Tunnel Lab

Click here to download the tunnel lab. Note IPSec has not been configured on this lab. PacketTracer only let's you configure IPSec in the legacy (more complex) method where you need to manually specify traffic flows using ACLs and crypto-maps. 

Tunnel Lab

Configuration of IPSec is quite complicated, but the above tunnel configuration should be sufficient for understanding first level troubleshooting. This site explains in detail how to further apply an IPSec profile to the tunnel interface using the Static VTI (Virtual Tunnel Interface) methodology which is now standard practice. You can also see this video by Keith Barker who always does a great job showing configurations done live.