clear crypto ipsec sa peer 8.8.8.1
enable transport protocol to TCP using port 10000
crypto isakmp ipsec-over-tcp port 10000