【精品】98实验指导(NAT-T)-v1

《【精品】98实验指导(NAT-T)-v1》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、实验指导(NAT-TransparentVPN)一、实验任务任务：两地已经度连上了internet,现要把两个的网络通过Internet进行互联。数据在Internet传输时要保证安全性，使用NAT-TSiteToSiteVPN。R1上有NAT存在，R3的peer应该指向Rl。默认时，R4是支持NAT-T的，因此会把ESP的数据包注：路由器只支持：nat-toverudp4500,不支持udpover其他端口和nat-tovertcp。R4-Local:TP172.16.14.423.23.23.3UDP:4500ESP10.4.4.41

2、0.5.5.5DATARl-NAT:IP12.12.12.123.23.23.3UDP:4500ESP10.4.4.410.5.5.5DATAR3-Peer:TP23.23.23.312.12.12.1UDP:4500ESP10.5.5.510.4.4.4DATA二.实验步骤1、Rl、R2、R3上如图配置IP地址，打开接口，配置路由:RouterA(R1):hostnameR1-NATintsO/Onoshutdownclockrate128000ipadd12.12.12.1255.255.255.0interfaceEthernet1

3、/0noshipaddress172.16.14.1255.255.255.0routereig90noauto-summarynet172.16.14.00.0.0.255iproute0.0.0.00.0.0.0s0/0Internet(R2):ints0/0noshutdownclockrate128000ipadd12.12.12.2255.255.255.0ints0/lnoshutdownclockrate128000ipadd23.23.23.2255.255.255.0RouterB(R3):ints0/lnoshutdo

4、wnclockrate128000ipadd23.23.23.3255.255.255.0ints0/0noshutdownclockrate128000ipadd172.16.35.3255.255.255.0iproute0.0.0.00.0.0.0s0/lR4:interfaceLoopbackOipaddress10.4.4.4255.255.255.0interfaceEthernetl/0noshipaddress172.16.14.4255.255.255.0R5:interfaceLoopbackOipaddress10.

5、5.5.5255.255.255.0ints0/0noshutdownclockrate128000ipadd172.16.35.5255.255.255-02、配置defaultrouteR1int10192ipaddress192.16&1.1255.255.255.0routereig90net172.16.14.00.0.0.255net192.168.1.0ipdefault-network192.168.1.0R4routereig90noauto-summarynet10.4.4.00.0.0.255net172.16.14

6、.00.0.0.255R3routeros89net172.16.35.00.0.0.255are0R5routeros89net172.16.35.00.0.0.255are0net10.5.5.00.0.0.255area0R4#shiprouteD*192.168.1.0/24[90/409600]via172.16.14.1,00:00:26,Ethernetl/0R5#shiproute0*E20.0.0.0/0[110/1]via172.16.35.3,00:04:42,Serial0/03、配置Rl-NATinterface

7、Ethernet1/0ipnatinsideinterfaceSerial0/0ipnatoutsideipnatinsidesourcelist1interfaceSerial0/0overload■access-list1permit172.16.14.00.0.0.255R4#ping23.23.23.3sourceloOR4#ping23-23.23.34、配置R4：cryptoisakmppolicy10encraesauthenticationpre-sharegroup2cryptoisakmpkey0ciscoaddres

8、s23.23.23.3cryptoipsectransform-setTR-SETesp-aesesp-sha-hmaccryptomapSTATIC-MAP10ipsec-isakmpset