注册 登录  
 加关注
   显示下一条  |  关闭
温馨提示!由于新浪微博认证机制调整,您的新浪微博帐号绑定已过期,请重新绑定!立即重新绑定新浪微博》  |  关闭

欢迎光临shaying110的博客

RSed-ISPing

 
 
 

日志

 
 

在CISCO C2921路由器上配置EASY-VPN和L2L-VPN(Site-to-Site VPN)共存  

2011-11-02 14:58:56|  分类: CISCO网络 |  标签: |举报 |字号 订阅

  下载LOFTER 我的照片书  |

 crypto isakmp policy 3
 encr 3des
 authentication pre-share
 group 2
!
crypto isakmp policy 10
 encr 3des
 hash md5
 authentication pre-share
 group 2
!
crypto isakmp policy 20
 encr 3des
 authentication pre-share
 group 2
 lifetime 28800
 
 cry isakmp key 6 B28GysdadfN address 211.13.20.121
 crypto ipsec transform-set l2l esp-3des esp-sha-hmac
 
 object-group network SDTC
  172.16.30.0 255.255.255.0
  172.16.31.0 255.255.255.192
 

 ip access-list extended UZ-SDTC
  permit ip 172.16.20.0 0.0.0.255 172.16.30.0 0.0.0.255
  permit ip 172.16.20.0 0.0.0.255 172.16.31.0 0.0.0.63


 ip access-list extended NAT
  deny   ip object-group BJUZ object-group SDTC
  per ip any any

ip nat inside source list NAT interface GigabitEthernet0/0 overload

 crypto map map 20 ipsec-isakmp
  set peer 211.13.20.121
  set transform-set l2l
  set pfs group1
  match address UZ-SDTC

 
 ip local pool vpnpool 172.16.25.1 172.16.25.30
 
 ip access-list extended split_tunnel
   permit ip 172.16.0.0 0.0.3.255 172.16.25.0 0.0.0.31
   permit ip 172.16.30.0 0.0.0.255 172.16.20.0 0.0.0.255
   permit ip host 211.15.183.34 host 172.16.20.226
   permit ip 172.20.50.0 0.0.0.255 172.16.20.0 0.0.0.255

 crypto isakmp client configuration group zzeasy
   key cisco123
   pool vpnpool
  acl split_tunnel
 crypto isakmp profile vpnclient
    match identity group zzeasy
    client authentication list userauthen
    isakmp authorization list groupauthor
    client configuration address respond

 crypto dynamic-map uzdy 100
  set transform-set myset
  set isakmp-profile vpnclient
  reverse-route

  crypto map map 65000 ipsec-isakmp dynamic uzdy
  
  interface GigabitEthernet0/0
 ip address 124.207.20.22 255.255.255.252
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
 crypto map 9thq-map

  评论这张
 
阅读(679)| 评论(0)
推荐 转载

历史上的今天

评论

<#--最新日志,群博日志--> <#--推荐日志--> <#--引用记录--> <#--博主推荐--> <#--随机阅读--> <#--首页推荐--> <#--历史上的今天--> <#--被推荐日志--> <#--上一篇,下一篇--> <#-- 热度 --> <#-- 网易新闻广告 --> <#--右边模块结构--> <#--评论模块结构--> <#--引用模块结构--> <#--博主发起的投票-->
 
 
 
 
 
 
 
 
 
 
 
 
 
 

页脚

网易公司版权所有 ©1997-2017