1. access-list 101 extended permit ip host 10.1.2.1 host 10.1.1.1

2. crypto ikev2 policy 1

  integrity sha512 sha256 sha

  group 2

  prf sha384 md5

  lifetime seconds 86400

3. tunnel-group 1.1.1.1 type ipsec-l2l

tunnel-group 1.1.1.1 ipsec-attributes

                  ikev2 remote-authentication pre-shared-key *****

                  ikev2 local-authentication pre-shared-key *****

4. crypto ipsec ikev2 ipsec-proposal TSET

                  protocol esp encryption 3des

                  protocol esp integrity md5

5. crypto map CMAP 10 match address 101

crypto map CMAP 10 set peer 1.1.1.1

crypto map CMAP 10 set ikev2 ipsec-proposal TSET

6. crypto map CMAP interface out

7. crypto ikev2 enable out

  ON ASA1

1. access-list 101 extended permit ip host 10.1.1.1 host 10.1.2.1

2. crypto ikev2 policy 1

                  encryption aes-256 30es

  integrity sha512 sha256 sha

  group 2

prf sha384 md5

  lifetime seconds 86400

3. tunnel-group 2.2.2.2 type ipsec-l2l

tunnel-group 2.2.2.2 ipsec-attributes

                  ikev2 remote-authentication pre-shared-key *****

                  ikev2 local-authentication pre-shared-key *****

4. crypto ipsec ikev2 ipsec-proposal TSET

                  protocol esp encryption 3des

                  protocol esp integrity md5

6. crypto map CMAP interface out

7. crypto ikev2 enable out