路由器和路由器之间的VPN配置.docx

《路由器和路由器之间的VPN配置.docx》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、一、Pix-Pix　　二、路由器和路由器之间的VPN配置　　三、路由器-路由器以及VPNClient之间的VPN一、Pix-PixPIXCentralBuildingconfiguration...:Saved:PIXVersion6.3(3)interfaceethernet0autointerfaceethernet1autonameifethernet0outsidesecurity0nameifethernet1insidesecurity100enablepassword8Ry2YjIyt7RRXU24encryptedpasswd2KFQnb

2、NIdI.2KYOUencryptedhostnamepix-centralfixupprotocoldnsmaximum-length512fixupprotocolftp21fixupprotocolh323h2251720fixupprotocolh323ras1718-1719fixupprotocolhttp80fixupprotocolrsh514fixupprotocolrtsp554fixupprotocolsip5060fixupprotocolsipudp5060fixupprotocolskinny2000fixupprotocol

3、smtp25fixupprotocolsqlnet1521fixupprotocoltftp69names!---ThisistraffictoPIX2.access-list120permitip10.1.1.0255.255.255.010.2.2.0255.255.255.0!---ThisistraffictoPIX3.access-list130permitip10.1.1.0255.255.255.010.3.3.0255.255.255.0!---DonotdoNetworkAddressTranslation(NAT)ontraffict

4、ootherPIXes.access-list100permitip10.1.1.0255.255.255.010.2.2.0255.255.255.0access-list100permitip10.1.1.0255.255.255.010.3.3.0255.255.255.0pagerlines24loggingonmtuoutside1500mtuinside1500ipaddressoutside172.18.124.153255.255.255.0ipaddressinside10.1.1.1255.255.255.0ipauditinfoac

5、tionalarmipauditattackactionalarmpdmhistoryenablearptimeout14400!---DonotdoNATontraffictootherPIXes.nat(inside)0access-list100routeoutside0.0.0.00.0.0.0172.18.124.11timeoutxlate3:00:00timeoutconn1:00:00half-closed0:10:00udp0:02:00rpc0:10:00h2251:00:00timeouth3230:05:00mgcp0:05:00

6、sip0:30:00sip_media0:02:00timeoutuauth0:05:00absoluteaaa-serverTACACS+protocoltacacs+aaa-serverRADIUSprotocolradiusaaa-serverLOCALprotocollocalnosnmp-serverlocationnosnmp-servercontactsnmp-servercommunitypublicsnmp-serverenabletrapsfloodguardenablesysoptconnectionpermit-ipseccryp

7、toipsectransform-setmysetesp-desesp-md5-hmac!---ThisistraffictoPIX2.cryptomapnewmap20ipsec-isakmpcryptomapnewmap20matchaddress120cryptomapnewmap20setpeer172.18.124.154cryptomapnewmap20settransform-setmyset!---ThisistraffictoPIX3.cryptomapnewmap30ipsec-isakmpcryptomapnewmap30match

8、address130cryptomapnewmap30setpeer172.18