学员提问：
CISCO IPSEC VPN中心点对应两个分公司如何设置
A为中心点,,对应为分公司B和C
/ B (122.227.188.133)
A
\ C (61.131.113.125)
是不是这样设置一下就行了,,
现在只能PING通一个点的地址，另一个分公司PING 不通
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
lifetime 28800
crypto isakmp key BBBB address 122.227.188.133
crypto isakmp key CCCC address 61.131.113.125
!
!
crypto ipsec transform-set AAAAA esp-3des esp-sha-hmac
!
crypto map VPN-SZ 1 ipsec-isakmp
set peer 122.227.188.134
set peer 61.131.113.125
set transform-set AAAAA
match address 101
A为中心点,,对应为分公司B和C
/ B (122.227.188.133)
A
\ C (61.131.113.125)
是不是这样设置一下就行了,,
现在只能PING通一个点的地址，另一个分公司PING 不通
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
lifetime 28800
crypto isakmp key BBBB address 122.227.188.133
crypto isakmp key CCCC address 61.131.113.125
!
!
crypto ipsec transform-set AAAAA esp-3des esp-sha-hmac
!
crypto map VPN-SZ 1 ipsec-isakmp
set peer 122.227.188.134
set peer 61.131.113.125
set transform-set AAAAA
match address 101
捷盈讲师及学员解答：
把set peer分开两条crypto map写