第6章安全VPN故障排除.pptVIP

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * IPSec案例一（1） 故障现象 RTA、RTC之间无法建立IPSec Tunnel。 G0/1 RTA RTB RTC G0/0 G0/1 G0/0 G0/1 G0/0 PCA PCB /29 /29 /29 0/29 54/24 /24 /24 54/24 IPSec Tunnel ike local-name spoke # acl number 3001 rule 0 permit ip destination 55 # ike peer hub exchange-mode aggressive pre-shared-key simple 123 id-type name remote-name hub remote-address 0 # ipsec proposal prop # ipsec policy policy 10 isakmp security acl 3001 ike-peer hub proposal prop ike local-name hub # acl number 3001 rule 0 permit ip dest