hostname IOS.CISCO.COM ip host SRX.JUNIPER.NET 200.200.12.1 ip host IOS.CISCO.COM 192.168.23.3 interface Ethernet0/0 full-duplex no shut ip address 192.168.23.3 255.255.255.0 ! ip route 0.0.0.0 0.0.0.0 192.168.23.2 ! crypto isakmp policy 10 encr 3des authentication pre-share group 2 ! crypto isakmp key KEY123456 hostname SRX.JUNIPER.NET ! crypto isakmp profile JUNIPER_IKE_PROF keyring default self-identity fqdn match identity host SRX.JUNIPER.NET initiate mode aggressive ! crypto ipsec transform-set JUNIPER_TRANS esp-3des esp-sha-hmac ! crypto ipsec profile JUNIPER_IPSEC_PROF set transform-set JUNIPER_TRANS set isakmp-profile JUNIPER_IKE_PROF ! interface Tunnel10 ip address 10.10.13.3 255.255.255.0 ip mtu 1400 ip tcp adjust-mss 1350 tunnel source Ethernet0/0 tunnel destination 200.200.12.1 tunnel mode ipsec ipv4 tunnel protection ipsec profile JUNIPER_IPSEC_PROF ! ip access-list extended ipsec_Juniper_SRX permit ip host 200.200.12.1 host 192.168.23.3