cisco-asa-5510-easy-vpn-配置说明

ciscoasa5510easyvpnÅäÖÃ˵Ã÷2009-03-0916:27:32|·ÖÀࣺcsco·À»ð|±êÇ©£º|×ֺŴóÖÐС¶©ÔÄ.#####¶¨Òå½Ó¿Ú£ºinterfaceEthernet0nameifoutsidesecurity-level0ipaddress218.247.1.162255.255.255.224interfaceEthernet1nameifinsidesecurity-level100ipaddress10.10.10.1255.255.255.0#####¶¨ÒåACL£ºaccess-listno-natextendedpermitip10.10.10.0255.255.255.0192.168.200.0255.255.255.0access-listno-natextendedpermitip192.168.0.0255.255.0.0192.168.200.0255.255.255.0access-listto_vpnextendedpermitip192.168.0.0255.255.0.0192.168.200.0255.255.255.0access-listto_vpnextendedpermitip192.168.200.0255.255.255.0192.168.0.0255.255.0.0access-listto_vpnextendedpermitip10.10.10.0255.255.255.0192.168.200.0255.255.255.0access-listto_vpnextendedpermitip192.168.200.0255.255.255.010.10.10.0255.255.255.0access-listaaaextendedpermiticmpanyanyaccess-listaaaextendedpermitip192.168.200.0255.255.255.0any#####¶¨ÒåVPNµØÖ·³Ø£ºiplocalpool1192.168.200.1-192.168.200.254mask255.255.255.0#####¶¨ÒåNATת»»£ºglobal(outside)1218.247.1.163nat(inside)0access-listno-natnat(inside)110.10.10.0255.255.255.0nat(inside)1192.168.0.0255.255.0.0#####½«access-listaaaÓ¦Óõ½outside½Ó¿ÚÉÏ£ºaccess-groupaaaininterfaceoutside#####д·ÓÉ£ºrouteoutside0.0.0.00.0.0.0218.247.1.1611routeinside192.168.0.0255.255.0.010.10.10.21#####¶¨Òågroup×é²ßÂÔ£ºgroup-policydymtvpninternalgroup-policydymtvpnattributesvpn-idle-timeout900split-tunnel-policytunnelspecifiedsplit-tunnel-network-listvalueto_vpn#####¶¨ÒåVPNÓû§Ãû¡¢ÃÜÂ룺usernametestuserpasswordhr0jyWze24KV0pD1encryptedusernamelvdongpasswordaeL/Sov33qP3x/CMencrypted#####¶¨Òåipsec²ßÂÔ£ºcryptoipsectransform-setdymtvpnesp-3desesp-md5-hmac#####¶¨Ò嶯̬ӳÉ䣺cryptodynamic-mapdymtvpn10settransform-setdymtvpn#####½«¶¯Ì¬Ó³Éä°ó¶¨µ½¾²Ì¬Ó³É䣺cryptomapdymtvpn20ipsec-isakmpdynamicdymtvpn#####½«¾²Ì¬Ó³ÉäÓ¦Óõ½½Ó¿ÚÉÏ£ºcryptomapdymtvpninterfaceoutside#####¶¨ÒåIKE£ºcryptoisakmpidentityaddresscryptoisakmpenableoutsidecryptoisakmppolicy10authenticationpre-shareencryption3deshashmd5group2lifetime86400#####¶¨ÒåËíµÀ×飺tunnel-groupdymtvpntypeipsec-ratunnel-groupdymtvpngeneral-attributesaddress-pool1authentication-server-group(outside)LOCALdefault-group-policydymtvpntunnel-groupdymtvpnipsec-attributespre-shared-key*