h3cte实验：gre-over-ipsec

《h3cte实验：gre-over-ipsec》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、H3CTE实验：GREOverIPsecVPN+OSPF实验拓扑：配置脚本：[R1]discurrinterfaceEthernet0/0/0portlink-moderouteipaddress192.168.1.2255.255.255.0#iproute-static0.0.0.00.0.0.0192.168.1.1#[R5]discurrinterfaceEthernet0/0/0portlink-moderouteipaddress192.168.2.2255.255.255.0#iproute-static0.0.0.00.0.0.01

2、92.168.2.1#[R2]discurr#aclnumber3000rule0permitipsource10.1.23.20destination10.1.34.40rule5denyip#domainekestinauthenticationppplocalaccess-limitdisablestateactiveidle-cutdisableself-service-urldisable#ikeproposal1#ikepeerpeer1proposal1pre-shared-keysimpleekestinremote-address

3、10.1.34.4[R4]discurr#aclnumber3000rule0permitipsource10.1.34.40destination10.1.23.20rule5denyip#domainekestinauthenticationppplocalaccess-limitdisablestateactiveidle-cutdisableself-service-urldisable#ikeproposal1#ikepeerpeer1proposal1pre-shared-keysimpleekestinremote-address10

4、.1.23.2local-address10.1.23.2#ipsecproposal1espauthentication-algorithmsha1espencryption-algorithmaes128#ipsecpolicymap10isakmpsecurityacl3000ike-peerpeer1proposal1#local-userR2passwordsimpleekestinservice-typeppp#interfaceEthernet0/0/0portlink-moderouteipaddress192.168.1.1255

5、.255.255.0#interfaceSerial0/0/0link-protocolppppppauthentication-modechapdomainekestinpppchapuserR3pppchappasswordsimpleekestinipaddressppp-negotiateipsecpolicymap#interfaceLoopBack0ipaddress2.2.2.2255.255.255.255#interfaceTunnel0ipaddress10.1.100.1255.255.255.0source10.1.23.2

6、destination10.1.34.4#ospf1area0.0.0.0network10.1.23.20.0.0.0#ospf2area0.0.0.0network10.1.100.10.0.0.0network192.168.1.10.0.0.0#iproute-static192.168.2.0255.255.255.0Tunnel0#local-address10.1.34.4#ipsecproposal1espauthentication-algorithmsha1espencryption-algorithmaes128#ipsecp

7、olicymap10isakmpsecurityacl3000ike-peerpeer1proposal1#local-userR4passwordsimpleekestinservice-typeppp#interfaceEthernet0/0/0portlink-moderouteipaddress192.168.2.1255.255.255.0#interfaceSerial0/0/0link-protocolppppppmpMp-group1#interfaceSerial0/0/1link-protocolppppppmpMp-group

8、1#interfaceMp-group1ipaddress10.1.34.4255.255.255.0ipsecpolic