南京CCNA培训IPSECVPN的配置实例

《南京CCNA培训IPSECVPN的配置实例》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、南京CCNA培训IPSECVPN的配置实例一、实验拓扑：wKiomlOIIAGSmxnoAAGOrORIORQ963.jpg二、实验要求：保证两个站点的路由没问题。在站点A与站点B间配置VPN,保障企业的网络通过互联网连接起来。三、实验的配置：R1的全部配置：rl#showrunning-configBuildingconfiguration…Currentconfiguration:597bytesiversion12.4noservicetimestampslogdatetimemsecnoservicetimestampsdebugdat

2、etimemsecnoservicepassword-encryptionhostnamerlspanning-treemodepvstinterfaceFastEthernetO/Oipaddress192.168.2.3255.255.255.0duplexautospeedautoiinterfaceFastEthernetO/1ipaddress192.168.0.1255.255.255.0duplexautospeedautoi■interfaceVlanlnoipaddressshutdowniipclasslessiproute

3、192.168.1.0255.255.255.0192.168.2.1iproute0.0.0.00.0.0.0192.168.2.1linecon0ilineaux0linevty04loginendsiteA的全部配置:siteA#showrunning・configBuildingconfjguration…Currentconfiguration:1184bytesiversion12.4noservicetimestampslogdatetimemsecnoservicetimestampsdebugdatetimemsecnoser

4、vicepassword-encryptionhostnamesiteAcryptoisakmppolicy10encr3deshashmd5authenticationpre-sharegroup2i■cryptoisakmpkeyciscoaddress61.128.1.1iI■cryptoipsectransform-setciscoesp-3desesp・md5・hmaci■cryptomapmap10ipsec-isakmpsetpeer61.128.1.1settransform-setciscomatchaddressvpnspa

5、nning-treemodepvstinterfaceFastEthernetO/Oipaddress192.168.2.1255.255.255.0duplexautospeedautoiinterfaceFastEthernetO/1noipaddressduplexautospeedautoshutdowniinterfaceSerialO/0/0ipaddress202.100.1.1255.255.255.0cryptomapmapiinterfaceSerialO/O/1noipaddressshutdowninterfaceVla

6、nlnoipaddressshutdowniipclasslessiproute0.0.0.00.0.0.0202.100.1.10iproute192.168.0.0255.255.255.0192.168.2.3iproute192.168.1.0255.255.255.0202.100.1.10I■Iipaccess-listextendedvpnpermitip192.168.0.00.0.0.255192.168.1.00.0.0.255permitip192.168.2.00.0.0.255192.168.1.00.0.0.255l

7、inecon0lineaux0linevty04loginendInternet的全部配置:lnternet#showrunning-configBuildingconfiguration…Currentconfiguration:708bytesi■version15.1noservicetimestampslogdatetimemsecnoservicetimestampsdebugdatetimemsecnoservicepassword-encryptionhostnameInternetlicenseudipidCISCO2901/K

8、9snFTX15245R08spanning-treemodepvstinterfaceGigabitEthernetO/3noipaddressdu