我这里有一现成配置, 静态VPN, site-to-site 及 client-to-site互相访口都没问题
: q/ f" N2 a7 Z O即:都能访问中心端的10.28.0.0网段; e! C# I% k; d. H, ]
' K1 \$ U" Q0 i& |% S
aaa new-model
8 j% d- y r# g: w! |& |!
1 ~) S) F, g( K7 u5 S* p9 {" {!& J! {+ J* W; d
aaa authentication login default local
! T! L+ P; W* f4 laaa authorization network vpn_group local * d6 ~6 t% S" D% D6 U' Y6 s% X/ o
aaa session-id common
' @7 a+ S5 }4 W5 O( y1 _ip subnet-zero J3 J/ B# ?# Q
!
0 E( `* i5 {; q5 `- q+ W!/ Y8 [& I1 _& h0 A6 R
crypto isakmp policy 1
6 {; `3 g: _5 H encr 3des
, k/ m. x# @( ]& A. v; I authentication pre-share* L5 `# Q Q5 X( F1 J0 G3 v2 B8 T
group 2- J- K/ h6 q: A( @2 C, m% H
!; m* g9 g6 Z3 g3 ~ v) G
crypto isakmp policy 2
; O. M1 H( d' ] hash md5
2 A E) Z, P* G authentication pre-share
: M! D% B/ l4 E0 H9 X!/ M6 [2 Z6 d4 A6 m- Q1 b% f
crypto isakmp policy 3# c/ n! |( I: b; Q0 b
authentication pre-share
7 ^1 ]4 S ]# V7 o8 q- r! P7 S$ Bcrypto isakmp key 123456 address 0.0.0.0 0.0.0.0
% W" ?2 t1 T0 w! G3 r4 ^& S6 w!
( p3 g! s3 \' Jcrypto isakmp client configuration group vpn_group+ V h; q& P# d" c- M6 P) ]
key abc123
% {8 f2 j# x8 ~, \ pool vpn_pool
6 u7 q$ F4 ^9 S8 f% i!
0 i, c" @: C6 d. F! T- d5 ?) ?crypto ipsec security-association lifetime seconds 86400
- E" V! }" E0 _!
) S. o2 j8 j2 w& {3 zcrypto ipsec transform-set basic-des esp-des esp-md5-hmac ' I6 L o1 P. v- c6 V
crypto ipsec transform-set basic2-des esp-des esp-sha-hmac
, W- `( [7 g; |& }3 G2 X" J* mcrypto ipsec transform-set advan-3des esp-3des esp-md5-hmac ; M3 @: x2 e' J1 b
crypto ipsec transform-set advan2-3des esp-3des esp-sha-hmac
, z+ P, ?6 H7 {; K7 j7 V!
; {! p3 y) G- }& fcrypto dynamic-map adsl 14 ? c0 m0 D2 C" v2 k$ w Q% c7 }& ^+ B! q, Q
set transform-set basic-des
: @0 ~6 ~( X& p6 f match address 111
$ H3 e6 A& |5 Wcrypto dynamic-map adsl 2
* v7 k* G' I% j( o* U0 h set transform-set basic-des
7 N/ T* C7 ^/ | `6 a% m4 @" ] match address 1121 h/ B9 K* ^- C* Y
crypto dynamic-map adsl 33 B$ A! v; b- A5 g2 g! N
set transform-set basic-des ) M; h ]6 I0 t( a! T9 ~
match address 113
7 r7 G, N# U# D6 [7 D! N7 |' T...
- M& |- r# w: k! j) Q; q% s; x# }!# y, r- t+ \5 w( `" @/ w7 K
crypto dynamic-map client 1
0 _/ Y0 M/ b5 D3 @* X set transform-set advan-3des
% a {) W# i- ^) v" E, P' k- I4 Y! b! E* D0 t. U4 f' }7 m( u4 T& C
!0 C% c# S* H- o: k2 j) S0 L
crypto map vpn isakmp authorization list vpn_group
) N3 u3 X! L& E+ Ccrypto map vpn client configuration address respond. W- P5 x3 U) G$ Z5 Q
crypto map vpn 1 ipsec-isakmp 0 _# z M ?0 M# n7 w
set peer 195.6.174.202
" K( o( W" p0 `! s: J: [ set transform-set basic-des & j/ o( d' ^# @
match address 1100 J4 D" G: W) Z& f* D5 v
crypto map vpn 98 ipsec-isakmp dynamic adsl / k& W0 {& J6 |, B4 U: ~
crypto map vpn 99 ipsec-isakmp dynamic client
2 T# ?) D+ E) n: H9 g!6 ^3 e6 J/ {' v! y2 q
....
