VPN wihtout GRE-Tunnel and on IKE ISAKMP cryptography

---

# Setup Cryptography

```
show crypto isakmp policy

crypto isakmp policy 10
    encryption aes 256
  hash sha256
  authentication pre-share
  group 14
  lifetime 3600
  exit
crypto isakmp key mypass address <peer-ip>

crypto ipsec transform-set S2S-VPN esp-aes 256 esp-sha256-hmac
    exit

crypto ipsec security-association lifetime seconds 1800

ip access-list extended S2S-VPN-ACL
    permit ip 10.10.0.0 0.0.3.255 10.10.4.0 0.0.3.255
  exit

crypto map S2S-CMAP 10 ipsec-isakmp
    match address S2S-VPN-ACL
  set peer <peer-ip>
  set pfs group14
  set transform S2S-VPN
  set security-association lifetime seconds 900
  exit

int g0/0/0
    crypto map S2S-CMAP
```