hostname CE1
!
crypto isakmp policy 10
 encr aes 256
 authentication pre-share
 group 5
 lifetime 3600
crypto isakmp key cisco address 3.3.3.10
!
!
crypto ipsec transform-set 100 esp-aes 256 
!
crypto map CM 10 ipsec-isakmp 
 set peer 3.3.3.10
 set transform-set 100 
 match address 101
!
interface Tunnel1
 ip address 10.10.10.11 255.255.255.0
 keepalive 10 3
 tunnel source 2.2.2.2
 tunnel destination 3.3.3.10
 crypto map CM
!
ip route 192.168.1.0 255.255.255.0 Tunnel1
!
access-list 101 permit ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255
!
!
hostname CE3
!
crypto isakmp policy 10
 encr aes 256
 authentication pre-share
 group 5
 lifetime 3600
crypto isakmp key cisco address 2.2.2.2
!
!
crypto ipsec transform-set 100 esp-aes 256 
!
crypto map CM 10 ipsec-isakmp 
 set peer 2.2.2.2
 set transform-set 100 
 match address 101
!
interface Tunnel1
 ip address 10.10.10.10 255.255.255.0
 keepalive 10 3
 tunnel source 3.3.3.10
 tunnel destination 2.2.2.2
 crypto map CM
!
ip route 192.168.2.0 255.255.255.0 Tunnel1
!
access-list 101 permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255