7 y4 I& j' [8 I/ q2 F4 Sinterface FastEthernet0/1
0 S5 m: n( O7 z F% d6 U$ F description Internet Connection
9 r: _% e0 k8 t: [3 \0 F* B9 [* ~ ip address 222.202.209.27 255.255.255.05 v9 ]& |8 \1 ~# S. p: o9 j$ U* s7 W
ip nat outside9 G% R9 @. y7 c9 ~; w8 v6 A+ \% u
duplex auto( L, V3 d( p( V# {; |
speed auto
; i4 L) G" j! V& [ no cdp enable
' z9 W4 a: n4 s crypto map vpn8 M3 W( {- R5 W0 X
!
* R) H8 N- W! s/ qip local pool vpn_pool 192.201.0.1 192.201.0.30
" D! M7 P9 |& i _+ Mno ip http server
8 [5 ?: ^( ?! bno ip http secure-server" i" w. f4 n- h, I
ip classless, @6 y9 p+ V/ n# [; f
ip route 0.0.0.0 0.0.0.0 222.202.209.254$ E, S7 d9 @9 h& T4 N$ m
!, E$ n1 O8 z- B8 E& ?* p* c
!9 T9 f6 Z! y7 p6 t! c3 o k7 d: @
access-list 110 permit ip 10.28.0.0 0.0.0.255 10.203.50.32 0.0.0.15
" I% Q5 t. f6 e- V: @+ ?/ L. W. W* Iaccess-list 110 permit ip 10.28.0.0 0.0.0.255 10.204.2.0 0.0.0.255- k/ O9 Z! b! I5 H
access-list 110 permit ip 10.28.0.0 0.0.0.255 10.229.0.0 0.0.255.255' B0 n) [. }* W3 m H. n
access-list 110 permit ip 10.28.0.0 0.0.0.255 10.251.0.0 0.0.255.255$ i2 N1 K3 c; s& y9 i
access-list 111 permit ip 10.28.0.0 0.0.0.255 192.201.1.0 0.0.0.255
3 O% o/ ]+ L7 Z7 Y8 Aaccess-list 112 permit ip 10.28.0.0 0.0.0.255 192.201.2.0 0.0.0.255
' `9 U6 A+ T1 c& A) Iaccess-list 113 permit ip 10.28.0.0 0.0.0.255 192.201.3.0 0.0.0.255
( `& m) J: L7 x% N/ U.... |
所有IT类厂商认证考试题库下载
【新盟教育】2023最新华为HCIA全套视频合集【网工基础全覆盖】---国sir公开课合集
【新盟教育】网工小白必看的！2023最新版华为认证HCIA Datacom零基础全套实战课
原创_超融合自动化运维工具cvTools
重量级~~30多套JAVA就业班全套 视频教程（请尽快下载，链接失效后不补）
链接已失效【超过几百G】EVE 国内和国外镜像 全有了 百度群分享
某linux大佬，积累多年的电子书(约300本)
乾颐堂现任明教教主Python完整版
乾颐堂 教主技术进化论 2018-2019年 最新31-50期合集视频（各种最新技术杂谈视频）
Python学习视频 0起点视频 入门到项目实战篇 Python3.5.2视频教程 共847集 能学102天
约21套Python视频合集 核心基础视频教程（共310G,已压缩）
最新20180811录制 IT爱好者-清风羽毛 - 网络安全IPSec VPN实验指南视频教程
最新20180807录制EVE开机自启动虚拟路由器并桥接物理网卡充当思科路由器
