欢迎来到天天文库
浏览记录
ID:53119003
大小:73.90 KB
页数:6页
时间:2020-04-01
《高可用性IPSEC-VPN-最佳方案.docx》由会员上传分享,免费在线阅读,更多相关内容在行业资料-天天文库。
1、一、实验拓扑二、基本配置Branch的基本配置:interfaceLoopback0ipaddress1.1.1.1255.255.255.0!interfaceTunnel0ipaddress13.1.1.1255.255.255.0tunnelsource12.1.1.1tunneldestination23.1.1.3!interfaceTunnel1ipaddress14.1.1.1255.255.255.0tunnelsource12.1.1.1tunneldestination24.
2、1.1.4!interfaceEthernet0/0ipaddress12.1.1.1255.255.255.0iproute0.0.0.00.0.0.012.1.1.2Internet的基本配置:interfaceEthernet0/0ipaddress12.1.1.2255.255.255.0half-duplex!interfaceEthernet0/1ipaddress23.1.1.2255.255.255.0half-duplex!interfaceEthernet0/2ipaddre
3、ss24.1.1.2255.255.255.0Primary的基本配置:interfaceTunnel0ipaddress13.1.1.3255.255.255.0tunnelsource23.1.1.3tunneldestination12.1.1.1!interfaceEthernet0/0ipaddress23.1.1.3255.255.255.0half-duplex!interfaceEthernet0/1ipaddress100.1.1.3255.255.255.0iproute0.
4、0.0.00.0.0.023.1.1.2Secondary的配置:interfaceTunnel1ipaddress14.1.1.4255.255.255.0tunnelsource24.1.1.4tunneldestination12.1.1.1!interfaceEthernet0/0ipaddress24.1.1.4255.255.255.0half-duplex!interfaceEthernet0/1ipaddress100.1.1.4255.255.255.0iproute0.0.0
5、.00.0.0.024.1.1.2Server的基本配置interfaceLoopback0ipaddress5.5.5.5255.255.255.0!interfaceEthernet0/0ipaddress100.1.1.5255.255.255.0half-duplex三、IPSEC配置Branch的IPSEC配置cryptoisakmppolicy10authenticationpre-sharecryptoisakmpkeyccieaddress23.1.1.3cryptoisakmp
6、keyccieaddress24.1.1.4!!cryptoipsectransform-settresp-desesp-md5-hmac!cryptoipsecprofileipsecsettransform-settrinterfaceTunnel0tunnelprotectionipsecprofileipsec!interfaceTunnel1tunnelprotectionipsecprofileipsecPrimary的IPSEC配置cryptoisakmppolicy10authe
7、nticationpre-sharecryptoisakmpkeyccieaddress12.1.1.1!!cryptoipsectransform-settresp-desesp-md5-hmac!cryptoipsecprofileipsecsettransform-settr!interfaceTunnel0tunnelprotectionipsecprofileipsecSecondary的IPSEC配置cryptoisakmppolicy10authenticationpre-shar
8、ecryptoisakmpkeyccieaddress12.1.1.1!!cryptoipsectransform-settresp-desesp-md5-hmac!cryptoipsecprofileipsecsettransform-settr!interfaceTunnel1tunnelprotectionipsecprofileipsec四、EIGRP的配置Branch:routereigrp100network1.1.1.00.0.0.255network13.1.1.00.0.0.2
此文档下载收益归作者所有