?

本實驗不需要考虛路由的問題,動態路由解決路由的問題.

R1

!

crypto isakmp policy 10

?authentication pre-share

crypto isakmp key cisco address 202.102.1.2

!

!

crypto ipsec transform-set cisco esp-des esp-md5-hmac

!

crypto ipsec profile aaa

?set transform-set cisco

!

!

!

!

!

!

interface Loopback0

?ip address 1.1.1.1 255.255.255.0

!

interface Loopback1

?ip address 2.2.2.2 255.255.255.0

!

interface Loopback2

ip address 3.3.3.3 255.255.255.0

!

interface Tunnel0

?ip address 123.1.1.1 255.255.255.0

?tunnel source Serial1/1

?tunnel destination 202.102.1.2

?tunnel mode ipsec ipv4

?tunnel protection ipsec profile aaa

!

!感興趣的數據流是所有進出此接口的流量,跑一個路由協議解決了路由的問題,這樣感興趣的數據流也不用寫了

interface Serial1/1

?ip address 202.102.1.1 255.255.255.0

?serial restart-delay 0

!

!

router ospf 1

?log-adjacency-changes

?network 1.1.1.1 0.0.0.0 area 0

?network 2.2.2.2 0.0.0.0 area 0

?network 3.3.3.3 0.0.0.0 area 0

?network 123.1.1.1 0.0.0.0 area 0

!

?

R2

?

crypto isakmp policy 10

?authentication pre-share

crypto isakmp key cisco address 202.102.1.1

!

!

crypto ipsec transform-set cisco esp-des esp-md5-hmac

!

crypto ipsec profile aaa

?set transform-set cisco

!

!

!

!

!

!

interface Loopback0

?ip address 4.4.4.4 255.255.255.0

?ip ospf network point-to-point

!

interface Loopback1

?ip address 5.5.5.5 255.255.255.0

?ip ospf network point-to-point

!

interface Loopback2

?ip address 6.6.6.6 255.255.255.0

?ip ospf network point-to-point

!

interface Tunnel0

?ip address 123.1.1.2 255.255.255.0

?tunnel source Serial1/0

?tunnel destination 202.102.1.1

?tunnel mode ipsec ipv4

?tunnel protection ipsec profile aaa

!

!

interface Serial1/0

?ip address 202.102.1.2 255.255.255.0

?serial restart-delay 0

!

!

router ospf 1

?log-adjacency-changes

?network 4.4.4.4 0.0.0.0 area 0

?network 5.5.5.5 0.0.0.0 area 0

?network 6.6.6.6 0.0.0.0 area 0

?network 123.1.1.2 0.0.0.0 area 0

!

?

?

?

?

?

?

?

?

?

?

?

?

?

?

?

?

?

?

?

?

?

?

?

?

?

?

?

?

?

?

轉載于:https://blog.51cto.com/sngyqd/624836

創作挑戰賽新人創作獎勵來咯，堅持創作打卡瓜分現金大獎

總結

以上是生活随笔為你收集整理的ipsec_profile的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。