我这里有一现成配置, 静态VPN, site-to-site 及 client-to-site互相访口都没问题
; p0 \* M& W4 n" E6 B* |& ]即:都能访问中心端的10.28.0.0网段
* @3 _9 O& N' m: Q. r! K" D+ c' b3 h% |/ X- ]
aaa new-model
9 ]+ A8 |) ]3 ]' N0 J!
! o/ E9 {& g/ b) W!
+ i+ W1 B; k4 y: f# D) Oaaa authentication login default local
+ U- f- [ U( ~# saaa authorization network vpn_group local 0 Z% T5 W! p9 R9 I
aaa session-id common4 R/ a4 n9 L+ p3 L' t' X
ip subnet-zero2 ~9 E3 q# L" t) u8 m, X
!
5 j* ^# E4 Z) ]) a) `9 v!! _* E; v# Y7 \: c7 C& F
crypto isakmp policy 16 {3 y6 l! n1 Z* B: H5 T
encr 3des" I& p9 x; N5 T9 P! Y' X$ |
authentication pre-share0 O6 k4 D2 {# {! m4 c3 a
group 2
8 |' S. A, A9 }6 n/ w% T, e!
) E0 P9 F+ R6 E* b" qcrypto isakmp policy 2/ V) Y' p9 O2 Q D. z7 @
hash md5. t# D& N7 V' {& ^5 k
authentication pre-share( H- l8 M5 C' o% [( R
!
' t' `! [- p9 i& ~) h2 d% Qcrypto isakmp policy 3
7 b" u$ G* |- M6 a w: ~/ v% y* m- w authentication pre-share
2 f9 L+ O- n$ [; vcrypto isakmp key 123456 address 0.0.0.0 0.0.0.0
% E; ~( E) s/ [! u!
7 y6 r" s: d. gcrypto isakmp client configuration group vpn_group
1 B) X W0 N3 ~, G9 K7 A key abc123
# U1 t" |# I$ Y8 t: L; a/ a pool vpn_pool7 y! k9 s% C9 X O7 S F8 G
!
6 j- t! f6 m5 b: D* fcrypto ipsec security-association lifetime seconds 86400! p# R! w' F, {7 f/ P
!
6 X7 Q: W( `! P3 o* fcrypto ipsec transform-set basic-des esp-des esp-md5-hmac 4 \' K% ?6 N+ D7 H1 F+ M6 w
crypto ipsec transform-set basic2-des esp-des esp-sha-hmac
j, p. T) Y0 ?+ J' v. Acrypto ipsec transform-set advan-3des esp-3des esp-md5-hmac ; k$ k' o5 F; F. j6 |
crypto ipsec transform-set advan2-3des esp-3des esp-sha-hmac 8 j. x* w2 u$ D3 I* W' n
!
* [) w9 z: J. B* J. F' Ccrypto dynamic-map adsl 1
; i3 z. q, I; s/ |' k y set transform-set basic-des 0 k3 x: [( F5 V1 j
match address 111
5 W6 I7 ]1 M& I! Jcrypto dynamic-map adsl 2: W9 C; v9 {+ q( d3 F8 A) T: F! Q4 {
set transform-set basic-des
3 N, P( b# J- J d: H, A match address 112& p5 z1 _6 C0 }
crypto dynamic-map adsl 3( x) x. @) p+ R- N0 A% }5 a2 |
set transform-set basic-des + |3 e" \" K. v: ~7 K
match address 113
y' K4 c; p3 s+ o, F" Y+ U...( X' \6 M9 ]3 m! m/ E% ?+ C
!
( H$ ~+ d) d7 A: Ocrypto dynamic-map client 13 \, q5 y6 l; E5 p
set transform-set advan-3des ! D7 b# x% K% b4 c
!
1 z2 D( f* K3 B% ]: Q! ?; E+ ^!
