使用IPSec配置VIRTUAL TUNNEL INTERFACE.pdfVIP

使用IPSec 配置VIRTUAL TUNNEL INTERFACE 一、网络拓扑 二、完整配置 R1#show running-config Building configuration... Current configuration : 1432 bytes ! version 12.4 service timestamps debug datetime msec 波 service timestamps log datetime msec no service password-encryption 选 ! hostname R1 ! 张 boot-start-marker boot-end-marker ! ： ! no aaa new-model 作 ! resource policy ! 制 ip cef ! ! ! ! ! ! ! ! ! ! policy-map net class class-default shape average 128000 ! ! ! crypto isakmp policy 10 encr 3des authentication pre-share group 2 crypto isakmp key cisco123 address crypto isakmp keepalive 10 ! ! crypto ipsec transform-set vtivpn esp-3des esp-sha-hmac ! crypto ipsec profile VTI set transform-set vtivpn ! 波 ! ! ! 选 ! interface Tunnel0 ip address 张 tunnel source tunnel destination tunnel mode ipsec ipv4 ： tunnel protection ipsec profile VTI service-policy output net ! 作 interface Loopback0 ip address ! 制 interface FastEthernet0/0 ip address duplex half ! interface Ethernet1/0 no ip address shutdown duplex half ! interface Ethernet1/1 no ip address shutdown duplex half ! interface Ethernet1/2 no ip address shutdown duplex half ! interface Ethernet1/3 no ip address shutdown duplex half ! router rip version 2 network network ! no auto-summary 波 ip route no ip http server 选 no ip http secure-server ! !