!

ip route 0.0.0.0 0.0.0.0 serial 0/0

!

access-list 100 permit ip 192.168.98.0 0.0.0.255 192.168.99.0 0.0.0.255

!

end

ERT-805#

router# show crypto ipsec sa interface: serial0/0

Crypto map tag:dynmap, local addr:10.0.0.1

Local ident (addr/mask/prot/port):192.168.99.0/255.255.255.0/0/0 Remotel ident (addr/mask/prot/port):192.168.98.0/255.255.255.0/0/0 PERMIT,flags={origin_is_acl,}

Current Peer:10.0.0.2

#pkts encaps:1160 ,pkts encrypts:1160, pkts digest:1160 #pkts decaps:1160 ,pkts decrypts:1160, pkts verify:1160 #pkts send errrors:0 ,pkts receive errors:0

local crypto endpt.:10.0.0.1, remote crypto endpt.:10.0.0.2

inbound esp sas:

Spi: 0X103(256) sastate_mature! p_sa=256 transform: esp-des

In use setting:{Tunnel} crypto map: dynmap

no sa timing:

IV size: 8 bytes

replay detection support: Y

inbound pcp sas:

outbound esp sas:

Spi: 0X103(256) sastate_mature! p_sa=256 in use! transform: esp-des

In use setting:{Tunnel}

59