IPSec over GRE实验文档.docVIP

IPSec over GRE 实验拓朴 实验目的 所有流量由IPSec保护 所有流量通过GRE封装 实现协议数据被GRE封装，用户数据被 Ipsec保护 实验配置 Routerenable Router#config t Enter configuration commands, one per line. End with CNTL/Z. Router(config)#no ip domain-lookup Router(config)#line console 0 Router(config-line)#logging syn Router(config-line)#logging synchronous Router(config-line)#no login Router(config-line)#privilege level 15 Router(config-line)#line vty 0 4 Router(config-line)#no login Router(config-line)#privilege level 15 Router(config-line)# Router(config-line)#exit Router(config)#hostname Rt1 Rt1(config)#hostname RT1 RT1(config)# RT1(config)#interface loopback 0 /设置loopback 口/ *Mar 1 00:04:32.139: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to up RT1(config-if)#ip address 192.168.0.1 255.255.255.255 RT1(config-if)#exit RT1(config)#interface e1/0 RT1(config-if)#ip address 192.168.20.1 255.255.255.0 RT1(config-if)#no shutdown RT1(config-if)# *Mar 1 00:05:04.431: %LINK-3-UPDOWN: Interface Ethernet1/0, changed state to up *Mar 1 00:05:05.431: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet1/0, changed state to up RT1(config-if)#exit RT1(config)#interface e0/0 RT1(config-if)#ip address 172.1.1.2 255.255.255.240 RT1(config-if)#no shutdown RT1(config-if)#exit RT1(config)# *Mar 1 00:05:48.111: %LINK-3-UPDOWN: Interface Ethernet0/0, changed state to up *Mar 1 00:05:49.111: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/0, changed state to up RT1(config)#ip route 0.0.0.0 0.0.0.0 172.1.1.1 RT1(config)#interface tunnel 0 /设置Tunnel通道/ *Mar 1 00:11:59.435: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel0, changed state to down RT1(config-if)#ip address 192.168.1.1 255.255.255.252 RT1(config-if)#tunnel mode gre ip RT1(config-if)#tunnel source 172.1.1.2 /定义tunnel源地址/ RT1(config-if)#tunnel destination 172.1.2.2/定义/tunnel目标地址/ *Mar 1 00:12:38.515: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel0, changed state to up RT1(config-if)#exit RT1(config)#interface