ciscio-路由器aggressive-mode-和asa配置.docx

R3 内网 /24 R4 内网 00 R2充当公网 R1-ASA1 通讯正常 以下是配置: R1#sh run Building configuration... Current configuration : 1236 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname R1 ! boot-start-marker boot-end-marker ! ! no aaa new-model ip cef ! ! ! ! no ip domain lookup ! multilink bundle-name authenticated ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! crypto isakmp policy 1 hash md5 authentication pre-share group 2 crypto isakmp key cisco123 hostname ZGPT crypto isakmp identity hostname crypto isakmp keepalive 10 periodic ! crypto isakmp peer address set aggressive-mode password cisco123 ! ! crypto ipsec transform-set ccie esp-des esp-md5-hmac ! crypto map cisco 1 ipsec-isakmp set peer set transform-set ccie set pfs group2 match address A ! ! ! ! ! interface FastEthernet0/0 ip address duplex auto speed auto ! interface FastEthernet0/1 ip address duplex auto speed auto crypto map cisco ! ip route no ip http server no ip http secure-server ! ! ! ip access-list extended A permit ip 55 host 00 ! logging alarm informational ! ! ! ! ! ! control-plane ! ! ! ! ! ! gatekeeper shutdown ! ! line con 0 stopbits 1 line aux 0 line vty 0 4 ! ! end R1# sh cry isa sa IPv4 Crypto ISAKMP SA dst src state conn-id slot status QM_IDLE 1002 0 ACTIVE IPv6 Crypto ISAKMP SA R1# R1# R2#sh run Building configuration... Current configuration : 661 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname R2 ! boot-start-marker boot-end-marker ! ! no aaa new-model ip cef ! ! ! ! ! multilink bundle-name authenticated ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! interface FastEthernet0/0 ip address duplex auto speed auto ! interface FastEthernet0/1 ip address duplex auto speed auto ! no ip http server no ip http secure-ser