crypto isakmp policy 1 hash md5 authentication pre-share crypto isakmp keepalive 30 5 ! crypto isakmp peer address 10.1.1.2 set aggressive-mode password 1234567 set aggressive-mode client-endpoint ipv4-address 10.1.1.1 ! ! crypto ipsec transform-set set123 esp-3des esp-md5-hmac mode tunnel ! ! ! crypto map map123 1 ipsec-isakmp set peer 10.1.1.2 set transform-set set123 match address 101 access-list 101 permit ip 1.1.1.0 0.0.0.255 2.2.2.0 0.0.0.255