需求：
Remote作爲分公司撥入ASA爲邊界的公司總部，且分公司內部的Inside2要與總公司內部的Inside1互訪。
PC爲員工在家辦公使用接入內網
配置：
ASA
紅字爲新版本需要添加的ikev1字段
tunnel-group remote type remote-access
tunnel-group remote general-attributes
address-pool remote
tunnel-group remote ipsec-attributes
ikev1 pre-shared-key remote
tunnel-group remote general-attributes
address-pool remote
tunnel-group remote ipsec-attributes
ikev1 pre-shared-key remote
!
username blcoffe password blcoffe
!
crypto ikev1 enable Outside
crypto ikev1 policy 10
authentication pre-share
encryption 3des
hash md5
group 2
!
crypto ikev1 policy 10
authentication pre-share
encryption 3des
hash md5
group 2
!
crypto ipsec ikev1 transform-set cisco esp-des esp-md5-hmac
crypto dynamic-map dymap 10 set ikev1transform-set ciscocrypto dynamic-map dymap 10 set reverse-route
!
crypto map cisco 10 ipsec-isakmp dynamic dymap
crypto map cisco 10 ipsec-isakmp dynamic dymap
crypto map cisco interface Outside
Remote
crypto ipsec client ez*** remote
connect manual
group remote key cisco
mode network-plus
peer 202.100.1.1
手工撥入：
Remote#crypto ipsec client ez*** connect
*Mar 1 01:15:40.615: EZ***(remote): Pending XAuth Request, Please enter the following command:
*Mar 1 01:15:40.615: EZ***: crypto ipsec client ez*** xauth
Remote#crypto ipsec client ez*** xauth
Username: remote
Password:
注意配置ez***硬件客戶端一定要在接口指定好
interface FastEthernet0/1
crypto ipsec client ez*** remote inside
interface FastEthernet0/0
crypto ipsec client ez*** remote outside
切不可配置上就着急測試，測試時最好在Inside2的位置測試，如果在remote路由器測試ping要加上源接口，如ping 10.1.1.1 so f0/1