Sophos 2 cisco router

!IKE PHASE 1

crypto isakmp policy 10
 encr aes 256
 authentication pre-share
 group 5
 exit

!ACL

ip access-list extended vpn-cisco-sophos-net
 permit ip 10.20.30.0 0.0.0.255 172.16.2.0 0.0.0.255
 exit