ip vrf v1
 rd 1:1
ip vrf v2
 rd 1:2
crypto keyring kr1 vrf v1
 pre-shared-key address 192.168.1.197 key cisco
crypto isakmp policy 1
 authentication pre-share
crypto isakmp profile ikp1
 keyring kr1
 match identity address 192.168.1.197 255.255.255.255 v1
crypto ipsec transform-set ts1 esp-aes esp-sha-hmac
crypto ipsec profile isp1
 set transform-set ts1
 set isakmp-profile ikp1
interface FastEthernet0/0
 ip vrf forwarding v1
 ip address 192.168.1.196 255.255.255.0
interface Tunnel1
 ip vrf forwarding v2
 ip address 10.11.12.1 255.255.255.252
 tunnel source FastEthernet0/0
 tunnel vrf v1
 tunnel mode ipsec ipv4
 tunnel protection ipsec profile isp1
 tunnel destination 192.168.1.197