想在下面配置基础上 加一个VPN拨号, 现在的问题是 拨号成功 可以获取到10.0.1.1/24的IP地址 但是转发不出去. 求指教. f$ u4 T Y# s
' R5 G; Y3 r6 v- i( D0 U
8 d3 C# b' I& Z' v5 ?& h, A. ?resource policy$ d! `- O9 P5 ]6 r0 ^
!+ |2 ?" S8 L+ t0 C8 r
ip subnet-zero
8 }6 D( l6 I: D# ~* gip cef7 k2 x+ k- W: L
!: L5 D$ t& ?7 ~0 U" |9 k
! - K, n+ i4 s/ U- R; u$ a7 q# e3 M
no ip dhcp use vrf connected
5 c, E0 V4 Y- j! \* C!
' V1 [7 y$ n; r5 P: ?( ? g!3 n% z. _/ L$ B- S! [
no ip ips deny-action ips-interface$ A+ c% k8 _: x2 H9 ]/ i" A
vpdn enable! o1 t9 ]( m2 O, E7 q$ N
!
7 R) h3 D2 t8 ]+ N; i1 bvpdn-group 1
. I) U7 Z" _4 Z7 O' T! Default PPTP VPDN group2 @% @6 x6 d" C' k( G
accept-dialin
3 X4 p# Q, P$ F2 d& R% P' g: @ N protocol pptp4 X3 {& g# m7 C. @: x
virtual-template 1! `. s' \8 r, v7 Q
, ~2 m+ z' \4 I. i!' M+ b O- ~/ H; |+ y
interface GigabitEthernet0/21 \2 T4 _6 D: L$ w4 a
no ip address( G' s9 c0 M+ O% R/ `$ G- l
ip broadcast-address 0.0.0.03 a7 [2 Y: E0 ?0 h
duplex full: j/ }5 g9 r, k( v+ v, S A
speed 1000' r7 v e& I% b$ u# E F& N
media-type gbic
. m; I$ C- {4 ]- i/ K+ P7 h no negotiation auto
% l" T! |) T ~8 |0 g!
2 d; F: K% j, Y. {1 k/ _* _interface GigabitEthernet0/2.1
N L2 ~! z! Z; N( Y4 f encapsulation dot1Q 105/ p3 g, `! b/ }( A4 R/ ?
ip address 123.123.123.4 255.255.255.2240 C% X) D( B1 P. k
ip nat outside
, a2 W: G5 U! e$ D' g8 u; H2 U- i ip virtual-reassembly( W! H0 e7 j+ ]- | K6 I5 \( ^: h
no snmp trap link-status% d [2 l+ Q% o% v" a
!
$ x6 e# f* x2 Z2 ointerface GigabitEthernet0/2.2
3 O" r) n& X/ ^ J1 u2 N encapsulation dot1Q 304: `" s4 Q3 ?" N% m% w
ip address 172.172.172.200 255.255.255.240
# L7 k* `6 x/ P4 }, b+ L ip nat outside, r6 N3 o$ g# x A! S
ip virtual-reassembly
6 P Q- O2 W& w' v: o no snmp trap link-status
* e. k o p* ~( O6 Z!8 W! m7 h) o5 c. D( Y% F. G' O3 H
interface GigabitEthernet0/2.3$ g+ i% `5 X0 I8 d) B' l# R
encapsulation dot1Q 4012 ^1 m: h z4 ?% p" |- s
ip address 136.136.136.140 255.255.255.2407 F( ~6 ~2 j h2 A& R( p
ip nat outside
( A# T6 O1 O8 X+ N9 l7 b8 u# p6 E ip virtual-reassembly
2 q1 X; T6 n$ e5 l: b5 ]' k no snmp trap link-status5 R1 C& t) t. z. }7 e5 q
!
, a; a3 P' z* g& p& pinterface GigabitEthernet0/3
" y2 q' X) Y7 F6 c7 o) M$ T no ip address
# n" _/ [, \- x8 A duplex full
* D6 B8 ]1 f5 G speed 1000, T* j u; x6 g) D9 {
media-type gbic
+ _7 C2 g5 y% b0 N no negotiation auto
& l. I" h! c7 @1 _7 N!9 O9 O3 C2 Q) O
interface GigabitEthernet0/3.1
$ N) ~4 Y% I5 a( w encapsulation dot1Q 501
- ^3 i* p2 A3 a ~1 ~& f ip address 10.0.0.1 255.255.255.0( Y$ \# U& C. L
ip nat inside
7 J7 L' T Y8 M: F ip virtual-reassembly7 ` s3 G: f, H' ~( B. q8 J
no snmp trap link-status
) n4 C# P m; ?5 i 7 A3 ]! {7 ^$ q* g# {( `
!
& C. X; V, t( @) `+ B1 J5 p" i5 W, Vinterface Virtual-Template1 / G- `. ]/ q& d+ K
ip address 10.0.1.1 255.255.255.02 b9 X4 G) J8 m/ |3 k# d/ f) c' n) h
peer default ip address pool VPNDHCP
1 Q& K/ @0 w8 `& I; ` ppp authentication ms-chap4 [* z2 L' b1 N( B
!
; G" L: y3 a w% L# L% Hip local pool VPNDHCP 10.0.1.100 10.0.1.2009 i% N4 f# b- d! v |
ip classless: H" D: S9 w8 D5 ~
ip route 0.0.0.0 0.0.0.0 123.123.123.1' n; ]9 P( Z$ |8 R v! c3 y6 K
ip route 10.3.0.0 255.255.0.0 172.172.172.193
* W5 M9 O" j( iip route 132.0.0.0 255.0.0.0 136.136.136.129
" V" d/ u" k; u4 w* F/ e1 ~ip route 136.0.0.0 255.0.0.0 136.136.136.129% T7 U( V% V0 X# e" R2 q8 k
ip route 172.0.0.0 255.0.0.0 172.172.172.193! a0 ?5 s( j+ C
no ip http server
2 N. H* i" O( w, P: t, j. Xno ip http secure-server
6 L& S9 G7 K4 X% _8 B! i1 \!2 @/ d* i: ^1 d/ l" \! N' H: \
!
