高可用性IPSEC-VPN-最佳方案.docx

《高可用性IPSEC-VPN-最佳方案.docx》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、一、实验拓扑二、基本配置Branch的基本配置：interfaceLoopback0ipaddress1.1.1.1255.255.255.0!interfaceTunnel0ipaddress13.1.1.1255.255.255.0tunnelsource12.1.1.1tunneldestination23.1.1.3!interfaceTunnel1ipaddress14.1.1.1255.255.255.0tunnelsource12.1.1.1tunneldestination24.

2、1.1.4!interfaceEthernet0/0ipaddress12.1.1.1255.255.255.0iproute0.0.0.00.0.0.012.1.1.2Internet的基本配置：interfaceEthernet0/0ipaddress12.1.1.2255.255.255.0half-duplex!interfaceEthernet0/1ipaddress23.1.1.2255.255.255.0half-duplex!interfaceEthernet0/2ipaddre

3、ss24.1.1.2255.255.255.0Primary的基本配置：interfaceTunnel0ipaddress13.1.1.3255.255.255.0tunnelsource23.1.1.3tunneldestination12.1.1.1!interfaceEthernet0/0ipaddress23.1.1.3255.255.255.0half-duplex!interfaceEthernet0/1ipaddress100.1.1.3255.255.255.0iproute0.

4、0.0.00.0.0.023.1.1.2Secondary的配置：interfaceTunnel1ipaddress14.1.1.4255.255.255.0tunnelsource24.1.1.4tunneldestination12.1.1.1!interfaceEthernet0/0ipaddress24.1.1.4255.255.255.0half-duplex!interfaceEthernet0/1ipaddress100.1.1.4255.255.255.0iproute0.0.0

5、.00.0.0.024.1.1.2Server的基本配置interfaceLoopback0ipaddress5.5.5.5255.255.255.0!interfaceEthernet0/0ipaddress100.1.1.5255.255.255.0half-duplex三、IPSEC配置Branch的IPSEC配置cryptoisakmppolicy10authenticationpre-sharecryptoisakmpkeyccieaddress23.1.1.3cryptoisakmp

6、keyccieaddress24.1.1.4!!cryptoipsectransform-settresp-desesp-md5-hmac!cryptoipsecprofileipsecsettransform-settrinterfaceTunnel0tunnelprotectionipsecprofileipsec!interfaceTunnel1tunnelprotectionipsecprofileipsecPrimary的IPSEC配置cryptoisakmppolicy10authe

7、nticationpre-sharecryptoisakmpkeyccieaddress12.1.1.1!!cryptoipsectransform-settresp-desesp-md5-hmac!cryptoipsecprofileipsecsettransform-settr!interfaceTunnel0tunnelprotectionipsecprofileipsecSecondary的IPSEC配置cryptoisakmppolicy10authenticationpre-shar

8、ecryptoisakmpkeyccieaddress12.1.1.1!!cryptoipsectransform-settresp-desesp-md5-hmac!cryptoipsecprofileipsecsettransform-settr!interfaceTunnel1tunnelprotectionipsecprofileipsec四、EIGRP的配置Branch：routereigrp100network1.1.1.00.0.0.255network13.1.1.00.0.0.2