刷配置进去前，需要注意修改如下有标注的地方：
1.将000-0000修改成当前需要配置路由器的设备编号；
2.将10.10.10.0 用全部替换的方式替换成设备当前的ip网段(有6处需要替换)，如10.133.8.0；
3.将ntp的服务器ip替换成你需要的指定的服务器；
4.修改***服务端的ip地址；
5.修改需要建立连接的对端ip网段。
首先telnet上去或是用console上去，后面就可以直接刷配置了。
-----------------Start-----------------------------------
sys
telnet server enable
nat aging-time tcp 7200
nat aging-time udp 7200
nat aging-time ftp-ctrl 3600
nat aging-time ftp-data 3600
ntp unicast-server 172.16.254.8（NTP服务器ip）
sysname 000-0000 (设备名称)
ike local-name client
acl number 3000
rule 0 permit ip source 10.10.10.0 0.0.0.255 destination 172.16.0.0 0.0.255.255(修改成对端内网的ip网段)
rule 10 deny ip
acl number 3001
rule 0 deny ip source 10.10.10.0 0.0.0.255 destination 172.16.0.0 0.0.255.255(修改成对端内网的ip网段)
rule 5 permit ip
vlan 100
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
ike dpd ***_dpd
ike peer ***_peer
exchange-mode aggressive
pre-shared-key cipher client
id-type name
remote-address xx.xx.xx.xx（***服务端的ip地址，为外网地址）
nat traversal
dpd ***_dpd
ipsec proposal ***_prop
ipsec policy ***_poli 1 isakmp
security acl 3000
ike-peer ***_peer
proposal ***_prop
dhcp server ip-pool 1
network 10.10.10.0 mask 255.255.255.0
gateway-list 10.10.10.01
dns-list 8.8.4.4 8.8.8.8
local-user aaa
password cipher ********（设定密码）
authorization-attribute level 3
service-type telnet
interface Ethernet0/0
port link-mode route
interface Vlan-interface100
ip address 10.10.10.01 255.255.255.0
interface Dialer10
nat outbound 3001
ipsec policy ***_poli
interface Ethernet0/1
port link-mode bridge
port access vlan 100
interface Ethernet0/2
port link-mode bridge
port access vlan 100
interface Ethernet0/3
port link-mode bridge
port access vlan 100
interface Ethernet0/4
port link-mode bridge
port access vlan 100
interface Ethernet0/5
port link-mode bridge
port access vlan 100
quit
undo nqa schedule admin ycg
nqa entry admin ycg
type icmp-echo
destination ip xx.xx.xx.xx（使用icmp-echo来激活***通道的对端ip）
frequency 60000
probe count 5
source ip 10.10.10.01
ip route-static 0.0.0.0 0.0.0.0 dialer 10
dhcp enable
nqa schedule admin ycg start-time now lifetime forever
user-interface vty 0 4
authentication-mode scheme
snmp-agent
snmp-agent sys-info version all
snmp-agent community read public
snmp-agent community write private
save
y
y