记录一下cisco的ipsecV-p-n配置

v-p-n 分类  1、 点到点 

                2、 远程访问v-p-n

封装模式  1、传输模式

                 2、隧道模式

两个阶段  1、管理连接

                配置传输集

                         crypto isakmp policy 1

                                encryption  3des/des/aes   (用啥对称加密算法)

                                hash  md5/sha (签名算法)

                                group 1/2/5   (DH密钥长度)

                                authentication pre-share

                       crypto isakmp  key   123456（密码）   address  12.12.12.1 (对端ip)

                 2、数据连接

                       配置个acl   deny的不走vpn

                                         permit的走vpn

                        access-list 100 permint  ip  192.168.0.0 0.0.0.255 172.10.0.0 0.0.0.255

                        crypto ipsce transform-set  tranSet(传输配置名称) esp/ah-3des/des/aes/(md5/sha-hmac)

                3、配置map

                        crypto map Map 1 ipsec-isakmp

                                set peer 12.12.12.1

                                set transform-set tranSet

                                 match address 100

                4、在接口上运用map

                        crypto   map  Map