我这里有一现成配置, 静态VPN, site-to-site 及 client-to-site互相访口都没问题
3 Z5 Q3 o) _. z2 D即:都能访问中心端的10.28.0.0网段
3 j( t/ J. E/ E m+ s) K2 p9 j \3 y0 K. P7 h4 _+ J$ }/ [
aaa new-model
' e1 P/ t% t: [1 @. T!% H3 l m! I" }- W( D. J9 w0 a
!
6 ~9 F# a+ X1 u% k2 Eaaa authentication login default local* H8 D6 r0 b. d, c/ @
aaa authorization network vpn_group local
% C) ?! c' J' P' F) _8 Oaaa session-id common/ I- e; ?+ f; d0 B [
ip subnet-zero
% [5 _/ U7 j. K6 `! J9 K1 i7 \" n% r# k0 C5 B7 K
!4 B8 w& W; c- V, l
crypto isakmp policy 1
/ }" o' t' p3 _6 T. w encr 3des
( b% ~6 p W4 I7 R5 [0 i" x1 ? authentication pre-share, _/ c4 A: b% [8 v
group 24 g: F4 | z; Y+ n/ L! V$ ]: D
!
W3 r2 K# ~! C$ N- `9 ^# Ucrypto isakmp policy 2
9 D! M P5 w7 O! X1 n hash md5. O. O/ Z4 I6 V
authentication pre-share
! W; C, i! O) ~!
0 n% I3 }+ `& b* Dcrypto isakmp policy 3
3 v7 n$ ~5 ]! e authentication pre-share
2 ^$ g* b7 z! w D" scrypto isakmp key 123456 address 0.0.0.0 0.0.0.0
4 U1 V% A4 k, d, l) _!5 F& H* p6 C/ u& f( L
crypto isakmp client configuration group vpn_group6 q: z9 j9 ]3 n. r. Z
key abc123
, X; k& v. o! _& e0 ~( I) ~) { pool vpn_pool$ W, R1 Z9 ~% ^3 `
!$ m) L: U" @+ K( P( }7 |) g' a
crypto ipsec security-association lifetime seconds 86400
5 d# S6 m& i( \- {" v!$ R' y& d( r: C% B' D2 X% K7 t
crypto ipsec transform-set basic-des esp-des esp-md5-hmac 6 i6 Z3 b4 A2 R
crypto ipsec transform-set basic2-des esp-des esp-sha-hmac ) f) o0 n# j: E* o
crypto ipsec transform-set advan-3des esp-3des esp-md5-hmac
& t" r: m- e z5 l8 A; l. ~6 acrypto ipsec transform-set advan2-3des esp-3des esp-sha-hmac
6 H2 z5 J$ ^2 ]+ A. `6 z5 @0 t, l!; K) E; t0 [; T: r
crypto dynamic-map adsl 15 x1 @% G9 G$ A+ [! g! t
set transform-set basic-des
5 L3 ~+ } G9 u. S match address 111
+ i4 |" [0 B/ V0 j5 Icrypto dynamic-map adsl 2 h4 E; v6 b W# L$ O: |# u8 @) q
set transform-set basic-des ; m& f2 U) N! @. G: Y
match address 112
) B, X% |0 ` t+ Pcrypto dynamic-map adsl 3
& a. p. w- y, h' _ set transform-set basic-des 8 c1 a: A: ]- m7 d
match address 113
" O' S9 |( ]$ f/ n: N- w% }: L% K..., w8 V# W4 l' ?! y
!
) \2 y/ e2 ?: S1 W: i/ M- T7 ycrypto dynamic-map client 1
4 h1 ~* H3 Q# Q8 O. Q; ^ set transform-set advan-3des
1 r: c; U$ R/ f7 n6 m4 Q!
