1. You DO NOT have to use k9 images just for creating tunnel interfaces - you can do it even on images that do not support crypto. It is called GRE tunnelling.
2. Crypto is required for IPSec, which is used to ecnrypt traffic between two routers - but of course usually IPSec policies are applied on Tunnel interfaces.
So what problem do you have? With GRE tunnelling or with encrypting traffic on tunnel interfaces (IPSesc/ISAKMP problems)?
Good example about creating pure GRE tunnel are at
https://supportforums.cisco.com/documen ... gre-tunnel and for complete GRE tunnel encrypted by IPSec look at
http://www.firewall.cx/cisco-technical- ... ipsec.htmlOf course, there are tons of documentation at Cisco site covering both GRE and IPSec.