asa防火墙vpn

望马先生

昨天在公司搭建了个vpn服务器，我想从外网拨VPN上公司内网
请问我在思科asa5510上应该配置什么？
比如：vpn服务器地址10.0.1.2
         公司外网接口地址192.168.1.2
求高人：给出详细配置命令，小弟不胜感激。

txt0t

6666666666666

望马先生

洪湖成水吧了？

wlhl1h

求同

wlhl1h

求同

周周

interface Ethernet0/0
no shutdown
nameif outside
ip address 10.0.1.2 255.255.255.0

interface Ethernet0/1
no shutdown
nameif inside
ip address 192.168.1.2 255.255.255.0
nat (inside) 1 0 0
global (outside) 1 interface

route outside 0.0.0.0 0.0.0.0 10.0.1.1

username cisco password cisco
aaa authentication enable console LOCAL
aaa authentication ssh console LOCAL
ssh 0.0.0.0 0.0.0.0 outside

ip local pool vpnpool 192.168.200.1-192.168.200.254 mask 255.255.255.0

crypto isakmp policy 10
authentication pre-share
encryption des
hash md5
group 2
exit

access-list split extended permit ip 192.168.1.0 255.255.255.0 any
group-policy gropolicy internal
group-policy gropolicy attributes
split-tunnel-policy tunnelspecified
split-tunnel-network-list value split
exit

tunnel-group vpn type ipsec-ra
tunnel-group vpn general-attributes
address-pool vpnpool
exit
tunnel-group vpn ipsec-attributes
pre-shared-key 123456
exit

crypto ipsec ikev1 transform-set vpnset esp-des esp-md5-hmac
crypto dynamic-map dymap 10 set ikev1 transform-set vpnset
crypto map map 10 ipsec-isakmp dynamic dymap
crypto map map interface outside

username cisco password 123456
username cisco attributes
vpn-group-policy gropolicy
service-type remote-access
exit

VPN组账号密码：vpn/123456
登录密码：cisco/123456

有些命令不同的版本可能不一样，大致的配置是这样的

淼渺淼渺

感谢楼主分享