H3CTE安全验整理.docVIP

目 录 1 ISP 1 2 Headquarters 3 3 branch1 7 4 branch2 10 5 LAC 12 6 vpdnuser 14 7 GRE＋IPSec－B1 16 7..1 Headquarters-Branch1 16 7..2 Branch1 17 8 GRE＋IPSec－B2 18 8..1 Headquarters-Branch2 18 8..2 Branch2 19 9 L2TP 19 9..1 Headquarters－L2TP－LNS 19 9..2 LAC－L2TP 20 10 VPDN 21 10..1 Headquarters－VPDN－LNS 21 10..2 LAC－VPDN 22 ISP [ISP]dis cur Now create configuration... Current configuration ! version 1.74 firewall enable sysname ISP ! interface Aux0 async mode flow link-protocol ppp ! interface Ethernet0 ip address ! interface Serial0 link-protocol ppp ip address 52 ! interface Serial1 clock DTECLK3 link-protocol ppp ip address 52 ! interface Serial2 clock DTECLK3 link-protocol ppp ip address 52 ! interface Serial3 link-protocol ppp ip address 3 52 ! return Headquarters [Headquarters]dis cur Now create configuration... Current configuration ! version 1.74 undo login telnet local-user ftp service-type ftp password simple ftp local-user vpdnuser@ service-type ppp password simple vpdnuser local-user win2000@ service-type ppp password simple win2000 l2tp enable ip pool 1 54 info-center console firewall enable aaa-enable aaa authentication-scheme ppp default local aaa authentication-scheme login default local aaa accounting-scheme optional sysname Headquarters ftp-server enable undo idle-timeout ! ike pre-shared-key Headquartersandbranch2 remote ike pre-shared-key Headquartersandbranch1 remote ! acl 1 match-order auto //NAT rule normal permit source 55 rule normal deny source any ! acl 101 match-order auto rule normal permit ip source 55 destination 55 rule normal deny ip source any destination any ! acl 102 match-order auto rule normal permit ip source 55 destination 55 rule normal deny ip source any destination any