0 h& P7 q. c4 p7 e8 ncrypto map vpn isakmp authorization list vpn_group
& q! p7 Y5 z& Y6 u2 K. {crypto map vpn client configuration address respond
( Q9 I4 \/ ~5 F$ w- v! d2 kcrypto map vpn 1 ipsec-isakmp
1 ? e+ B( h; i5 V1 ^0 n: x set peer 195.6.174.202. A1 g& m, m _2 h
set transform-set basic-des 5 A6 C7 h4 W8 L. Z/ P) x
match address 110+ H$ J3 j z) I
crypto map vpn 98 ipsec-isakmp dynamic adsl 1 V1 e! t& I1 h6 F* x& J
crypto map vpn 99 ipsec-isakmp dynamic client , I3 X) a" A' ^6 S
!
+ i0 D7 `" z/ m G, r. w" w....
# b9 h T& x( [( S8 b- yinterface FastEthernet0/1
! E$ \) k" q& [5 m description Internet Connection( S# O6 w) t' g, s- E; ~$ |
ip address 222.202.209.27 255.255.255.0
8 V/ C0 o. t8 h# P8 z" [! Z ip nat outside: }5 }: U/ e# g( r
duplex auto
1 b: Q' m3 p* g; f" Q4 F3 D: q3 i" a speed auto0 Y$ s7 j1 n, \3 G- l) Y/ `" q
no cdp enable
- y& _) ?- p( t! U+ g( Z' R8 H5 E6 c crypto map vpn& l3 s3 Q( r" r ~ |. b6 g
!
" u( a/ @2 u9 T5 m! Vip local pool vpn_pool 192.201.0.1 192.201.0.30
- e9 l; |8 [. k0 t0 u! J Zno ip http server. |9 t7 @9 B" a7 u1 f3 s
no ip http secure-server
/ d2 }0 P; N3 Kip classless
1 l& b& }6 G# q' D1 H oip route 0.0.0.0 0.0.0.0 222.202.209.2548 j3 F% r0 k1 ]4 s8 H/ B& T+ h) d6 s
!
% z- d1 T9 f: W, c) ? |!
4 t6 O% z: A Y6 J+ u& waccess-list 110 permit ip 10.28.0.0 0.0.0.255 10.203.50.32 0.0.0.15! L& l$ }" E% r$ ^' |8 ?8 e' i+ W
access-list 110 permit ip 10.28.0.0 0.0.0.255 10.204.2.0 0.0.0.255# P* A9 s- s( A% y( F! e( G
access-list 110 permit ip 10.28.0.0 0.0.0.255 10.229.0.0 0.0.255.255, l% ?1 _$ }+ f
access-list 110 permit ip 10.28.0.0 0.0.0.255 10.251.0.0 0.0.255.2557 _5 x, k- ]1 s9 n4 k# E" s
access-list 111 permit ip 10.28.0.0 0.0.0.255 192.201.1.0 0.0.0.255( k1 a* {) @# `
access-list 112 permit ip 10.28.0.0 0.0.0.255 192.201.2.0 0.0.0.255
# L* `3 b( N- \3 C# }9 Q2 z; a: paccess-list 113 permit ip 10.28.0.0 0.0.0.255 192.201.3.0 0.0.0.255
4 E. g0 Z8 ~! h3 l. [; f.... |
所有IT类厂商认证考试题库下载
【新盟教育】2023最新华为HCIA全套视频合集【网工基础全覆盖】---国sir公开课合集
【新盟教育】网工小白必看的！2023最新版华为认证HCIA Datacom零基础全套实战课
原创_超融合自动化运维工具cvTools
重量级~~30多套JAVA就业班全套 视频教程（请尽快下载，链接失效后不补）
链接已失效【超过几百G】EVE 国内和国外镜像 全有了 百度群分享
某linux大佬，积累多年的电子书(约300本)
乾颐堂现任明教教主Python完整版
乾颐堂 教主技术进化论 2018-2019年 最新31-50期合集视频（各种最新技术杂谈视频）
Python学习视频 0起点视频 入门到项目实战篇 Python3.5.2视频教程 共847集 能学102天
约21套Python视频合集 核心基础视频教程（共310G,已压缩）
最新20180811录制 IT爱好者-清风羽毛 - 网络安全IPSec VPN实验指南视频教程
最新20180807录制EVE开机自启动虚拟路由器并桥接物理网卡充当思科路由器
