VPN

Question 1

VPN pass ASA

Answer 1

R1(config)#crypto isakmp policy 10
R1(config-isakmp)#authentication pre-share 其他保持默认参数
R1(config)#crypto isakmp key 0 cisco address 202.100.2.1
R1(config)#crypto ipsec transform-set Trans esp-des esp-md5-hmac
R1(config)#ip access-list extended vpn
R1(config-ext-nacl)#permit ip 1.1.1.0 0.0.0.255 2.2.2.0 0.0.0.255
R1(config)#crypto map Map 10 ipsec-isakmp
R1(config-crypto-map)#match address vpn
R1(config-crypto-map)#set transform-set Trans
R1(config-crypto-map)#set peer 202.100.2.1
R1(config)#interfacefastEthernet0/0
R1(config-if)#crypto map Map
R2做同样配置……