9 R$ p$ f3 T) G2 W. L6 k!
M# R* y A8 B0 qcrypto map vpn isakmp authorization list vpn_group
4 V$ a; I9 j& E- D% m) z7 acrypto map vpn client configuration address respond! w2 t2 ?% T0 V0 h+ T% p2 l
crypto map vpn 1 ipsec-isakmp
9 `" d8 A' d8 Y set peer 195.6.174.202
/ u9 z3 y; R& ~! A" { set transform-set basic-des
+ J) q6 K* {& u$ T! E/ ?: f" Z; o( G match address 110' N* E" A) k/ N$ n( r
crypto map vpn 98 ipsec-isakmp dynamic adsl & l+ d L, M8 n2 R
crypto map vpn 99 ipsec-isakmp dynamic client
1 z" \1 H# b3 x1 s, Z* Y!( f# ^1 t- E% @+ a( w, o3 z
...." ~/ K9 E7 U X- ^' h! s+ D
interface FastEthernet0/1
' O4 `- o5 w7 R6 A4 s description Internet Connection4 H9 m0 s* a3 n
ip address 222.202.209.27 255.255.255.0 M4 N ^/ n% S8 D; ?7 w/ z( A
ip nat outside H j& c1 y2 L- M: |/ z
duplex auto6 o. Q/ W4 x: W1 r: ]3 e
speed auto
6 X' c. [* }/ u2 q no cdp enable, v: Q( b$ f, @7 B, g
crypto map vpn. }! U7 ?2 J& f' L" e5 i- H8 `3 _
!% N2 g! {- H% m0 y$ ^
ip local pool vpn_pool 192.201.0.1 192.201.0.308 u* L. m0 ?; p' t) q5 a
no ip http server
9 [/ R& P: E: G: X. w! pno ip http secure-server5 ?) _5 Y# y3 f6 O
ip classless9 | r: o5 ?% E; \, f: ~
ip route 0.0.0.0 0.0.0.0 222.202.209.2543 G0 O# z! X) F% z" U! Q
!
2 V7 n1 L! g- G3 U) t2 D8 A!
' w( e# M* I Waccess-list 110 permit ip 10.28.0.0 0.0.0.255 10.203.50.32 0.0.0.15
. X8 y+ o0 _+ z! y: B6 ?# O- _$ raccess-list 110 permit ip 10.28.0.0 0.0.0.255 10.204.2.0 0.0.0.255, o! @2 S) {' K7 t: C
access-list 110 permit ip 10.28.0.0 0.0.0.255 10.229.0.0 0.0.255.255
' u( i$ ?0 E# ?" x3 ]+ oaccess-list 110 permit ip 10.28.0.0 0.0.0.255 10.251.0.0 0.0.255.255
* C9 m) V) j8 H9 Y. `+ U* t: v$ Haccess-list 111 permit ip 10.28.0.0 0.0.0.255 192.201.1.0 0.0.0.2559 g1 f' B9 \/ S; p" N8 t3 G
access-list 112 permit ip 10.28.0.0 0.0.0.255 192.201.2.0 0.0.0.255( {5 X: W t# Q4 A/ ^* y* o* s
access-list 113 permit ip 10.28.0.0 0.0.0.255 192.201.3.0 0.0.0.2556 ]4 i: m6 Y0 C( q
.... |
所有IT类厂商认证考试题库下载
【新盟教育】2023最新华为HCIA全套视频合集【网工基础全覆盖】---国sir公开课合集
【新盟教育】网工小白必看的！2023最新版华为认证HCIA Datacom零基础全套实战课
原创_超融合自动化运维工具cvTools
重量级~~30多套JAVA就业班全套 视频教程（请尽快下载，链接失效后不补）
链接已失效【超过几百G】EVE 国内和国外镜像 全有了 百度群分享
某linux大佬，积累多年的电子书(约300本)
乾颐堂现任明教教主Python完整版
乾颐堂 教主技术进化论 2018-2019年 最新31-50期合集视频（各种最新技术杂谈视频）
Python学习视频 0起点视频 入门到项目实战篇 Python3.5.2视频教程 共847集 能学102天
约21套Python视频合集 核心基础视频教程（共310G,已压缩）
最新20180811录制 IT爱好者-清风羽毛 - 网络安全IPSec VPN实验指南视频教程
最新20180807录制EVE开机自启动虚拟路由器并桥接物理网卡充当思科路由器
