crypto ikev2 proposal pr1 
 encryption aes-cbc-256
 integrity sha1
 group 5
crypto ikev2 policy pl1 
 proposal pr1
crypto ikev2 keyring kr1
 peer p1
  address 192.168.1.197
  pre-shared-key cisco
crypto ikev2 profile pr1
 match identity remote address 192.168.1.197 255.255.255.255 
 authentication local pre-share
 authentication remote pre-share
 keyring kr1
crypto ipsec transform-set ts1 esp-aes 256 esp-sha-hmac 
crypto ipsec profile isp1
 set transform-set ts1 
 set ikev2-profile pr1
interface Tunnel1
 ip address 10.11.12.1 255.255.255.252
 tunnel source FastEthernet0/0
 tunnel destination 192.168.1.197
 tunnel protection ipsec profile isp1