Gre over ipsec与ipsec over gre

《Gre over ipsec与ipsec over gre》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、Greoveripsec（很实用）Gre实现私网连通性ipsec实现数据安全性R1R1#shrunBuildingconfiguration...Currentconfiguration:1474bytes!version12.4servicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption!hostnameR1!boot-start-markerboot-end-marker!!noaaanew-modelmemory-sizeiomem5ipc

2、ef!!!!noipdomainlookup!multilinkbundle-nameauthenticated!!archivelogconfighidekeys!!cryptoisakmppolicy10encr3desauthenticationpre-sharegroup2cryptoisakmpkeysunanaddress202.103.96.113（对端公网ip）!!cryptoipsectransform-sett10esp-3desesp-sha-hmac（传输模式）!cryptomapp110ipsec-isakmpsetpeer202.103.96.

3、113settransform-sett10matchaddress111!!!!!!!interfaceTunnel0ipaddress192.168.1.1255.255.255.0tunnelsourceFastEthernet0/0tunneldestination202.103.96.113!interfaceFastEthernet0/0ipaddress202.103.96.112255.255.255.0duplexautospeedautocryptomapp1!interfaceFastEthernet0/1ipaddress192.168.2.125

4、5.255.255.0duplexautospeedauto!routerospf1（使用T0口建立ospf邻居）log-adjacency-changespassive-interfacedefaultnopassive-interfaceTunnel0network192.168.1.00.0.0.255area0network192.168.2.00.0.0.255area0!ipforward-protocolnd!!noiphttpservernoiphttpsecure-server!access-list111permitiphost202.103.96.1

5、12host202.103.96.113nocdprun!control-plane!linecon0exec-timeout00loggingsynchronouslineaux0exec-timeout00loggingsynchronouslinevty04loginendR2R2showrunR1#shrunBuildingconfiguration...Currentconfiguration:1474bytes!version12.4servicetimestampsdebugdatetimemsecservicetimestampslogdatetimems

6、ecnoservicepassword-encryption!hostnameR1!boot-start-markerboot-end-marker!!noaaanew-modelmemory-sizeiomem5ipcef!noipdomainlookup!multilinkbundle-nameauthenticated!archivelogconfighidekeys!!cryptoisakmppolicy10encr3desauthenticationpre-sharegroup2cryptoisakmpkeysunanaddress202.103.96.113!

7、!cryptoipsectransform-sett10esp-3desesp-sha-hmac!cryptomapp110ipsec-isakmpsetpeer202.103.96.113settransform-sett10matchaddress111!interfaceTunnel0ipaddress192.168.1.1255.255.255.0tunnelsourceFastEthernet0/0tunneldestination202.103.96.113!interfaceFastEthernet0/0ipad