GRE+IPSECVPN的基本配置.docx

GRE+IPSECVPN的基本配置R1? E0---E0? R2? E1----E0 R3R1RouterenRouter#conf t????????Router(config)#hos r1r1(config)#int e0/0?r1(config-if)#no shr1(config-if)#int lo 0r1(config-if)#ip?r1(config-if)#ip address r1(config-if)#no shr1(config-if)#exitr1(config)#ip route ?r1(config)#int tunnel 0?? //定义GRE 干道r1(config-if)#ip add r1(config-if)#no shr1(config-if)#tunnel destination ? //定义干道目标r1(config-if)#tunnel source e0/0 //定义干道源r1(config-if)#tunnel mode greip?? //定义模式，默认可以不需要重新定义r1(config-if)#exit?r1(config)#router eigrp 10??? //动态协议为EIGRPr1(config-router)#no auto-summary?r1(config-router)#net r1(config-router)#net r1(config-router)#exitr1(config)#exitr1#ping Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds:!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 92/141/188 msr1#ping ?Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds:!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 92/146/220 msr1#conf tr1(config)#crypto ?? ca?????????? Certification authority? call???????? Configure Crypto Call Admission Control? dynamic-map? Specify a dynamic crypto map template? identity???? Enter a crypto identity list? ipsec??????? Configure IPSEC policy? isakmp?????? Configure ISAKMP policy? key????????? Long term key operations? keyring????? Key ring commands? map????????? Enter a crypto map? mib????????? Configure Crypto-related MIB Parameters? pki????????? Public Key components? wui????????? Crypto HTTP configuration interfaces? xauth??????? X-Auth parametersr1(config)#crypto isakmp ?? aggressive-mode?????? Disable ISAKMP aggressive mode?? client??????????????? Set client configuration policy? enable??????????????? Enable ISAKMP? identity????????????? Set the identity which ISAKMP will use? invalid-spi-recovery? Initiate IKE and send Invalid SPI Notify? keepalive???????????? Set a keepalive interval for use with IOS peers? key?????????????????? Set pre-shared key for remote peer? nat????