crypto isakmp policy 1
 encr 3des
 authentication pre-share
 group 2
 lifetime 3600
crypto isakmp key KEY-TEST address 192.168.100.2 no-xauth
!
!
crypto ipsec transform-set TS-TEST esp-3des esp-sha-hmac
!
crypto map CRYPTOMAP-TEST 1 ipsec-isakmp
 set peer 192.168.100.2
 set transform-set TS-TEST
 set pfs group2
 match address ACL-TEST
!
interface FastEthernet0/0
 ip address 192.168.100.100 255.255.255.0
 duplex auto
 speed auto
 crypto map CRYPTOMAP-TEST
!
interface Vlan1
 ip address 10.0.0.1 255.255.255.0
!
!
ip access-list extended ACL-TEST
 permit ip host 10.0.0.2 host 192.168.100.2