 255.255.255.0
  no shut
  exit


int s1/0
  ip add 1.1.100.10 255.255.255.252
  no shut
  exit


ip route 0.0.0.0 0.0.0.0 s1/0 1.1.100.9


crypto isakmp policy 10
  authentication pre-share
  encryption aes
  hash sha
  group 5
  lifetime 7200
  exit

crypto isakmp key 0 cloud address 1.1.123.1
crypto isakmp key 0 cloud address 1.1.123.2

crypto ipsec transform-set VPN esp-aes esp-sha-hmac

crypto map BR2-VPN 10 ipsec-isakmp 
match address TOHQ1
set peer 1.1.123.1
set transform-set VPN
reverse-route static
exit


crypto map BR2-VPN 20 ipsec-isakmp 
match address TOHQ2
set peer 1.1.123.2
set transform-set VPN
reverse-route static
exit


ip access-list extended TOHQ1
permit ip 10.3.3.0 0.0.0.255 10.1.0.0 0.0.255.255
exit
ip access-list extended TOHQ2
permit ip 10.3.3.0 0.0.0.255 10.1.0.0 0.0.255.255 
exit

int s1/0
crypto map BR2-VPN