配置ASA Dynamic IPsec IOS and Dynamicallyaddressed PIX with NAT.pdfVIP

配置ASA Dynamic IPsec IOS and Dynamicallyaddressed PIX with NAT 一、网络拓扑 波 软件版本： 选 Router ：Cisco IOS Software, 7200 Software (C7200-ADVENTERPRISEK9-M), Version 12.4(11)T, RELEASE SOFTWARE (fc2) ASA ：Cisco PIX Security Appliance Software Version 7.2(2) 张 注意 在文档中填充黄色不是VPN 的配置，而是CBAC的配置。这个例子是非常简单，主要配 ： 置基于动态地址配置动态VPN 的配置。 人 二、具体配置 ASA# show running-config 作 : Saved : 制 PIX Version 7.2(3) ! hostname ASA enable password 8Ry2YjIyt7RRXU24 encrypted names ! interface Ethernet0 nameif outside security-level 0 ip address dhcp ! interface Ethernet1 nameif inside security-level 100 ip address ! passwd 2KFQnbNIdI.2KYOU encrypted ftp mode passive access-list ipsec extended permit ip access-list nonat extended permit ip pager lines 24 mtu outside 1500 mtu inside 1500 no failover icmp unreachable rate-limit 1 burst-size 1 no asdm history enable arp timeout 14400 nat-control 波 global (outside) 1 interface nat (inside) 0 access-list nonat 选 nat (inside) 1 route outside 1 timeout xlate 3:00:00 张 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 ： timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout uauth 0:05:00 absolute 人 no snmp-server location no snmp-server contact snmp-server enable traps snmp authentication linkup linkdown coldstart 作 crypto ipsec transform-set vpn esp-des esp-md5-hmac crypto map map1 10 match a