欢迎来到天天文库
浏览记录
ID:57615449
大小:19.36 KB
页数:20页
时间:2020-08-29
《路由器和路由器之间的VPN配置.docx》由会员上传分享,免费在线阅读,更多相关内容在教育资源-天天文库。
1、一、Pix-Pix 二、路由器和路由器之间的VPN配置 三、路由器-路由器以及VPNClient之间的VPN一、Pix-PixPIXCentralBuildingconfiguration...:Saved:PIXVersion6.3(3)interfaceethernet0autointerfaceethernet1autonameifethernet0outsidesecurity0nameifethernet1insidesecurity100enablepassword8Ry2YjIyt7RRXU24encryptedpasswd2KFQnb
2、NIdI.2KYOUencryptedhostnamepix-centralfixupprotocoldnsmaximum-length512fixupprotocolftp21fixupprotocolh323h2251720fixupprotocolh323ras1718-1719fixupprotocolhttp80fixupprotocolrsh514fixupprotocolrtsp554fixupprotocolsip5060fixupprotocolsipudp5060fixupprotocolskinny2000fixupprotocol
3、smtp25fixupprotocolsqlnet1521fixupprotocoltftp69names!---ThisistraffictoPIX2.access-list120permitip10.1.1.0255.255.255.010.2.2.0255.255.255.0!---ThisistraffictoPIX3.access-list130permitip10.1.1.0255.255.255.010.3.3.0255.255.255.0!---DonotdoNetworkAddressTranslation(NAT)ontraffict
4、ootherPIXes.access-list100permitip10.1.1.0255.255.255.010.2.2.0255.255.255.0access-list100permitip10.1.1.0255.255.255.010.3.3.0255.255.255.0pagerlines24loggingonmtuoutside1500mtuinside1500ipaddressoutside172.18.124.153255.255.255.0ipaddressinside10.1.1.1255.255.255.0ipauditinfoac
5、tionalarmipauditattackactionalarmpdmhistoryenablearptimeout14400!---DonotdoNATontraffictootherPIXes.nat(inside)0access-list100routeoutside0.0.0.00.0.0.0172.18.124.11timeoutxlate3:00:00timeoutconn1:00:00half-closed0:10:00udp0:02:00rpc0:10:00h2251:00:00timeouth3230:05:00mgcp0:05:00
6、sip0:30:00sip_media0:02:00timeoutuauth0:05:00absoluteaaa-serverTACACS+protocoltacacs+aaa-serverRADIUSprotocolradiusaaa-serverLOCALprotocollocalnosnmp-serverlocationnosnmp-servercontactsnmp-servercommunitypublicsnmp-serverenabletrapsfloodguardenablesysoptconnectionpermit-ipseccryp
7、toipsectransform-setmysetesp-desesp-md5-hmac!---ThisistraffictoPIX2.cryptomapnewmap20ipsec-isakmpcryptomapnewmap20matchaddress120cryptomapnewmap20setpeer172.18.124.154cryptomapnewmap20settransform-setmyset!---ThisistraffictoPIX3.cryptomapnewmap30ipsec-isakmpcryptomapnewmap30match
8、address130cryptomapnewmap30setpeer172.18
此文档下载收益归作者所有