crypto isakmp policy 1

auth pre-share
encr aes
hash sha
group 5
lifetime 1800
exit

crypto isakmp key MYKEY add 0.0.0.0 0.0.0.0

crypto ipsec transform-set TSET esp-aes esp-sha-hmac

mode tunnel
exit

crypto ipsec profile MYPROFILE

set transform-set TSET

int tu1
tunnel protection ipsec profile MYPROFILE

-------------------IPSEC VPN

ip access-list extended VPN1-TRAFFIC

permit ip 10.10.10.0 0.0.0.255 20.20.20.0 0.0.0.255

crypto map VPN 1 ipsec-isakmp dynamic hq-vpn

crypto dynamic-map hq-vpn 10

set security-association lifetime seconds 86400
set transform-set TS
match address VPN1-TRAFFIC

interface FastEthernet0/1
crypto map VPN