南京CCNA培训IPSECVPN的配置实例.docxVIP

南京CCNA培训IPSECVPN的配置实例 一、 实验拓扑： wKiomlOIIAGSmxnoAAGOrORIORQ963.jpg 二、 实验要求： 保证两个站点的路由没问题。 在站点A与站点B间配置VPN,保障企业的网络通过互联网连接起来。 三、 实验的配置： R1的全部配置： rl#show running-config Building configuration… Current configuration : 597 bytes i version 12.4 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption hostname rl spanning-tree mode pvst in terface FastEthernetO/O ip address 192.168.2.3 255.255.255.0 duplex auto speed auto i in terface FastEther netO/1 ip address 192.168.0.1 255.255.255.0 duplex auto speed auto i ■ in terface Vlanl no ip address shutdow n i ip classless ip route 192.168.1.0 255.255.255.0 192.168.2.1 ip route 0.0.0.0 0.0.0.0 192.168.2.1 line con 0 i line aux 0 line vty 0 4 login end siteA的全部配置: siteA# show running?config Building confjguration… Current configuration : 1184 bytes i versi on 12.4 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption host name siteA crypto isakmp policy 10 encr 3des hash md5 authentication pre-share group 2 i ■ crypto isakmp key cisco address 61.128.1.1 i I ■ crypto ipsec transform-set cisco esp-3des esp?md5?hmac i ■ crypto map map 10 ipsec-isakmp set peer 61.128.1.1 set transform-set cisco match address vpn spanning-tree mode pvst in terface FastEthernetO/O ip address 192.168.2.1 255.255.255.0 duplex auto speed auto i in terface FastEther netO/1 no ip address duplex auto speed auto shutdow n i interface SerialO/0/0 ip address 202.100.1.1 255.255.255.0 crypto map map i interface SerialO/O/1 no ip address shutdow n in terface Vlanl no ip address shutdow n i ip classless ip route 0.0.0.0 0.0.0.0 202.100.1.10 ip route 192.168.0.0 255.255.255.0 192.168.2.3 ip route 192.168.1.0 255.255.255.0 202.100.1.10 I ■ I ip access-list extended vpn permit ip 192.168.0.0 0.0.0.255 192.168.1.0 0.0.0.255 permit ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255 line con 0 line aux 0 line vty 0 4 login end Internet的全部配置: lnternet#show runn