vpn(封装gre) &nat

《vpn(封装gre) &nat》由会员上传分享，免费在线阅读，更多相关内容在应用文档-天天文库。

1、VPN(封装GRE)&NAT一、实验简述：1、用户需求1、两个私有网络通过NAT上公网2、两个私有网络通过vpn技术互联。实验环境：模拟用户需求，建立如图网络。2、实验说明：1、两台路由器，ROUTERDOWN和ROUTEUP以太网分别接内部局域网，192.168.0.0255.255.0.0和172.18.0.0255.255.0.0网段。通过广域网端口接入INTERNET，接入地址分别为10.0.0.1和20.0.0.1。2、路由器中配置NAT，192.168.0.0和172.18.0.0被nat转换成公网地址

2、，实现上网的目的。3、两台路由器通过基本路由封装协议（GRE），在两台路由器中间建立一条虚拟通道，以实现私网互联的目的。4、实验中，INTERNET网络由一台路由器模拟，两个广域网端口分别封装hdlc协议，分配地址为10.0.0.254和20.0.0.254，且没有添加任何到私网的路由。二、具体实验过程：1、实验配置ROUTERDOWNdown_config#SHOWRUN正在收集配置...当前配置:!!version1.2.9I!hostnamedown!!usernamebdcompasswordbdcom!i

3、nterfaceFastEthernet0/0ipaddress192.168.19.254255.255.0.0noipdirected-broadcastipnatinside!interfaceEthernet0/1noipaddressnoipdirected-broadcast!interfaceSerial0/0ipaddress10.0.0.1255.255.255.0noipdirected-broadcastipnatoutside!interfaceAsync0/0noipaddressnoip

4、directed-broadcastlinedial!interfaceTunnel1mtu1468ipaddress200.0.0.1255.255.255.0noipdirected-broadcasttunnelsource10.0.0.1tunneldestination20.0.0.1tunnelkey1234tunnelchecksum!说明：以上配置tunnel端口iproutedefault10.0.0.254iproute172.18.0.0255.255.0.0Tunnel1!说明：配置到对方私

5、网的路由，走tunnel1端口servicetimestampslogdateservicetimestampsdebugdate!ipaccess-liststandarddchpermit192.168.19.0255.255.255.0!ipnatinsidesourcelistdchinterfaceSerial0/0!ROUTERUPup_config#showrunBuildingconfiguration...Currentconfiguration:!!version1.2.9I!hostnameu

6、p!usernamebdcompasswordbdcom!interfaceFastEthernet0/0ipaddress172.18.0.254255.255.0.0noipdirected-broadcastipnatinside!interfaceEthernet0/1noipaddressnoipdirected-broadcast!interfaceSerial0/0ipaddress20.0.0.1255.255.255.0noipdirected-broadcastipnatoutside!inte

7、rfaceAsync0/0noipaddressnoipdirected-broadcast!interfaceTunnel1mtu1468ipaddress200.0.0.2255.255.255.0noipdirected-broadcasttunnelsourceSerial0/0tunneldestination10.0.0.1tunnelkey1234tunnelchecksum!iproutedefault20.0.0.254iproute192.168.0.0255.255.0.0Tunnel1!se

8、rvicetimestampslogdateservicetimestampsdebugdate!ipaccess-liststandarddchpermit172.18.0.0255.255.0.0!!ipnatinsidesourcelistdchinterfaceSerial0/0!模拟INTERNET路由器配置x25_config#showrunbu