安全CCIE之路——实验IPsec--静态vti.doc

《安全CCIE之路——实验IPsec--静态vti.doc》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、VTI配置r1#showrunBuildingconfiguration...Currentconfiguration:1561bytes!version12.4servicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption!hostnamer1!boot-start-markerboot-end-marker!!noaaanew-modelmemory-sizeiomem5!!ipcefnoipdomainlookup!!!!!!!!!!!

2、!!!!!!!!!!cryptoisakmppolicy10hashmd5authenticationpre-sharegroup2cryptoisakmpkeyciscoaddress0.0.0.00.0.0.0!!cryptoipsectransform-setciscoesp-3desesp-md5-hmac!cryptoipsecprofiletextsettransform-setcisco!!!!!interfaceLoopback0ipaddress10.10.1.1255.255.255.0!interfaceTunnel1ipaddress10.1

3、0.13.1255.255.255.252tunnelsourceSerial0/1tunneldestination202.103.23.2tunnelmodeipsecipv4tunnelprotectionipsecprofiletext!interfaceSerial0/0noipaddressshutdownserialrestart-delay0!interfaceSerial0/1ipaddress202.103.12.1255.255.255.252serialrestart-delay0!interfaceSerial0/2noipaddresss

4、hutdownserialrestart-delay0!interfaceSerial0/3noipaddressshutdownserialrestart-delay0!interfaceEthernet1/0noipaddressshutdownhalf-duplex!interfaceEthernet1/1noipaddressshutdownhalf-duplex!interfaceEthernet1/2noipaddressshutdownhalf-duplex!interfaceEthernet1/3noipaddressshutdownhalf-dup

5、lex!iphttpservernoiphttpsecure-serveriproute0.0.0.00.0.0.0202.103.12.2iproute10.10.3.0255.255.255.0Tunnel1!!!!!!control-plane!!!!!!!!!!linecon0exec-timeout00loggingsynchronouslineaux0linevty04!!endr1#r3#showrunBuildingconfiguration...Currentconfiguration:1561bytes!version12.4servicetim

6、estampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption!hostnamer3!boot-start-markerboot-end-marker!!noaaanew-modelmemory-sizeiomem5!!ipcefnoipdomainlookup!!!!!!!!!!!!!!!!!!!!!cryptoisakmppolicy10hashmd5authenticationpre-sharegroup2cryptoisakmpkeyciscoaddre

7、ss0.0.0.00.0.0.0!!cryptoipsectransform-setciscoesp-3desesp-md5-hmac!cryptoipsecprofiletextsettransform-setcisco!!!!!interfaceLoopback0ipaddress10.10.3.1255.255.255.0!interfaceTunnel1ipaddress10.10.13.2255.255.255.252tunnelsourceSerial0/0tunneldestination202.103.12.1tunnelmodeipsecipv