clear crypto ipsec sa peer 8.8.8.1

enable transport protocol to TCP using port 10000

crypto isakmp ipsec-over-tcp port 10000