
crypto isakmp policy 10
% i2 O: U. `4 P3 _$ tencr 3des# v9 d% V1 I; o2 o7 t+ Z! Z1 S) e8 F
authentication pre-share
8 p& w: _8 J3 W! J5 C8 Y+ zgroup 28 c% B( Y' `, t+ H# T7 \3 o' E
crypto isakmp key cisco address 10.1.12.2 255.255.255.01 ?8 j v2 |* S, V5 ?# v
!; W+ g( p0 |% d% I/ W9 X5 {
!
+ a% k4 ^& l; l$ y& u; l& w- m. Xcrypto ipsec transform-set vpn esp-3des esp-sha-hmac
; \7 `( T6 @" W4 U dmode transport
. O" w+ a3 ?9 \& L5 B# H!0 @' |6 C3 h7 N' d
crypto map vpntest 1 ipsec-isakmp - L( C' r! a6 w/ T
set peer 10.1.12.2# J& C6 Z N& ]' P. X9 k
set transform-set vpn % _0 K; h8 `' s! w1 r' Y: x: e2 F4 [
match address 1006 n/ j' u" W1 Q, k) R# t6 a" M# f
!
6 L2 t* a3 s) Q4 q. A!
9 c6 N) V H4 w: z( w1 F; g! p1 Y. m- l!7 L' l. Q, h& W. b/ Q& k4 c
!
+ C2 y# v8 D& J+ z; e! D; Dinterface Loopback00 ^/ S7 Y) ]. a: M2 ?6 l. d0 v
ip address 1.1.1.1 255.255.255.0! ^( j B# z5 q& H: j J; w
!
+ M U. h2 \# binterface Ethernet0/0
; ^8 n3 k- _& T& i- Yip address 10.1.12.1 255.255.255.07 W$ q2 O$ D6 D" a
half-duplex
$ h% N! ^1 A7 `1 Y. |) b" W8 ecrypto map vpntest
$ q" H& ~& I3 ?, [. V# G5 W& ^% c2 T& ^4 ~9 b
access-list 100 permit ip host 1.1.1.1 host 2.2.2.2
* w4 ]4 f4 L& j7 z* q8 {4 A1 @. v/ \. @2 e+ ~9 }5 w5 ]
R2的配置大部分相同,以下几条不同:
+ E1 z8 K% B+ f" }2 n+ y5 Faccess-list 100 permit ip host 2.2.2.2 host 1.1.1.1; V9 c& W1 Z1 Y' B
: }( W7 B3 T) ^- L# p; o. A
crypto isakmp key cisco address 10.1.12.1 255.255.255.0
" m' l8 K; R1 \0 s4 ?7 T* ~' l
# s1 O6 l" a4 {* h/ o7 H% c6 k* U9 Kcrypto map vpntest 1 ipsec-isakmp & F% l( P* j3 |. @- F8 W5 v
set peer 10.1.12.15 ]8 q+ ]; k3 L+ f% C) A. m. O
set transform-set vpn
. X8 X: g4 g" T* Nmatch address 100
- p" H/ B+ Z" X" G: J1 L
# U% U! j/ G! o( g这么做不能通信,请问是什么原因导致.
5 C8 a! t& l7 Z& Vsh cry isa sa
0 _- P! D( i! l5 N4 D. M发现什么都建立不起来 |
|