ASA 5505 接在内网启ipsec vpn 网关
ciscoasa# show run : Saved:ASA Version 8.2(5) !hostname ciscoasaenable password 8Ry2YjIyt7RRXU24 encryptedpasswd 2KFQnbNIdI.2KYOU encryptednames!interface Ethernet0/0!interface Ethernet0/1 shutdown!interface Ethernet0/2 shutdown!interface Ethernet0/3 shutdown!interface Ethernet0/4 shutdown!interface Ethernet0/5 shutdown! interface Ethernet0/6 shutdown!interface Ethernet0/7 shutdown!interface Vlan1 nameif inside security-level 100 ip address 192.168.0.X 255.255.255.0 !ftp mode passiveaccess-list no-nat extended permit ip 192.168.1.0 255.255.255.0 10.10.10.0 255.255.255.0 access-list TunnelAcl extended permit ip 192.168.1.0 255.255.255.0 any pager lines 24mtu inside 1500ip local pool testpool 10.10.10.1-10.10.10.100 mask 255.255.255.0icmp unreachable rate-limit 1 burst-size 1no asdm history enablearp timeout 14400route inside 0.0.0.0 0.0.0.0 192.168.0.1 1timeout xlate 3:00:00timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolutetimeout tcp-proxy-reassembly 0:01:00timeout floating-conn 0:00:00dynamic-access-policy-record DfltAccessPolicyno snmp-server locationno snmp-server contactsnmp-server enable traps snmp authentication linkup linkdown coldstartcrypto ipsec transform-set myset esp-des esp-md5-hmac crypto ipsec security-association lifetime seconds 28800crypto ipsec security-association lifetime kilobytes 4608000crypto dynamic-map dyn1 10 set transform-set mysetcrypto dynamic-map dyn1 10 set reverse-routecrypto dynamic-map remote-dyn-map 10 set security-association lifetime seconds 288000crypto map mymap 10 ipsec-isakmp dynamic dyn1crypto map mymap interface insidecrypto isakmp enable insidecrypto isakmp policy 10 authentication pre-share encryption 3des hash md5 group 2 lifetime 86400crypto isakmp policy 65535 authentication pre-share encryption 3des hash sha group 2 lifetime 86400telnet timeout 5ssh timeout 5console timeout 0 threat-detection basic-threatthreat-detection statistics access-listno threat-detection statistics tcp-interceptgroup-policy mis internalgroup-policy mis attributes dns-server value 202.106.0.20 vpn-tunnel-protocol IPSec split-tunnel-policy tunnelspecified split-tunnel-network-list value default-domain value cisco.com.cnusername remote password Rhp7E2Qx4Uj4kyVK encryptedusername remote attributes vpn-group-policy misusername cisco password 3USUcOPFUiMCO4Jk encryptedtunnel-group mis type remote-accesstunnel-group mis general-attributes address-pool testpool default-group-policy mistunnel-group mis ipsec-attributes pre-shared-key *****!class-map inspection_default match default-inspection-traffic!!policy-map type inspect dns preset_dns_map parametersmessage-length maximum client automessage-length maximum 512policy-map global_policy class inspection_defaultinspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect ip-options inspect netbios inspect rsh inspect rtsp inspect skinnyinspect esmtp inspect sqlnet inspect sunrpc inspect tftp inspect sipinspect xdmcp !service-policy global_policy globalprompt hostname context call-home reporting anonymous prompt 2call-home profile CiscoTAC-1no activedestination address http https://tools.cisco.com/its/service/oddce/services/DDCEServicedestination address email callhome@cisco.comdestination transport-method httpsubscribe-to-alert-group diagnosticsubscribe-to-alert-group environmentsubscribe-to-alert-group inventory periodic monthlysubscribe-to-alert-group configuration periodic monthlysubscribe-to-alert-group telemetry periodic dailyCryptochecksum:be9b3ac2862b8087cfd35a6473b59eeb: end 外网能拨上vpn 但是不能访问内网的服务器 {:6_273:} {:6_263:} {:6_263:}
页:
[1]