1.测试拓扑：
2.配置：
A.R1：
!接口配置
interface Loopback0
ip address 1.1.1.1 255.255.255.0
interface FastEthernet0/0
ip address 10.1.1.1 255.255.255.0
no shut
!路由配置
ip route 0.0.0.0 0.0.0.0 10.1.1.10
B.site1防火墙：
!接口配置
interface GigabitEthernet0
nameif Inside
security-level 100
ip address 10.1.1.10 255.255.255.0
no shut
interface GigabitEthernet1
nameif Outside
security-level 0
ip address 202.100.1.1 255.255.255.0
no shut
!路由配置
route Outside 0.0.0.0 0.0.0.0 202.100.1.10 1
route Inside 1.1.1.0 255.255.255.0 10.1.1.1 1
!IKEV1 第一阶段配置
crypto ikev1 enable Outside
crypto ikev1 policy 10
authentication pre-share
encryption des
hash md5
group 2
tunnel-group 202.100.1.10 type ipsec-l2l
tunnel-group 202.100.1.10 ipsec-attributes
ikev1 pre-shared-key cisco
!IKEV1第二阶段配置
crypto ipsec ikev1 transform-set transet esp-des esp-md5-hmac
!感谢兴趣流和cryto map配置
access-list vpn extended permit ip 1.1.1.0 255.255.255.0 2.2.2.0 255.255.255.0
crypto map crymap 10 match address vpn
crypto map crymap 10 set peer 202.100.1.10
crypto map crymap 10 set ikev1 transform-set transet
crypto map crymap interface Outside