interface Loopback1
 ip address 10.10.1.1 255.255.255.0
!
interface FastEthernet0/0
 ip address 172.16.1.2 255.255.255.0

========= Phase 1 
crypto isakmp policy 1
 encr des
 hash sha
 authentication pre-share
 group 5
 lifetime 86400

crypto isakmp key test123 address 172.16.1.1

========= Phase 2 
crypto ipsec transform-set FG-TS esp-aes 256 esp-sha-hmac
 mode tunnel

crypto ipsec profile FG-P
 set transform-set FG-TS
 set pfs group5

========= Tunnel 
interface Tunnel 1
 ip address 10.100.100.2 255.255.255.252
 tunnel source fas 0/0
 tunnel destination 172.16.1.1
 tunnel mode ipsec ipv4
 tunnel protection ipsec profile FG-P

========= Route to FortiGate 
ip route 192.168.12.0 255.255.255.0 tunnel 1