crypto isakmp enable outside
crypto isakmp policy 1
encryption 3des|des|aes
hash sha|md5
authentication pre-share|rsa-encr|rsa-sig
group 1|2|5
lifetime 120-
access-list 100-199 permit|deny ip
crypto isakmp key abc123 address 192.168.1.1
crypto ipsec transform-set 名字 esp-des esp-sha-hmac
crypto map 名字 1 set peer 地址
crypto map 名字 1 settransform-set 传输及名字
crypto map 名字 1 match address 100-199
crypto map 名字 interface outside
