DOCX

GRE over vpn

By Daniel Butler,2014-11-23 10:16
17 views 0
GRE over vpn

    要求:利用隧道技术加密R1R31.1.1.03.3.3.0之间的流量。

    配置;

    R1的配置;

    enable

    config t

    hostname R1

    int lo 0

    ip add 1.1.1.1 255.255.255.0 no sh

    int fa0/0

    ip add 12.12.12.1 255.255.255.0 no sh

    exit

int tunnel 10

    ip add 13.13.13.1 255.255.255.0

    tunnel source 12.12.12.1

    tunnel destination 23.23.23.3

    exit

    ip route 23.23.23.0 255.255.255.0 12.12.12.2 router eigrp 90

    no au

    net 1.1.1.0

    net 13.13.13.0

    exit

    crypto isakmp policy 10

    authentication pre-share

    hash md5

    group 2

    encryption 3des

    exit

    crypto isakmp key 0 cisco address 23.23.23.3 crypto ipsec transform-set huawei esp-3des esp-md5-hmac

    exit

    ip access-list ex vpn

    permit gre host 12.12.12.1 host 23.23.23.3

exit

    crypto map luzhao 10 ipsec-isakmp

    set peer 23.23.23.3 set tra huawei

    mat add vpn

    exit

    in fa0/0

    crypto map luzhao exit

    end

R2的配置;

    enable

    config t

    hostname R2

    int fa0/0

    ip add 12.12.12.2 255.255.255.0

    no sh

    int fa0/1

    ip add 23.23.23.2 255.255.255.0

    no sh

exit

    R3的配置;

    enable

    config t

    hostname R3

    int lo 0

    ip add 3.3.3.1 255.255.255.0 no sh

    int fa0/1

    ip add 23.23.23.3 255.255.255.0 no sh

    int tunnel 10

    ip add 13.13.13.3 255.255.255.0 tunnel source 23.23.23.3 tunnel destination 12.12.12.1 exit

    ip route 12.12.12.0 255.255.255.0 23.23.23.2

    router eigrp 90

    no au

    net 3.3.3.0

    net 13.13.13.0

    exit

crypto isakmp policy 10

    authentication pre-share

    hash md5

    group 2

    encryption 3des

    exit

    crypto isakmp key 0 cisco address 12.12.12.1

    crypto ipsec transform-set huawei esp-3des esp-md5-hmac

    exit

    ip access-list ex vpn

    permit gre host 23.23.23.3 host 12.12.12.1

    exit

    crypto map luzhao 10 ipsec-isakmp set peer 12.12.12.1

    set tra huawei

    mat add vpn

    exit

    in fa0/1

    crypto map luzhao

    exit

    end

Report this document

For any questions or suggestions please email
cust-service@docsford.com