Steps:
1) Define a same IKE policy in both sides.
labpix(config)# isakmp policy 1 authentication pre-share
labpix(config-isakmp-policy)# authentication pre-share
labpix(config-isakmp-policy)# encryption des
labpix(config-isakmp-policy)# hash md5
labpix(config-isakmp-policy)# group 1
2) Enable IKE on outside interface.
labpix(config)# isakmp enable outside
labpix(config)# isakmp identity address
3) Setup IKE group for remote peer,
match your pre-share key in both side.
labpix(config)# isakmp key ******* address 122.225.x.x
4) Config ASA permit IPSec traffic through it
labpix(config)# sysopt connection permit-vpn
5) Define a same transform-set in both side.
labpix(config)# crypto ipsec transform-set Test esp-3des esp-sha-hmac
6) Define ××× interesting traffic.
access-list pix2asa permit ip 192.168.200.0 255.255.255.0
192.168.1.0 255.255.255.0
7) Create a no NAT Access-list and apply it to Inside interface.
access-list nonat permit ip 192.168.200.0 255.255.255.0
192.168.1.0 255.255.255.0
nat (inside) 0 access-list nonat
8) Create a Crypto Map and apply it to Outside interface.
labpix(config)#crypto map Outside_map 15 match address pix2asa
labpix(config)#crypto map Outside_map 15 set peer 122.225.x.x
labpix(config)#crypto map Outside_map 15 set transform-set Test
labpix(config)#crypto map Outside_map interface outside
9) Check the Security Association
labpix(config)# show isakmp sa
Active SA: 1
Rekey SA: 0 (A tunnel will report 1 Active and
1 Rekey SA during rekey)
Total IKE SA: 1
1 IKE Peer: 122.225.x.x
Type : L2L Role : initiator
Rekey : no State : MM_ACTIVE
10) Check the ××× tunnel connection.
C:\Documents and Settings\justin.zhang>ping 192.168.200.15
Pinging 192.168.200.15 with 32 bytes of data:
Reply from 192.168.200.15: bytes=32 time=235ms TTL=126
Reply from 192.168.200.15: bytes=32 time=238ms TTL=126
Reply from 192.168.200.15: bytes=32 time=233ms TTL=126
Reply from 192.168.200.15: bytes=32 time=239ms TTL=126
Ping statistics for 192.168.200.15:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 233ms, Maximum = 239ms, Average = 236ms