br1.conf

br1.conf

conf t

int f0/1
  ip add 10.2.2.2 255.255.255.0
  no shut
  exit


int s1/0
  ip add 1.1.100.6 255.255.255.252
  no shut
  exit


ip route 0.0.0.0 0.0.0.0 s1/0 1.1.100.5

#router eigrp 1
# no auto-summary
# network 1.1.100.1 0.0.0.0

crypto isakmp policy 10
  authentication pre-share
  encryption aes
  hash sha
  group 5
  lifetime 7200
  exit

crypto isakmp key 0 cloud address 1.1.123.1
crypto isakmp key 0 cloud address 1.1.123.2

crypto ipsec transform-set VPN esp-aes esp-sha-hmac

crypto map BR1-VPN 10 ipsec-isakmp 
match address TOHQ1
set peer 1.1.123.1
set transform-set VPN
reverse-route static
exit


crypto map BR1-VPN 20 ipsec-isakmp 
match address TOHQ2
set peer 1.1.123.2
set transform-set VPN
reverse-route static
exit


ip access-list extended TOHQ1
permit ip 10.2.2.0 0.0.0.255 10.1.0.0 0.0.255.255
exit
ip access-list extended TOHQ2
permit ip 10.2.2.0 0.0.0.255 10.1.0.0 0.0.255.255 
exit

int s0/1
crypto map BR1-VPN