crypto isakmp policy 1
 encr aes 256
 authentication pre-share
 group 2
crypto isakmp key 1234 address 1.1.1.2
!
!
crypto ipsec transform-set ESP-AES esp-aes 256 esp-sha-hmac
 mode transport
!
!
!
crypto map CMAP local-address Ethernet0/0
crypto map CMAP 1 ipsec-isakmp
 set peer 1.1.1.2
 set transform-set ESP-AES
 set pfs group2
 match address LIST
!
!
!
!
!
interface Tunnel0
 ip address 172.16.0.2 255.255.255.252
 ip mtu 1400
 tunnel source 2.2.2.2
 tunnel destination 1.1.1.2
!
interface Ethernet0/0
 ip address 2.2.2.2 255.255.255.252
 crypto map CMAP