Spoke2:
conf t
!
crypto isakmp policy 10
encryption aes
hash sha256
authentication pre-share
group 14
!
crypto isakmp key cisco address 172.16.1.1
!
crypto ipsec transform-set TRANS esp-aes esp-sha256-hmac
mode tunnel
!
crypto map IPSEC 10 ipsec-isakmp
set peer 172.16.1.1
set transform-set TRANS
match address 101
!
interface ethernet 0/0
ip address 192.168.3.254 255.255.255.0
no shutdown
!
interface ethernet 1/2
ip address 172.16.3.1 255.255.255.0
crypto map IPSEC
no shutdown
!
interface loopback 0
ip address 30.30.30.30 255.255.255.255
!
router ospf 1
router-id 30.30.30.30
network 172.16.3.1 0.0.0.0 area 0
network 192.168.3.254 0.0.0.0 area 0
default-information originate
!
router bgp 300
bgp router-id 30.30.30.30
neighbor 172.16.3.254 remote-as 500
network 172.16.3.0 mask 255.255.255.0
!
ip access-list extended 101
10 permit ip 172.16.3.0 0.0.0.255 host 192.168.1.1
20 permit ip host 3.3.3.3 host 1.1.1.1
!
end
