推荐点击下面图片，通过本站淘宝优惠价购买:
Network Topology
as
Configuration Steps
Device 1:
#
ospf 1
area 0.0.0.0
network 1.1.1.0 0.0.0.255
network 20.9.1.79 0.0.0.0
network 172.9.1.26 0.0.0.0
#
interface LoopBack0
description loopback import to eBGP
ip address 20.9.1.79 255.255.255.255
#
interface GigabitEthernet0/1
port link-mode route
ip address 1.1.1.1 255.255.255.0
#
#
interface Tunnel1 mode ipsec
description IPSec tunnel to MCYS HQ01
ip address 172.9.1.26 255.255.255.252
source LoopBack0
destination 20.9.0.1
tunnel protection ipsec profile kol_tbr_hq01
#
ipsec transform-set 3des
esp encryption-algorithm 3des-cbc
esp authentication-algorithm sha1
#
ipsec profile kol_tbr_hq01 isakmp
transform-set 3des
ike-profile kol_tbr_hq01
#
ipsec policy policy1 1 isakmp
ike-profile kol_tbr_hq01
#
ike identity user-fqdn HQ
#
ike profile kol_tbr_hq01
keychain key
exchange-mode aggressive
local-identity user-fqdn HQ
match remote identity fqdn BR
match remote identity address 20.9.0.1 255.255.255.255
proposal 1
#
ike proposal 1
authentication-method rsa-signature
encryption-method 3des
#
ike keychain key
pre-shared-key address 20.9.0.1 255.255.255.255 key SIMPLE 12345678
#
Device 2:
#
ospf 1
area 0.0.0.0
network 1.1.1.0 0.0.0.255
network 20.9.0.1 0.0.0.0
network 172.9.1.25 0.0.0.0
#
interface LoopBack0
description loopback import to eBGP
ip address 20.9.0.1 255.255.255.255
#
interface GigabitEthernet0/1
port link-mode route
ip address 1.1.1.2 255.255.255.0
#
#
interface Tunnel1 mode ipsec
description IPSec tunnel to MCYS HQ01
ip address 172.9.1.25 255.255.255.252
source LoopBack0
destination 20.9.1.79
tunnel protection ipsec profile kol_tbr_hq01
#
ipsec transform-set 3des
esp encryption-algorithm 3des-cbc
esp authentication-algorithm sha1
#
ipsec profile kol_tbr_hq01 isakmp
transform-set 3des
ike-profile kol_tbr_hq01
#
ipsec policy policy1 1 isakmp
ike-profile kol_tbr_hq01
#
ike identity user-fqdn HQ
#
ike profile kol_tbr_hq01
keychain key
exchange-mode aggressive
local-identity user-fqdn BR
match remote identity fqdn HQ
match remote identity address 20.9.1.79 255.255.255.255
Proposal 1
#
ike proposal 1
authentication-method rsa-signature
encryption-method 3des
#
ike keychain key
pre-shared-key address 20.9.1.79 255.255.255.255 key SIMPLE 12345678
#
Key Configuration
Transform-set+ike-proposal should be all consistent.
本文链接：http://www.hqyman.cn/post/4766.html 非本站原创文章欢迎转载，原创文章需保留本站地址！
休息一下，本站随机推荐观看栏目:
