计算机网络安全技术与实施（旧）网络安全技术应用案例（H3C路由交换综合安全技术）网络安全技术应用案例12.docVIP

国家高等职业教育网络技术专业教学资源库 网络安全技术应用案例 路由器交换机安全典型案例 案例12 DVPN典型配置 PAGE PAGE 7 案例12 DVPN典型配置 【需求】 通过配置DVPN，client1、client2可以和server互通，client1和client2之间可以互通。 【组网图】 Server配置脚本 # sysname Server # radius scheme system # domain system # local-user admin password cipher .]@USE=B,53Q=^Q`MAF41!! service-type telnet terminal level 3 service-type ftp # dvpn policy 1 /创建dvpn-policy视图1/ # interface Aux0 async mode flow # interface Ethernet0/0 ip address # interface Ethernet0/1 ip address dhcp-alloc # interface Serial1/0 clock DTECLK1 link-protocol ppp ip address ppp-negotiate # interface Serial1/1 clock DTECLK1 link-protocol ppp ip address ppp-negotiate # interface Tunnel0 /创建Tunnel0接口/ ip address tunnel-protocol udp dvpn /Tunnel接口的封装格式/ source Ethernet0/0 dvpn interface-type server /指定了Tunnel接口类型为server/ dvpn dvpn-id 1 /配置Tunnel接口所属的DVPN域1/ dvpn policy 1 /引用dvpn-policy视图1/ # interface NULL0 # interface LoopBack0 ip address # FTP server enable # dvpn service enable /使能DVPN功能/ dvpn server pre-shared-key 12345 /配置Server的身份pre-shared-key/ # ip route-static preference 60 /配置路由信息/ ip route-static preference 60 # user-interface con 0 user-interface aux 0 user-interface vty 0 4 authentication-mode scheme # return Client1配置脚本 # sysname Client1 # radius scheme system # domain system # local-user admin password cipher .]@USE=B,53Q=^Q`MAF41!! service-type telnet terminal level 3 service-type ftp # dvpn class test /配置Tunnel接口使用的 dvpn-class/ public-ip authentication-server method pre-share pre-shared-key 12345 # interface Aux0 async mode flow # interface Ethernet0/0 ip address # interface Tunnel0 /创建Tunnel0接口/ ip address tunnel-protocol udp dvpn