超全各种实验个包代码十六.pdfVIP

槐

settransform-setcisco

!

cryptomapcisco110ipsec-isakmp

setpeer12

settransform-setcisco

matchaddress100

!

interfaceTunnel0//GRE隧道接口

ipaddress

tunnelsource

tunneldestination12

cryptomapcisco1

!

interfaceEthernet0/0

ipaddress

!

interfaceEthernet1/0

ipaddress

!

interfaceVirtual-Template1

ipaddress

//此IP如果不设置将无法下发地址，此IP将成为服务器地址

peerdefaultipaddresspoolt45//将地址池t45下发

pppauthenticationpap

!

iplocalpoolt450//本地地址池

iproute

iprouteTunnel0//私网细化路由

!

access-list100permitiphostany

!

RT1#

RT3：

!

cryptoisakmp1//阶段一策略

encr3des

hashmd5

authenticationpre-share

group2

cryptoisakmpkeyciscoaddress13

!

cryptoipsectransform-setciscoesp-3desesp-md5-hmac//阶段二策略

modetransport

槐槐

槐

!

cryptomapcisco10ipsec-isakmp

setpeer13

settransform-setcisco

matchaddress100

!

interfaceTunnel0//GRE隧道接口

ipaddress

tunnelsource12

tunneldestination13

cryptomapcisco

!

interfaceEthernet0/0

ipaddress12

!

interfaceEthernet1/0

ipaddress

!

iproute11

iprouteTunnel0//私网细化路由

!

access-list100permitiphost12host13//感流量

RT3#

FW4：

!

interfaceEthernet0

nameifoutside

security-level0

ipaddress12

!

interfaceEthernet1

nameifinside

security-level100

ipaddress

!

access-listipextendedpermitipanyany

access-listipextendedpermitgreanyany

static(inside,outside)13netmask55//静态NAT映射

access-groupipininterfaceoutside

routeoutside111

!

四、实验分析：

槐