crypto key generate rsa general-keys modulus 1024 label key1 crypto isakmp policy 1 encr 3des authentication pre-share group 2 lifetime 400 crypto isakmp key cisco address 10.1.1.1 crypto isakmp key cisco address 10.1.1.5 crypto ipsec transform-set ts1 esp-3des esp-sha-hmac crypto ipsec profile isp1 set security-association lifetime seconds 1800 set transform-set ts1 crypto gdoi group grp1 identity number 1 server local rekey lifetime seconds 86400 rekey retransmit 10 number 2 rekey authentication mypubkey rsa key1 rekey transport unicast sa ipsec 1 profile isp1 match address ipv4 101 replay counter window-size 64 address ipv4 192.168.1.197 access-list 101 permit ip 10.0.0.0 0.255.255.255 10.0.0.0 0.255.255.255