在物理接口（由tunnelsource指定的接口）上配置cryptomap并配置ipsecprofile。用文本编辑器打开/etc/ipsec。pfs=noauto=addkeyingtries=，P-PSK-nontauthby = secret PFS = no auto = addkeying...