" t* M0 N' R9 jip nat inside source route-map dcn interface GigabitEthernet0/2.3 overload
8 e+ {( C) c# Q& qip nat inside source route-map internet interface GigabitEthernet0/2.1 overload4 G9 k8 d! |$ U' ?1 C' G% `
ip nat inside source route-map oa interface GigabitEthernet0/2.2 overload. B% p) P6 \& N' N! |4 h0 u2 d& r
!& W& \0 h& l* H3 h( G
access-list 101 permit ip 10.0.0.0 0.255.255.255 172.0.0.0 0.255.255.255
" X! }5 m/ e3 C8 e: saccess-list 101 permit ip 10.0.0.0 0.0.0.255 10.3.0.0 0.0.255.2555 E8 R: F9 j' O
access-list 101 permit ip 10.1.1.0 0.0.0.255 10.3.0.0 0.0.255.2554 l7 s' S) |) _" n& W7 \0 m
access-list 101 deny ip any any
+ p. W0 a9 d4 E4 g4 ~access-list 102 deny ip 10.0.0.0 0.255.255.255 172.0.0.0 0.255.255.255
2 k; v3 y- m+ C8 T$ eaccess-list 102 deny ip 10.0.0.0 0.255.255.255 136.0.0.0 0.255.255.255
. o3 O; D4 D5 Qaccess-list 102 deny ip 10.0.0.0 0.255.255.255 132.0.0.0 0.255.255.255) r! o8 C: Q! k, O: a& Q
access-list 102 deny ip 10.0.0.0 0.255.255.255 10.3.0.0 0.0.255.255
; ~0 A( Y" }9 y% f# Z% iaccess-list 102 permit ip any any" V: H$ T5 m! c
access-list 103 permit ip 10.0.0.0 0.255.255.255 136.0.0.0 0.255.255.255( a0 W" u; s8 P8 I' ]3 U! D- w- S
access-list 103 permit ip 10.0.0.0 0.255.255.255 132.0.0.0 0.255.255.255
2 p1 P- B: m* d, K: U9 Raccess-list 103 deny ip any any" e. O, V) h- |* u- W M/ k
! 4 L- w7 L$ f* t" i% R: \: |5 \% ?
route-map oa permit 10
# W* ^$ p/ ?+ r/ y- Q match ip address 101 104 111 114
2 o# w/ q) [' A' q/ O!4 u* p+ f. A( k8 f4 A9 X, v# }: i
route-map internet permit 10
9 f$ t7 h1 q4 p! ^# \& k match ip address 102 112
) M. W6 l4 O# s!: l+ W5 x/ f' p2 T4 q" v! r* c
route-map dcn permit 10
1 ?( y1 A/ C2 m0 J0 f) H8 z" F match ip address 103 113
) Q0 k" a6 B& B- b!2 W( C6 T9 Q1 A
!
, t2 O3 f' Y7 y!" Y) {% m b' D1 r9 {1 M
!
: _, o% M) f3 c7 lcontrol-plane
9 J6 t0 K4 t0 y. i!
: l y6 [5 ]* A2 Z5 g!4 V) Y' g9 _" N% R$ A$ r8 M
!, ]8 l( e5 ~4 X( Y
!
; n5 D2 T0 u( i: o e!) n4 y9 I8 `- V9 a. N3 q! M$ c& F
!/ N# s4 C$ t. ^" }8 F: t" p1 J8 A4 x) o7 v
gatekeeper
9 r4 e& x7 q2 p/ [# N2 L" k: V' f5 B shutdown
0 W1 t- _! u$ W% `( E!
3 F; f( f: ?' C& u" x9 l!
. M- D N9 S. S3 F* v+ f4 Rline con 0
: X1 H: \) u( t7 m% u, o- j stopbits 15 y" b& Q) Q6 @4 _! I
line aux 08 b0 G# _' j8 q$ m. e
stopbits 1
+ F% x8 g3 |3 R* T) Mline vty 0 4+ g& j! w; D8 N
password cisco5 g& P- S# x: V+ X' x- } Q
login2 j" Z* ]7 `+ P* ?' c6 D8 D+ g) w
!+ [, F0 ?8 _2 f9 ]
!
2 ^9 j/ O# t! i3 C1 k( Bend |
|
所有IT类厂商认证考试题库下载
【新盟教育】2023最新华为HCIA全套视频合集【网工基础全覆盖】---国sir公开课合集
【新盟教育】网工小白必看的！2023最新版华为认证HCIA Datacom零基础全套实战课
原创_超融合自动化运维工具cvTools
重量级~~30多套JAVA就业班全套 视频教程（请尽快下载，链接失效后不补）
链接已失效【超过几百G】EVE 国内和国外镜像 全有了 百度群分享
某linux大佬，积累多年的电子书(约300本)
乾颐堂现任明教教主Python完整版
乾颐堂 教主技术进化论 2018-2019年 最新31-50期合集视频（各种最新技术杂谈视频）
Python学习视频 0起点视频 入门到项目实战篇 Python3.5.2视频教程 共847集 能学102天
约21套Python视频合集 核心基础视频教程（共310G,已压缩）
最新20180811录制 IT爱好者-清风羽毛 - 网络安全IPSec VPN实验指南视频教程
最新20180807录制EVE开机自启动虚拟路由器并桥接物理网卡充当思科路由器
[复制链接]
