rta:[rta] ike peer 123

[rta-ike-peer-123] pre-shared-ke simple 123 

[rta-ike-peer-123] remote-address 100.1.1.2

[irta-ike-peer-123] local-address 100.1.1.1 

[rta-ike-peer-123]quit

[rta] ipsec proposal 1 i

[rta-ipsec-proposal-l]quit

 [rta]acl number 3000

[rta-acl-adv-3000] rule 0 permit ip source 192.168.1.0 0.0.0.255 destination 192.168.2.0 0.0.0.255

[rta]ipsec polic 1 1 isakmp

[rta-ipsec-polic-isakmp-l-l] securit acl 3000 

[rta-ipsec-polic-isakmp-l-l] ike-peer 123

[rta-ipscec-polic-isakmp-l-l] proposal 1 

[rta-ipsec-polic-isakmp-l-l] quit

[rta] interface etherneto/1/1

[rta-ethernet0/1/1] ip address 10.1.1.1 255.255.255.0 

[rta] interface etherneto/l/0

[rta-ethernet0/1/0] ip address 192.168.1.1 255.255.255.0 

[rta] interface loopback0

[rta-loopbacko]ip address 1.1.1.1 255.255.255.255 

[rta] interface tunnel 1

[rta-tunnel1]source 1.1.1.1

[rta-tunnel1]destination 2.2.2.2

[rta-tunnell]ip address 100.1.1.1 255.255.255.0 

[rta-tunnel1]keepalive[rta-tunnell]ipsec polic 1

[rta] ip route-static 2.2.2.2 255.255.255.255 10.1.1.2

[rta] ip route-static 192.168.2.0 255.255.255.0 100.1.1.2 rtb:

[rtb] ike peer 123[rtb-ike-peer-123] pre-shared-ke simple 123 

[rtb-ike-peer-123] remote-address 100.1.1.1

[rtb-ike-peer-123] local-address 100.1.1.2 

[rtb-ike-peer-123]quit

[rtb] ipsec proposal 1 

[rtb-ipsec-proposal-l] quit 

[rtb]acl number 3000

[rtb-acl-adv-3000] rule o permit ip source 192.168.2.0 0.0.0.255 destination 192.168.1.0 0.0.0.255

[rtb]ipsec polic 1 1 isakmp

[rtb-ipsec-polic-isakmp-l-l] securit acl 3000 

[rtb-ipsec-polic-isakmp-l-l] ike-peer 123

[rtb-ipsec-polic-isakmp-l-l] proposal 1 

[rtb-ipsec-polic-isakmp-l-l] quit

[rtb] interface ethernet0/1/1

[rtb-ethernet0/1/1] ip address 10.1.1.2 255.255.255.0 

[rtb] interface ethernet0/1/0

[rtb-ethernet0/1/0] ip address 192.168.2.1 255.255.255.0 

[rtb] interface loopback0

[rtb-loopback0] ip address 2.2.2.2 255.255.255.255 

[rtb] interface tunnell

[rtb-tunnell]source 2.2.2.2 

[rtb-tunnell]destination l.1.1.1

[rtb-tunnell]ip address 100.1.1.2 255.255.255.0 

[rtb-tunnell]keepalive[rta-tunnell]ipsec polic 1

[rtb] ip route-static l.1.1.1 255.255.255.255 10.1.1.1

[rtb] ip route-static 1 92.1 68.1.0 255.255.255.0 1 00.1.1 .1