Cisco IOS 15.

x IPsec VTI configuration

configure terminal
hostname Site-2
interface FastEthernet0/0
no shutdown
ip address 192.168.1.2 255.255.255.0
exit
interface Loopback0
ip address 10.5.5.2 255.255.255.0
exit
ip http server
ip http authentication local
username admin privilege 15 secret Nugget!23
crypto isakmp policy 1
encr aes 192
hash sha256
authentication pre-share
group 5
lifetime 50000
exit
crypto isakmp key Nugget!23 address 192.168.1.250
crypto ipsec transform-set Our-Set esp-aes 256 esp-sha-hmac
mode tunnel
exit
crypto ipsec profile Our-IPsec-Profile
set transform-set Our-Set
set pfs group2
set security-association lifetime seconds 10000
exit
interface tunnel 4
ip address 10.4.4.2 255.255.255.0
tunnel source 192.168.1.2
tunnel destination 192.168.1.250
tunnel mode ipsec ipv4
tunnel protection ipsec profile Our-IPsec-Profile
exit
ip route 10.1.1.0 255.255.255.0 10.4.4.250
end

wr