PIX 506 VPN的配置，就是不通呀

来源：百度知道 编辑：UC知道 时间：2024/06/20 10:11:59
阶段1和2的加密协议为des md5,是从广州——上海

PIX Version 6.3(4)
interface ethernet0 auto
interface ethernet1 auto
nameif ethernet0 outside security0
nameif ethernet1 inside security100
names
access-list vpn permit ip 192.168.10.0 255.255.255.0 192.168.10.0 255.255.255.0
access-list dole permit ip 192.168.10.0 255.255.255.0 192.168.1.0 255.255.255.0
pager lines 24
mtu outside 1500
mtu inside 1500
ip address outside 61.*.*.* 255.255.255.0
ip address inside 192.168.10.1 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
ip local pool vpn-pool 192.168.10.190-192.168.10.199
ip local pool mypool 192.168.10.210-192.168.10.230
pdm logging informational 100
pdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 0 access-list vpn
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
route outside 0.0.0.0 0.0.0.0 61.*.*.1 1
floodguard enable
sys

加密协议为des md5crypto ipsec transform-set trans esp-des esp-md5-hmac
crypto map toShanghai 10 ipsec-isakmp
crypto map toShanghai 10 match address dole
crypto map toShanghai 10 set peer 202.*.*.*
crypto map toShanghai 10 set transform-set trans
crypto map toShanghai interface outside
isakmp enable outside
isakmp key ******** address 202.*.*.* netmask 255.255.255.255
isakmp identity address
isakmp policy 20 authentication pre-share
vpdn group cisco client configuration address local vpn-pool
vpdn group cisco pptp echo 60
vpdn group cisco client authentication local
vpdn username gt password *********
vpdn username hn password *********
vpdn username gi password *********