ASA-to-ASA ipsec lan-to-lan ***

    左边： access-list 140 extended permit ip 10.1.1.0 255.255.255.0 192.168.1.0 255.255.255.0 access-list nonat extended permit ip 10.1.1.0 255.255.255.0 192.168.1.0 255.255.255.0 crypto ipsec transform

>>阅读原文<<