If using Encryption (DES, 3DES) the following will work:
ip access-list extended VPN
permit esp host 10.1.1.1 host 10.1.2.1
permit udp host 10.1.1.1 host 10.1.2.1 eq isakmp
If using on Authentication header only (MD5, SHA1) the following will work:
ip access-list extended VPN
permit ahp host 10.1.1.1 host 10.1.2.1
permit udp host 10.1.1.1 host 10.1.2.1 eq isakmp
-Jarrett
_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]