ipsec vpn 对等体冗余之slb 负载均衡实验配置

《ipsec vpn 对等体冗余之slb 负载均衡实验配置》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、IPsecVPN对等体冗余之SLB负载均衡实验配置SPOKE1路由器和SPOKE2路由器loopback0接口模拟remote端内部网络，VPNHUB1路由器和VPNHUB2路由器模拟VPNgateway，SLB-server路由器模拟SLB服务器，Internal-client路由器loopback0接口模拟内部服务器,Internet路由器模拟internet。为了简化配置本实验IPSECVPN为EZVPN，VPNHUB间的IPSECVPN配置一定要相同，因为他们无法预知将会端接哪个remote。为了防止VPNHUB内部网络路由出现非对称路由，VPNHUB内部

2、网络运行动态路由选择协议（OSPF）并且需要将HUBVPN内的VPNreverse-routeredistribute到动态路由选择协议(OSPF)中，这样就可以避免此网络拓扑可能出现的非对称路由。SPOKE1configurationSPOKE1#shrunBuildingconfiguration...Currentconfiguration:1243bytes!version12.4servicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encry

3、ption!hostnameSPOKE1!boot-start-markerboot-end-marker!!noaaanew-modelmemory-sizeiomem5!!ipcefnoipdomainlookup!!!!!!!cryptoipsecclientezvpnxinjialoveconnectmanualgroupxinjialovekeyxinjialovemodenetwork-extensionpeer172.16.2.1xauthuseridmodeinteractive!!!!interfaceLoopback0ipaddress1.1.

4、1.1255.255.255.255cryptoipsecclientezvpnxinjialoveinside!interfaceFastEthernet0/0noipaddressshutdownduplexautospeedauto!interfaceSerial1/0noipaddressshutdownserialrestart-delay0!interfaceSerial1/1ipaddress172.16.1.1255.255.255.0serialrestart-delay0cryptoipsecclientezvpnxinjialove!inte

5、rfaceSerial1/2noipaddressshutdownserialrestart-delay0!interfaceSerial1/3noipaddressshutdownserialrestart-delay0!interfaceFastEthernet2/0noipaddressshutdownduplexautospeedauto!noiphttpservernoiphttpsecure-server!iproute0.0.0.00.0.0.0Serial1/1!!!!control-plane!!!!!!!!!!linecon0loggingsy

6、nchronouslineaux0linevty04!!EndSopke2configurationSPOKE2#shrunBuildingconfiguration...Currentconfiguration:1084bytes!version12.4servicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption!hostnameSPOKE2!boot-start-markerboot-end-marker!!noaaanew-mode

7、lmemory-sizeiomem5!!ipcefnoipdomainlookup!!!!!!!cryptoipsecclientezvpnxinjialoveconnectmanualgroupxinjialovekeyxinjialovemodenetwork-extensionpeer172.16.2.1xauthuseridmodeinteractive!!!!interfaceLoopback0ipaddress2.2.2.2255.255.255.255cryptoipsecclientezvpnxinjialoveinside!interfaceSe

8、rial1