crypto isakmp policy 10 encr aes 256 hash sha512 authentication pre-share group 2 lifetime 86399 crypto isakmp key $kyBand@!POS address 192.168.6.1 ! ! crypto ipsec transform-set SKYPOS-STC-BH esp-aes esp-sha512-hmac mode transport ! ! ! crypto map GDC-STCBH local-address Loopback0 crypto map GDC-STCBH 10 ipsec-isakmp set peer 192.168.6.1 set transform-set SKYPOS-STC-BH match address SB-POS-TRAFFIC ! ! ! ! ! interface Loopback0 ip address 192.168.5.1 255.255.255.0 ! interface Tunnel0 bandwidth 3000 ip address 192.168.200.1 255.255.255.252 ip mtu 1440 tunnel source Loopback0 tunnel destination 192.168.6.1 ! interface Embedded-Service-Engine0/0 no ip address shutdown ! interface GigabitEthernet0/0 ip address 10.0.6.47 255.255.255.224 no ip redirects no ip unreachables no ip proxy-arp standby 10 ip 10.0.6.46 standby 10 priority 105 standby 10 preempt duplex full speed 100 no lldp transmit no lldp receive no mop enabled crypto map GDC-STCBH ! interface GigabitEthernet0/1 bandwidth 3000 ip address 172.31.2.133 255.255.255.252 no ip redirects no ip unreachables no ip proxy-arp duplex full speed 100 no lldp transmit no lldp receive no mop enabled ! ! router eigrp 10 network 10.0.6.32 0.0.0.31 network 192.168.200.0 0.0.0.3 redistribute static no eigrp log-neighbor-changes ! no ip classless ip forward-protocol nd ! no ip http server no ip http secure-server ! ip route 0.0.0.0 0.0.0.0 10.0.6.33 name TOWARDS-POS-TERMINAL ip route 192.168.6.0 255.255.255.0 172.31.2.134 ! ip access-list standard SNMP_ACL permit 10.1.5.154 log ! ip access-list extended SB-POS-TRAFFIC permit gre host 192.168.5.1 host 192.168.6.1 permit ip any 10.0.9.128 0.0.0.127 permit ip any 10.158.150.192 0.0.0.63 !