HQ_vpn2.conf

HQ_vpn2.conf

conf t

int s1/0
  ip add 10.1.10.6 255.255.255.252
  no shut
  exit


int f0/1
  ip add 1.1.123.2 255.255.255.248
  no shut
  exit

router ospf 1
  router-id 1.1.1.3
  network 10.1.10.6 0.0.0.0 area 0
  exit
  
ip route 0.0.0.0 0.0.0.0 f0/1 1.1.123.3


crypto isakmp policy 10
  authentication pre-share
  encryption aes
  hash sha
  group 5
  lifetime 7200
  exit

crypto isakmp key 0 cloud address 1.1.100.6
crypto isakmp key 0 cloud address 1.1.100.10

crypto ipsec transform-set VPN esp-aes esp-sha-hmac

crypto map HQ2-VPN 10 ipsec-isakmp 
match address TOBR1
set peer 1.1.100.6
set transform-set VPN
reverse-route static
exit


crypto map HQ2-VPN 20 ipsec-isakmp 
match address TOBR2
set peer 1.1.100.10
set transform-set VPN
reverse-route static
exit


ip access-list extended TOBR1
permit ip 10.1.0.0 0.0.255.255 10.2.2.0 0.0.0.255
exit
ip access-list extended TOBR2
permit ip 10.1.0.0 0.0.255.255 10.3.3.0 0.0.0.255
exit

int f0/1
crypto map HQ2-VPN

router os 1
redistribute static