!Version 1.3.2M (FULL)
hostname DI1750
!
!-- preshared key для соседа по тоннелю (как я понимаю Negotiation ID на DFL-100 будет - 192.168.100.2)
!
crypto isakmp key 1234567890 192.168.100.2 255.255.255.0
!
!--Задаем политику Internet Key Exchange (IKE) и
!
crypto isakmp policy 1
encryption 3des
group 2
hash md5
lifetime 28800
!
!--Задаем параметры IPSec, включают в себя соседей по тоннелю, типы протоколов, криптографические алгоритмы и описание
!
crypto ipsec transform-set dfl100
transform-type esp-3des esp-md5-hmac
!
crypto map dfl100hv 1 ipsec-isakmp
set peer 192.168.100.2
set pfs group1
set security-association lifetime seconds 28800
set transform-set dfl100
match address dfl100tun
!
interface FastEthernet0/0
ip address 192.168.10.1 255.255.255.0
no ip directed-broadcast
!
interface Ethernet1/0
ip address 192.168.100.1 255.255.255.0
no ip directed-broadcast
crypto map dfl100hv
!
interface Async0/0
no ip address
no ip directed-broadcast
!
ip route 192.168.20.0 255.255.255.0 Ethernet1/0
!
! Разрешения
ip access-list extended dfl100tun
permit ip 192.168.10.0 255.255.255.0 192.168.20.0 255.255.255.0
deny ip any any

Remote Tunnel ID     - DI1750
Peer Type                 - Remote Gareway (Static IP)
Remote Gateway IP   - 192.168.100.1
Remote IP Network    - 192.168.10.0
Remote IP Netmask   - 255.255.255.0
Pre-Shared Key         - 1234567890
IKE Encryption           - 3DES
IKE Hash              - MD5
IKE Life Duration        - 28800 seconds    
SA Life Duration         - 28800 seconds    
IKE PFS Mode          - 1024-bit
IPSEC PFS Mode          - 768-bit
IPSEC Operation        - ESP
IPSEC ESP Transform - 3DES
IPSEC ESP Auth          - HMAC-MD5
IPSEC AH Transform   - MD5