Which ACL does the router HW1 need to configure to enable LAN-to-LAN traffic to pass through the encrypted VPN tunnel?

Router HW1 and router HW2 are connected to network A and network B respectively. As shown below, if you want to establish an IPsec VPN between router HW1 and router HW2.

Which ACL does the router HW1 need to configure to enable LAN-to-LAN traffic to pass through the encrypted VPN tunnel?

A . rule permit ip source 192.168.1.10 destination 192.168.1.2 0
B . rule permit ip source 10.1.1.0 0.0.0.255 destination 192.168.1.2 0
C . rule permit ip source 10.1.1.0 0.0.0.255 destination 10.1.2.0 0.0.0.255
D . rule permit ip source 192.168.1.10 destination 10.1.2.0 0.0.0.255
E . rule permit ip source 10.1.2.0 0.0.0.255 destination 10.1.1.0 0.0.0.255

Answer: C