欢迎来到天天文库
浏览记录
ID:13892478
大小:126.00 KB
页数:4页
时间:2018-07-24
《h3cte实验:gre-over-ipsec》由会员上传分享,免费在线阅读,更多相关内容在行业资料-天天文库。
1、H3CTE实验:GREOverIPsecVPN+OSPF实验拓扑:配置脚本:[R1]discurrinterfaceEthernet0/0/0portlink-moderouteipaddress192.168.1.2255.255.255.0#iproute-static0.0.0.00.0.0.0192.168.1.1#[R5]discurrinterfaceEthernet0/0/0portlink-moderouteipaddress192.168.2.2255.255.255.0#iproute-static0.0.0.00.0.0.01
2、92.168.2.1#[R2]discurr#aclnumber3000rule0permitipsource10.1.23.20destination10.1.34.40rule5denyip#domainekestinauthenticationppplocalaccess-limitdisablestateactiveidle-cutdisableself-service-urldisable#ikeproposal1#ikepeerpeer1proposal1pre-shared-keysimpleekestinremote-address
3、10.1.34.4[R4]discurr#aclnumber3000rule0permitipsource10.1.34.40destination10.1.23.20rule5denyip#domainekestinauthenticationppplocalaccess-limitdisablestateactiveidle-cutdisableself-service-urldisable#ikeproposal1#ikepeerpeer1proposal1pre-shared-keysimpleekestinremote-address10
4、.1.23.2local-address10.1.23.2#ipsecproposal1espauthentication-algorithmsha1espencryption-algorithmaes128#ipsecpolicymap10isakmpsecurityacl3000ike-peerpeer1proposal1#local-userR2passwordsimpleekestinservice-typeppp#interfaceEthernet0/0/0portlink-moderouteipaddress192.168.1.1255
5、.255.255.0#interfaceSerial0/0/0link-protocolppppppauthentication-modechapdomainekestinpppchapuserR3pppchappasswordsimpleekestinipaddressppp-negotiateipsecpolicymap#interfaceLoopBack0ipaddress2.2.2.2255.255.255.255#interfaceTunnel0ipaddress10.1.100.1255.255.255.0source10.1.23.2
6、destination10.1.34.4#ospf1area0.0.0.0network10.1.23.20.0.0.0#ospf2area0.0.0.0network10.1.100.10.0.0.0network192.168.1.10.0.0.0#iproute-static192.168.2.0255.255.255.0Tunnel0#local-address10.1.34.4#ipsecproposal1espauthentication-algorithmsha1espencryption-algorithmaes128#ipsecp
7、olicymap10isakmpsecurityacl3000ike-peerpeer1proposal1#local-userR4passwordsimpleekestinservice-typeppp#interfaceEthernet0/0/0portlink-moderouteipaddress192.168.2.1255.255.255.0#interfaceSerial0/0/0link-protocolppppppmpMp-group1#interfaceSerial0/0/1link-protocolppppppmpMp-group
8、1#interfaceMp-group1ipaddress10.1.34.4255.255.255.0ipsecpolic
此文档下载收益归作者所有