cisco-----vpn 各种连接方式详解配置-4

《cisco-----vpn 各种连接方式详解配置-4》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、cisco-----vpn各种连接方式详解配置-42008-08-0517:0212.9.创建主机到路由器的VPN提问从远端主机到路由器的VPN连接回答只有路由器的配置，没有主机上软件的配置Router1#configureterminalEnterconfigurationcommands,oneperline.EndwithCNTL/Z.Router1(config)#aaanew-modelRouter1(config)#aaaauthenticationlogindefaultgrouptacacs+Router1(config)#aaaauthentication

2、enabledefaultgrouptacacs+Router1(config)#tacacs-serverhost172.25.1.1Router1(config)#tacacs-serverkeyNEOSHIRouter1(config)#cryptoisakmppolicy10Router1(config-isakmp)#encryption3desRouter1(config-isakmp)#authenticationpre-shareRouter1(config-isakmp)#group2Router1(config-isakmp)#exitRouter1(c

3、onfig)#cryptoipsectransform-setVPN-TRANSFORMSah-sha-hmacesp-sha-hmacesp-3desRouter1(cfg-crypto-trans)#modetunnelRouter1(cfg-crypto-trans)#exitRouter1(config)#cryptodynamic-mapVPN-USER-MAP50Router1(config-crypto-map)#descriptionAdynamiccryptomapforVPNusersRouter1(config-crypto-map)#matchadd

4、ress115RouteToTheFuture211Router1(config-crypto-map)#settransform-setVPN-TRANSFORMSRouter1(config-crypto-map)#exitRouter1(config)#access-list115denyany224.0.0.035.255.255.255Router1(config)#access-list115denyany172.25.1.2550.0.0.0Router1(config)#access-list115permitanyanyRouter1(config)#cr

5、yptomapCRYPTOMAP10ipsec-isakmpdynamicVPN-USER-MAPRouter1(config)#interfaceFastEthernet0/1Router1(config-if)#ipaddress172.25.1.5255.255.255.0Router1(config-if)#cryptomapCRYPTOMAPRouter1(config-if)#exitRouter1(config)#exitRouter1#注释由于主机可能来自任意地址所以这里使用过了dynamiccryptomaps12.10.创建SSLVPN提问使用路由器的W

6、ebVPN服务来创建SSLVPN回答Core#configureterminalEnterconfigurationcommands,oneperline.EndwithCNTL/Z.Core(config)#hostnameCoreCore(config)#ipdomain-nameoreilly.comCore(config)#aaanew-modelRouteToTheFuture212Core(config)#aaaauthenticationloginlocal_authlocalCore(config)#usernameijbrownsecretianspass

7、wordCore(config)#usernamekdooleysecretkevinspasswordCore(config)#cryptopkitrustpointWEBVPNCore(ca-trustpoint)#enrollmentselfsignedCore(ca-trustpoint)#rsakeypairWEBVPN1024Core(ca-trustpoint)#subject-nameCN=WEBVPNOU=cookbooksO=oreillyCore(ca-trustpoint)#exitCore