r1#show run
!
!
interface FastEthernet0/0
 ip address 10.0.0.138 255.255.255.0   装VPNclient的pc网关指向10.0.0.138
 duplex half
!
interface Serial1/1
 ip address 12.1.1.1 255.255.255.0
 serial restart-delay 0
!
ip route 192.168.30.0 255.255.255.0 12.1.1.2
ip http server

 

r2#show run
hostname r2
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$xxSK$hNgnBfqdHsPmQUuNsMIUk1
enable password enable
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication login sdm_vpn_xauth_ml_1 local
aaa authorization exec default local
aaa authorization network sdm_vpn_group_ml_1 local
!        
!
aaa session-id common
ip cef
!
!
!
!
no ip domain lookup
!
multilink bundle-name authenticated
!
!
!
!
!
username ccna privilege 15 view root secret 5 $1$SeJ5$QGlhg./UZPVisKEaYKSVl1
!
!
crypto isakmp policy 1
 encr 3des
 authentication pre-share
 group 2
!
crypto isakmp client configuration group cisco
 key cisco1234
 pool SDM_POOL_1
!
!
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
!
crypto dynamic-map SDM_DYNMAP_1 1
 set transform-set ESP-3DES-SHA
 reverse-route
!
!
crypto map SDM_CMAP_1 client authentication list sdm_vpn_xauth_ml_1
crypto map SDM_CMAP_1 isakmp authorization list sdm_vpn_group_ml_1
crypto map SDM_CMAP_1 client configuration address respond
crypto map SDM_CMAP_1 65535 ipsec-isakmp dynamic SDM_DYNMAP_1
!
!
interface FastEthernet0/0
 ip address 192.168.30.1 255.255.255.0
 duplex half
!
interface Serial1/0
 ip address 12.1.1.2 255.255.255.0
 serial restart-delay 0
 crypto map SDM_CMAP_1
!
ip local pool SDM_POOL_1 192.168.30.100 192.168.30.200
ip route 10.0.0.0 255.255.255.0 12.1.1.1
ip http server
no ip http secure-server
!
!
!