No,   
      
   Just define your isakmp policy's on both routers;   
   create the key's and addresses;   
   create a transform-set;   
   create a crypto map; and apply it tho the interface;   
   make an ACL for the traffic that must be protected (match statement);   
   set the peer address   
   disable that traffic for NAT;   
      
   use "debug crypto isakmp" and "debug crypto ipsec"   
      
   Bye bye   
      
   : I have configures both Cisco router for ipsec hoever the VPN tunnel   
   : does not establish. Is there a command a must type to initiate the   
   : connection ?   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)