F1(config)# isakmp policy 1

F1(config-isakmp-policy)# authentication pre-share

F1(config-isakmp-policy)# encryption aes-256
F1(config-isakmp-policy)# hash sha
F1(config-isakmp-policy)# group 2
F1(config-isakmp-policy)# lifetime 86400
F1(config-isakmp-policy)# exit
F1(config)# isakmp enable outside

crypto isakmp enable outside

crypto isakmp policy 1
authentication pre-share
encryption aes-256
hash sha
group 2
lifetime 86400

F1(config)# crypto ipsec transform-set L2L esp-aes-256 esp-sha-hmac

F2(config)# crypto ipsec transform-set L2L esp-aes-256 esp-sha-hmac

F1(config)# access-list LAN_Traffic extended permit ip 10.0.1.0 255.255.255.0

10.0.2.0 255.255.255.0

F2(config)# access-list LAN_Traffic extended permit ip 10.0.2.0 255.255.255.0

10.0.1.0 255.255.255.0

configure mode commands/options:

type Enter the type of this group-policy
F1(config)# tunnel-group 172.16.2.2 type ipsec-l2l
F1(config)# tunnel-group 172.16.2.2 ?

configure mode commands/options:

general-attributes Enter the general-attributes sub command mode
ipsec-attributes Enter the ipsec-attributes sub command mode
F1(config)# tunnel-group 172.16.2.2 ipsec-attributes
F1(config-tunnel-ipsec)# pre-shared-key ThisIsAWeakKey

tunnel-group 172.16.1.2 type ipsec-l2l

tunnel-group 172.16.1.2 ipsec-attributes
pre-shared-key ThisIsAWeakKey

F1(config)# crypto map L2L 1 match address LAN_Traffic

F1(config)# crypto map L2L 1 set peer 172.16.2.2

F1(config)# crypto map L2L 1 set transform-set L2L

crypto map L2L 1 match address LAN_Traffic

crypto map L2L 1 set peer 172.16.1.2
crypto map L2L 1 set transform-set L2L

F1(config)# crypto map L2L interface outside