Note: access list should be ICMP, but didn't work on this version of code

R2#

crypto isakmp policy 10
 authentication pre-share
crypto isakmp key cisco address 180.40.7.3
!
!
crypto ipsec transform-set Prob11 ah-md5-hmac
!
crypto map Prob11 10 ipsec-isakmp
 set peer 180.40.7.3
 set transform-set Prob11
 match address 102
!
!
!
interface Serial1/2
 ip address 180.40.7.2 255.255.255.224
 clock rate 64000
 crypto map Prob11
!
!
access-list 102 deny   ospf any any
access-list 102 permit ip any any
!



R3#

crypto isakmp policy 10
 authentication pre-share
crypto isakmp key cisco address 180.40.7.2
!
!
crypto ipsec transform-set Prob11 ah-md5-hmac
!
crypto map Prob11 10 ipsec-isakmp
 set peer 180.40.7.2
 set transform-set Prob11
 match address 102
!
!
interface Serial1/2
 ip address 180.40.7.3 255.255.255.224
 crypto map Prob11
!
access-list 102 deny   ospf any any
access-list 102 permit ip any any
!