ciscio 路由器aggressive mode 和asa的配置

《ciscio 路由器aggressive mode 和asa的配置》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、R3内网10.1.1.0/24R4内网192.168.1.200R2充当公网R1-ASA1通讯正常以下是配置:R1#shrunBuildingconfiguration...Currentconfiguration:1236bytes!version12.4servicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption!hostnameR1!boot-start-markerboot-end-marker!!noaaanew-modelipc

2、ef!!!!noipdomainlookup!multilinkbundle-nameauthenticated!!!!!!!!!!!!!!!!!cryptoisakmppolicy1hashmd5authenticationpre-sharegroup2cryptoisakmpkeycisco123hostnameZGPTcryptoisakmpidentityhostnamecryptoisakmpkeepalive10periodic!cryptoisakmppeeraddress23.1.1.3setaggressive-modepasswordcisco1

3、23!!cryptoipsectransform-setccieesp-desesp-md5-hmac!cryptomapcisco1ipsec-isakmpsetpeer23.1.1.3settransform-setcciesetpfsgroup2matchaddressA!!!!!interfaceFastEthernet0/0ipaddress10.1.1.1255.255.255.0duplexautospeedauto!interfaceFastEthernet0/1ipaddress12.1.1.1255.255.255.0duplexautospee

4、dautocryptomapcisco!iproute0.0.0.00.0.0.012.1.1.2noiphttpservernoiphttpsecure-server!!!ipaccess-listextendedApermitip10.1.1.00.0.0.255host192.168.1.200!loggingalarminformational!!!!!!control-plane!!!!!!gatekeepershutdown!!linecon0stopbits1lineaux0linevty04!!endR1#shcryisasaIPv4CryptoIS

5、AKMPSAdstsrcstateconn-idslotstatus12.1.1.123.1.1.3QM_IDLE10020ACTIVEIPv6CryptoISAKMPSAR1#R1#R2#shrunBuildingconfiguration...Currentconfiguration:661bytes!version12.4servicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption!hostnameR2!boot-start-mark

6、erboot-end-marker!!noaaanew-modelipcef!!!!!multilinkbundle-nameauthenticated!!!!!!!!!!!!!!!!!!!!!interfaceFastEthernet0/0ipaddress12.1.1.2255.255.255.0duplexautospeedauto!interfaceFastEthernet0/1ipaddress23.1.1.2255.255.255.0duplexautospeedauto!noiphttpservernoiphttpsecure-server!!!log

7、gingalarminformational!!!!!!control-plane!!!!!!gatekeepershutdown!!linecon0stopbits1lineaux0linevty04!!endR3#shrunBuildingconfiguration...Currentconfiguration:685bytes!version12.4servicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption!hostnameR3