我这里有一现成配置, 静态VPN, site-to-site 及 client-to-site互相访口都没问题3 i% N! V7 m* g% x# }; V0 I$ A
即:都能访问中心端的10.28.0.0网段0 `1 j% {6 I5 a4 E Z+ A
) P: D$ p& t& p" m( ?8 o+ h
aaa new-model1 r% _1 U3 z$ I
!" w( D" j8 S) X Y" B
!# }, r6 ]5 c0 |2 q! @
aaa authentication login default local
7 Y( O( S5 G" g) e2 `8 Kaaa authorization network vpn_group local
& }/ b" ], G' ~; }3 S9 @aaa session-id common
- H5 p2 p1 M" v1 X7 l. s$ T. pip subnet-zero1 W2 D" d* A% r
!
* Z; m7 B' \ N/ r!
1 U2 H' v# c* x6 X6 [9 z! @! ~/ @4 Gcrypto isakmp policy 1
! D: g; ?8 ~0 }) | encr 3des8 g( {9 [. ]1 q ]. p
authentication pre-share
" p5 @# |/ Q( w V1 D B) A group 2& j: z2 m# { g8 V4 p
!$ Z8 z+ c9 |6 m: s& L% ?; K+ X- T
crypto isakmp policy 2/ m5 ]( [7 w! v
hash md5! \% h; l- l, I+ Y
authentication pre-share
% @6 _' r# V& y* T!
; p. F! S6 Y+ tcrypto isakmp policy 3
& i! i' J3 F: s8 l; T authentication pre-share
3 T/ G3 g3 J8 ^2 rcrypto isakmp key 123456 address 0.0.0.0 0.0.0.07 N8 i" ~/ M1 O
!
\3 _6 N6 J7 O# L. Acrypto isakmp client configuration group vpn_group5 y4 ^! n7 Z9 ?, k$ m3 J$ I% a, [
key abc1236 d6 `" d9 h: z. m4 ?
pool vpn_pool( B _. r; G5 C* p' `. m
!
) z; G, N8 Z. s% l! K- @" Fcrypto ipsec security-association lifetime seconds 864006 e+ e' T1 P% p4 o' A
!
8 h1 C! l% c" N" Hcrypto ipsec transform-set basic-des esp-des esp-md5-hmac + E' h+ [2 K( j' G
crypto ipsec transform-set basic2-des esp-des esp-sha-hmac 9 I* M5 j9 i5 X) i) U& [5 r) S9 v
crypto ipsec transform-set advan-3des esp-3des esp-md5-hmac ' h0 T- y( {& |, y
crypto ipsec transform-set advan2-3des esp-3des esp-sha-hmac 5 v, M1 w7 \3 N1 ]
!, ~9 j( e$ k. n8 X1 x6 F) [) `
crypto dynamic-map adsl 1
1 B; ~% [5 B2 F$ J set transform-set basic-des 2 g; w- J3 ^0 t- R/ U
match address 111( Z+ |9 |* R- Q& J6 k
crypto dynamic-map adsl 2
4 n' j& | j6 K! r5 F" \0 }7 ` set transform-set basic-des
& S( J4 n' S; @9 F5 t0 W X match address 112+ R. l3 I1 c) U6 e2 l6 Z$ t0 y5 e" m
crypto dynamic-map adsl 3
4 C9 N8 T: @8 }8 e" F1 l' _ set transform-set basic-des : e' A5 F- K) @# R. m
match address 113* {( ~4 K" {6 K! ?0 G
...
+ q+ v! E; `6 f) \ O; b!
