phase 1协商用MD5散列算法
isakmp policy 10 group 2
!定义phase 1进行IKE协商使用DH group 2
isakmp policy 10 lifetime 86400
！定义IKE SA生存时间
vpngroup student0 address-pool dialer
！定义VPN client拨入使用的vpngroup所分配的IP地址池
vpngroup student0 idle-time 1800
！定义vpngroup的空闲时间
vpngroup student0 password 1234
！定义vpngroup的pre-shared key
telnet 192.168.100.9 255.255.255.0 inside
telnet timeout 5
ssh 192.168.100.9 255.255.255.255 inside
ssh timeout 20
terminal width 80
username vpnuser password vpnuser
！在PIX上创建一个用户，用户名密码都为vpnuser
Cryptochecksu页码：[1] [2] [3] [4] [5] [6] [7] [8] 第7页、共8页 |
