ASA5510的主要配置：

access-list no-nat extended permit ip 192.168.8.0 255.255.255.0 192.168.1.0 255.255.255.0

access-list no-nat extended permit ip 192.168.8.0 255.255.255.0 192.168.2.0 255.255.255.0

nat (inside) 0 access-list no-nat

access-list vpn extended permit ip 192.168.8.0 255.255.255.0 192.168.1.0 255.255.255.0

access-list vpn extended permit ip 192.168.8.0 255.255.255.0 192.168.2.0 255.255.255.0

crypto ipsec transform-set site-to-site esp-des esp-md5-hmac

crypto dynamic-map site-vpn 30 match address vpn
crypto dynamic-map site-vpn 30 set transform-set site-to-site   
crypto dynamic-map site-vpn 30 set security-association lifetime seconds 28800
crypto map sitevpn 30 ipsec-isakmp dynamic site-vpn
crypto map sitevpn interface outside

crypto isakmp identity address
crypto isakmp enable outside
crypto isakmp policy 20
 authentication pre-share
 encryption des
 hash md5
 group 2
 lifetime 28800

tunnel-group vpn1.gicp.net type ipsec-l2l
tunnel-group vpn1.gicp.net ipsec-attributes
 pre-shared-key *

tunnel-group vpn2.gicp.net type ipsec-l2l
tunnel-group vpn2.gicp.net ipsec-attributes
 pre-shared-key *

思科精睿VPN路由器RV042： 

连接VPN成功后，成功访问内网服务器，但是有两台无法访问，后来才发现原来是那两台没有配网关。