第一种,只是使用到了GRE,没有使用GRE封装,只是感兴趣刘通过GRE隧道,用IPSEC加密
R1
crypto isakmp policy 10
authentication pre-share
crypto isakmp key cisco address 12.12.12.2
crypto ipsec transform-set myset esp-des esp-md5-hmac
mode transport
crypto map mymap 10 ipsec-isakmp
set peer 12.12.12.2
set transform-set myset
match address 101
interface Loopback0
ip address 10.1.1.1 255.255.255.0
interface Tunnel0
ip address 21.21.21.1 255.255.255.0
tunnel source FastEthernet0/0
tunnel destination 12.12.12.2
interface FastEthernet0/0
ip address 12.12.12.1 255.255.255.0
crypto map mymap
router ospf 1
log-adjacency-changes
network 10.1.1.1 0.0.0.0 area 0
network 21.21.21.1 0.0.0.0 area 0
access-list 101 permit ip host 12.12.12.1 host 12.12.12.2
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
第二种:真正的GRE over IPSEC先封装GRE再用IPSEC加密
R2
crypto isakmp policy 10
authentication pre-share
crypto isakmp key cisco address 12.12.12.1
crypto ipsec transform-set myset esp-des esp-md5-hmac
mode transport
crypto ipsec profile mysecfile
set transform-set myset
interface Loopback0
ip address 20.1.1.1 255.255.255.0
interface Tunnel0
ip address 21.21.21.2 255.255.255.0
tunnel source FastEthernet0/0
tunnel destination 12.12.12.1
tunnel protection ipsec profile mysecfile
interface FastEthernet0/0
ip address 12.12.12.2 255.255.255.0
router ospf 1
log-adjacency-changes
network 20.1.1.1 0.0.0.0 area 0
network 21.21.21.2 0.0.0.0 area 0
验证:show crypto engine connections active
·直接从USB设备上的VHD文件直接启动Windows | ·破解网通电信封路由的方法:上网共享方案 |
·使用cygwin远程登录LINUX | ·linux使用top命令查看系统进程信息 |
·Linux文件系统挂装与高层体系结构 | ·广域网优化在高教校园网中的应用 |
·广域网优化在企业互联网中的应用 | ·把VoIP技术革命引向核心 |
·合理控制流量 保证网络运行稳定 | ·CDN与ADN网络加速技术前景分析 |
Copyright © 2002-2015 版权所有 学校地址:北京市海淀区西三旗建材城中路29号北大青鸟 招生热线:010-82011433/32 京公网安备110102004704 京ICP备05043413号 京公网安备110102004704 |