tunnel + ***
R1=================================================================
enable
conf t
noip domain-lookup
line 0
no exec-timeout
logging synchronous
exit
host R1
in f0/0
ip add 170.58.12.1 255.255.255.0
no sh
int lo0
ip add 1.1.1.1 255.255.255.0
exit
ip route 0.0.0.0 0.0.0.0 170.58.12.2

inter tunnel 100
tunn so 170.58.12.1
tunn de 170.58.23.3
ip add 170.58.13.1 255.255.255.0
exit
router ospf 100
router-id 1.1.1.1
net  170.58.13.0 0.0.0.255 a 0
net 1.1.1.0 0.0.0.255 a 0
exit
crypto isakmp policy 10
authentication pre-share
exit
crypto isakmp key 0 cisco address 170.58.23.3
crypto ipsec transform-set aaa esp-3des esp-md5-hmac
exit
crypto map bbb 10 ipsec-isakmp
match address ***
set peer 170.58.23.3
set transform-set aaa
exit
ip access-list extended ***
permit gre host 170.58.12.1 host 170.58.23.3
exit
in f0/0
crypto map bbb



R2============================================================
enable
conf t
no ip domain-lookup
line 0
no exec-timeout
logging synchronous
exit
host R2
in f0/0
ip add 170.58.12.2 255.255.255.0
no sh
in f0/01
ip add 170.58.23.2 255.255.255.0
no sh
exit


R3============================================================
enable
conf t
no ip domain-lookup
line 0
no exec-timeout
logging synchronous
exit
host R3
in f0/1
ip add 170.58.23.3 255.255.255.0
no sh
int lo0
ip add 3.3.3.3 255.255.255.0
no sh
exit
ip route 0.0.0.0 0.0.0.0 170.58.23.2
inter tunnel 100
tunn so 170.58.23.3
tunn de 170.58.12.1
ip add 170.58.13.3 255.255.255.0
exit
router ospf 100
router-id 3.3.3.3
net  170.58.13.0 0.0.0.255 a 0
net 3.3.3.0 0.0.0.255 a 0
exit
crypto isakmp policy 10
authentication pre-share
exit
crypto isakmp key 0 cisco address 170.58.12.1
crypto ipsec transform-set ccc esp-3des esp-md5-hmac
exit
crypto map ddd 10 ipsec-isakmp
match address ***
set peer 170.58.12.1
set transform-set ccc
exit
ip access-list extended ***
permit gre host 170.58.23.3 host 170.58.12.1
exit
in f0/1
crypto map ddd

show crypto engine connections active

debug crypto ipsec