PIX Configure ex. 31s (2)

crypto map mymap interface outside
32) Ezvpn
access-list nonat permit ip 10.0.1.0 255.255.255.0 10.0.6.0 255.255.255.0
access-list easy_acl permit ip 10.0.1.0 255.255.255.0 10.0.6.0 255.255.2555.0
nat (inside) 0 access-list nonat
ip local pool easypool 10.0.6.50-10.0.6.100
crypto ipsec transform-set esp-3des-md5 esp-3des esp-md5-hmac
crypto dynamic-map dyna 20 set transform-set esp-3des-md5
crypto map easy 50 ipsec-isakmp dynamic dyna
crypto map easy client configuration address initiate
crypto map easy interface outside
isakmp enable outside
isakmp identity hostname
isakmp nat-traversal 60
isakmp policy 20 authentication pre-share
isakmp policy 20 encryption 3des
isakmp policy 20 hash md5
isakmp policy 20 group 2
isakmp policy 20 lifetime 86400
vpngroup MYGROUP address-pool easypool
vpngroup MYGROUP backup-server 192.168.6.3
vpngroup MYGROUP dns-server 10.0.6.10
vpngroup MYGROUP wins-server 10.0.6.11
vpngroup MYGROUP default-domain cisco.com
vpngroup MYGROUP split-tunnel easy_acl
vpngroup MYGROUP idle-time 1800
vpngroup MYGROUP password cisco123

标签：

版权申明：本站文章部分自网络，如有侵权，请联系：west999com@outlook.com
特别注意：本站所有转载文章言论不代表本站观点，本站所提供的摄影照片，插画，设计作品，如需使用，请与原作者联系，版权归原作者所有