GNS3模拟Cisco+ipsec+vpn配置实例.doc

《GNS3模拟Cisco+ipsec+vpn配置实例.doc》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、GNS3模拟Cisco+ipsec+vpn配置实例GNS3实验拓扑图 R1配置说明：R1只需要按照图在接口上配置好ip地址。!version12.4!hostnameR1!interfaceFastEthernet0/0 ipaddress211.81.208.1255.255.255.0 duplexauto speedauto!interfaceFastEthernet0/1 ipaddress211.81.209.1255.255.255.0 duplexauto speedauto!endR2配置说明：R2在这里使用的是c3660-telco

2、-mz.124-15.T5.bin的IOS,再在slot1插槽上加上NM-16ESW模块模拟交换机；R3同R2模拟交换机。!version12.4!hostnameR2!interfaceFastEthernet0/0 ipaddress11.1.1.2255.255.255.0 duplexauto speedauto!interfaceFastEthernet1/10 switchportaccessvlan2!interfaceVlan1 noipaddress!interfaceVlan2 ipaddress192.168.2.1255.25

3、5.255.0!iproute0.0.0.00.0.0.011.1.1.1!endR3配置说明!version12.4!hostnameR3!interfaceFastEthernet0/0 ipaddress12.1.1.2255.255.255.0 duplexauto speedauto!interfaceFastEthernet1/10 switchportaccessvlan2!interfaceVlan1 noipaddress!interfaceVlan2 ipaddress172.16.2.1255.255.255.0!iproute

4、0.0.0.00.0.0.012.1.1.1!endASA1配置说明:Saved:ASAVersion8.0(2)!hostnameasa1enablepassword8Ry2YjIyt7RRXU24encryptednames!interfaceEthernet0/0 nameifoutside security-level0 ipaddress211.81.208.2255.255.255.0!interfaceEthernet0/5 nameifinside security-level100 ipaddress11.1.1.1255.255.

5、255.0!access-listicmpextendedpermiticmpanyanyaccess-listnonatextendedpermitip192.168.2.0255.255.255.0172.16.2.0255.255.255.0access-listvpnextendedpermitip192.168.2.0255.255.255.0172.16.2.0255.255.255.0global(outside)1interfacenat(inside)0access-listnonatnat(inside)10.0.0.00.0.0

6、.0access-groupicmpininterfaceoutsiderouteoutside0.0.0.00.0.0.0211.81.208.11routeinside192.168.2.0255.255.255.011.1.1.21cryptoipsectransform-setsetesp-desesp-md5-hmaccryptomapmap111matchaddressvpncryptomapmap111setpeer211.81.209.2cryptomapmap111settransform-setsetcryptomapmapint

7、erfaceoutsidecryptoisakmpenableoutsidecryptoisakmppolicy11 authenticationpre-share encryption3des hashsha group2 lifetime86400cryptoisakmppolicy65535 authenticationpre-share encryption3des hashsha group2 lifetime86400!tunnel-group211.81.209.2typeipsec-l2ltunnel-group211.81.209.

8、2ipsec-attributes pre-shared-key*:endASA2配置说明asa2#shru