conf t
!
access-list 102 permit ip 192.168.1.0 0.0.0.255 128.12.3.0 0.0.0.255
crypto isakmp policy 1
encryption 3des
hash md5
authentication pre-share
group 2
exit
crypto isakmp identity address
crypto isakmp key dobsekred address 128.12.2.10
crypto isakmp enable
!
crypto ipsec security-association lifetime seconds 28800
crypto ipsec transform-set myset esp-3des esp-sha-hmac
mode tunnel
exit
!
crypto map mymap 10 ipsec-isakmp
set peer 128.12.2.10
set security-association level per-host
set transform-set myset
match address 102
exit
interface Ethernet1
crypto map mymap
exit