+ E, l+ q3 p1 g/ L: H2 ocrypto dynamic-map client 1
+ v! [! L& W' ~* Q: C( Y0 T set transform-set advan-3des l) l% v$ e" u+ a. K8 N
!% v- k1 N* F6 Z7 C
!& H& G2 \; R: D. P5 t* U: ^( \
crypto map vpn isakmp authorization list vpn_group
8 ?! K; X. \+ E+ m% c9 Gcrypto map vpn client configuration address respond( H3 M) M' X7 T2 o$ v
crypto map vpn 1 ipsec-isakmp
- O, M. I; `& t. }2 p, h, B$ z! S set peer 195.6.174.202
" T, Z/ K$ M6 N6 y* e+ L& N set transform-set basic-des 0 Y, s. v; q$ W; M v: ?" y" O
match address 110
# F2 \* m2 ?, O% kcrypto map vpn 98 ipsec-isakmp dynamic adsl " T! U! D( U& \. C2 _
crypto map vpn 99 ipsec-isakmp dynamic client
9 w7 p# F3 T( v0 ~) R0 s!# t7 z, n. A( m
...., ^0 Y: ~; I$ y( B a
interface FastEthernet0/1
8 E2 @/ t7 Y3 ~5 R, y. r( d description Internet Connection; J' c' C& W* e/ R" e% m9 E
ip address 222.202.209.27 255.255.255.0
. C% W6 Q3 R, I r, \1 l ip nat outside& ?2 A( B) x5 y& q1 G- v
duplex auto
5 B, _4 [# x9 y- a: j1 P speed auto8 K& g. _! ^0 J: w
no cdp enable
7 \! y/ x: N+ E8 P$ Y crypto map vpn3 D; J* I& F8 R
!
3 F+ p/ `$ S" a6 a/ Jip local pool vpn_pool 192.201.0.1 192.201.0.305 S" H4 V( H& S$ d
no ip http server
+ Q- R" i5 K2 ?$ G2 s4 Lno ip http secure-server& g1 E1 L3 g: p. u+ e: w+ v" C
ip classless
% t3 ?2 f3 F' B+ l+ bip route 0.0.0.0 0.0.0.0 222.202.209.254
) s D, A F( ?3 ?) H0 ?3 ~!
: W, }9 S; U. I3 |8 O!
9 C* G: }# Y& p- Paccess-list 110 permit ip 10.28.0.0 0.0.0.255 10.203.50.32 0.0.0.15. q$ ^% Q* R( Z2 @- y
access-list 110 permit ip 10.28.0.0 0.0.0.255 10.204.2.0 0.0.0.255% {+ G( V$ [' _- y! W
access-list 110 permit ip 10.28.0.0 0.0.0.255 10.229.0.0 0.0.255.255- Z7 v0 C* n9 A. q% b6 @5 {
access-list 110 permit ip 10.28.0.0 0.0.0.255 10.251.0.0 0.0.255.255
' I' W6 O. A* B5 {% @6 N M: qaccess-list 111 permit ip 10.28.0.0 0.0.0.255 192.201.1.0 0.0.0.255
" s, q/ L4 X( k$ Naccess-list 112 permit ip 10.28.0.0 0.0.0.255 192.201.2.0 0.0.0.255
- u1 Q* d. Z4 l7 N: Haccess-list 113 permit ip 10.28.0.0 0.0.0.255 192.201.3.0 0.0.0.255
- e8 A, w# s1 `! D# ^: K9 M.... |
所有IT类厂商认证考试题库下载
【新盟教育】2023最新华为HCIA全套视频合集【网工基础全覆盖】---国sir公开课合集
【新盟教育】网工小白必看的！2023最新版华为认证HCIA Datacom零基础全套实战课
原创_超融合自动化运维工具cvTools
重量级~~30多套JAVA就业班全套 视频教程（请尽快下载，链接失效后不补）
链接已失效【超过几百G】EVE 国内和国外镜像 全有了 百度群分享
某linux大佬，积累多年的电子书(约300本)
乾颐堂现任明教教主Python完整版
乾颐堂 教主技术进化论 2018-2019年 最新31-50期合集视频（各种最新技术杂谈视频）
Python学习视频 0起点视频 入门到项目实战篇 Python3.5.2视频教程 共847集 能学102天
约21套Python视频合集 核心基础视频教程（共310G,已压缩）
最新20180811录制 IT爱好者-清风羽毛 - 网络安全IPSec VPN实验指南视频教程
最新20180807录制EVE开机自启动虚拟路由器并桥接物理网卡充当思科路由器
