神州数码路由器ipsecvpn实验

《神州数码路由器ipsecvpn实验》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、神州数码路由器IPSecVPN实训1.实训拓扑图2.设备配置R1#shrunBuildingconfiguration...Currentconfiguration:!!version1.3.3Hservicetimestampslogdateservicetimestampsdebugdatenoservicepassword-encryption!hostnameR1!gbscgroupdefault!!cryptoisakmpkey12345610.1.1.2255.255.255.255!!

2、cryptoisakmppolicy1encryption3desgroup2hashmd5!cryptoipsectransform-setp2transform-typeah-md5-hmacesp-3des!cryptomapR21ipsec-isakmpsetpeer10.1.1.2settransform-setp2matchaddressvpn!!interfaceLoopback1ipaddress192.168.1.1255.255.255.0noipdirected-broadca

3、st!interfaceFastEthernet0/0noipaddressnoipdirected-broadcast!interfaceGigaEthernet0/3ipaddress10.1.1.1255.255.255.252noipdirected-broadcastcryptomapR2!interfaceGigaEthernet0/4noipaddressnoipdirected-broadcast!interfaceGigaEthernet0/5noipaddressnoipdire

4、cted-broadcast!interfaceGigaEthernet0/6noipaddressnoipdirected-broadcast!interfaceSerial0/1noipaddressnoipdirected-broadcast!interfaceSerial0/2noipaddressnoipdirected-broadcast!interfaceAsync0/0noipaddressnoipdirected-broadcast!!iproute192.168.2.0255.2

5、55.255.010.1.1.2!!!ipaccess-listextendedvpnpermitip192.168.1.0255.255.255.0192.168.2.0255.255.255.0!!!R1#R2#shrunBuildingconfiguration...Currentconfiguration:!!version1.3.3Hservicetimestampslogdateservicetimestampsdebugdatenoservicepassword-encryption!

6、hostnameR2!!gbscgroupdefault!!cryptoisakmpkey12345610.1.1.1255.255.255.255!!cryptoisakmppolicy1encryption3desgroup2hashmd5!cryptoipsectransform-setp2transform-typeah-md5-hmacesp-3des!cryptomapR11ipsec-isakmpsetpeer10.1.1.1settransform-setp2matchaddress

7、vpn!!interfaceLoopback1ipaddress192.168.2.1255.255.255.0noipdirected-broadcast!interfaceFastEthernet0/0noipaddressnoipdirected-broadcast!interfaceGigaEthernet0/3ipaddress10.1.1.2255.255.255.252noipdirected-broadcastcryptomapR1!interfaceGigaEthernet0/4n

8、oipaddressnoipdirected-broadcast!interfaceGigaEthernet0/5noipaddressnoipdirected-broadcast!interfaceGigaEthernet0/6noipaddressnoipdirected-broadcast!interfaceSerial0/1noipaddressnoipdirected-broadcast!interfaceSerial0/2noipaddressnoipdi