cisco vpn 求助

xharrison

配置如下：
crypto keyring l2l_ovt
  pre-shared-key address 172.16.1.1 key cisco
!
crypto isakmp policy 10
hash md5
authentication pre-share
group 2
crypto isakmp profile l2l_ovt_profile
   keyring l2l_ovt
   match identity address 172.16.1.1 255.255.255.255
!
!
crypto ipsec transform-set trans esp-des esp-md5-hmac
!
crypto map cry_map 10 ipsec-isakmp
set peer 172.16.1.1
set transform-set trans
set isakmp-profile l2l_ovt_profile
match address l2l-traffic
!
interface Loopback0
ip address 1.1.1.1 255.255.255.0
!
interface FastEthernet0/0
ip address 10.1.1.1 255.255.255.0
duplex auto
speed auto
crypto map cry_map
!
ip access-list extended l2l-traffic
permit ip 1.1.1.0 0.0.0.255 2.2.2.0 0.0.0.255



想请教一下懂cisco vpn的人，配置如上，使用路由器 ，site to site vpn如何使用Virtual-Template来配置，而不是如图中crypto map cry_map 绑在物理端口上。因为还有ezvpn 用Virtual-Template配置了，且可以做acl ,现在想加入一下site to site vpn,也想用Virtual-Template来配置。不能影响原有的ezvpn.谢谢！