105实验指导(GREoverIPsec).docVIP

实验指导(GRE over IPsec ) 实验任务 R1:RotuerA、 R2:Internet、 R3:RotuerB、 R4:RotuerC RouterB、RouterC采用VPN和总部连接 总部和不同分部之间的VPN采用不同的参数、密码 要保证三个site之间都可以互相通信 配置路由协议RIP 实验步骤 R1、R2、R3上如图配置IP地址，打开接口，配置路由： Switch（S1）: Switch(config)#int f0/0 Switch(config-if)#shutdown RouterA（R1）: int s1/1 no shutdown clock rate 128000 ip add 52 int loopback0 ip add ip route s1/1 Internet（R2）: int s1/0 no shutdown clock rate 128000 ip add 52 int s1/1 no shutdown clock rate 128000 ip add 52 int e0/0 no shutdown duplex full ip add 52 RouterB（R3）: int s1/0 no shutdown clock rate 128000 ip add 2 52 int loopback0 ip add ip route s1/0 RouterC（R4）: int e0/0 no shutdown duplex full ip add 52 int loopback0 ip add ip route RouterA、RouterB之间的Tunnel： RouterA: interface Tunnel1 ip address tunnel source Serial1/1 tunnel destination RouterB ： interface Tunnel1 ip address tunnel source Serial1/0 tunnel destination RouterA、RouterC之间的Tunnel: RouterA: interface Tunnel2 ip address tunnel source Serial1/1 tunnel destination RouterC ： interface Tunnel1 ip address tunnel source e0/0 tunnel destination 路由协议配置 RouterA: router rip network RouterB： router rip network RouterC： router rip network 测试: 三地网络是否可以通信： RouterA： ping source ping source RouterB： ping source ping source RouterC： ping source ping source RouterA和RouterB 的GRE Over IPSec RouterA： crypto isakmp policy 10 hash md5 authentication pre-share ! crypto isakmp key 0 cisco address ! crypto ipsec transform-set SITE2 esp-des esp-md5-hmac ! crypto ipsec profile SITE2 set transform-set SITE2 ! interface Tunnel1 tunnel protection ipsec profile SITE2 RouterB： crypto isakmp policy 10 hash md5 authentication pre-share ! crypto isakmp key 0 cisco address ! crypto ipsec transform-set SITE1 esp-des esp-md5-hmac ! crypto ipsec profile SITE1 set transform-set SITE1 ! interface Tunnel1 tunnel protection ipsec profile SITE1 RouterA和RouterC 的GRE Over IPSec RouterA： crypto isakmp