基于思科设备得VPN实现(九)

isakmp key cisco123 address 172.16.0.1 no-xauth
 Comany1（config）#ip access-list extended ToComany
 Comany1（config-ext-nacl）#permit gre host 172.16.1.1 host 172.16.0.1
 Comany1（config-ext-nacl）#
 Comany1（config-ext-nacl）#exit
 Comany1（config）#crypto ipsec transform-set a esp-des esp-sha-hmac 
 Comany1（cfg-crypto-trans）#mode transport
 Comany1（cfg-crypto-trans）#
 Comany1（cfg-crypto-trans）#exit
 Comany1（config）#crypto map mymap 10 ipsec-isakmp
 Comany1（config-crypto-map）#match address ToComany
 Comany1（config-crypto-map）#set transform-set a 
 Comany1（config-crypto-map）#set peer 172.16.0.1 
 Comany1（config-crypto-map）#
 Comany1（config-crypto-map）#exit
 Comany1（config）#interface s0/0 
 Comany1（config-if）#crypto map mymap
 Comany1（config-if）#
 Comany1（config-if）#exit
 Comany1（config）#
 Comany1（config）#ip access-list extended perimeter
 Comany1（config-ext-nacl）#no permit gre host 172.16.0.1 host 172.16.1.1
 Comany1（config-ext-nacl）#
 Comany1（config-ext-nacl）#en
 Comany1#
 5.3.3 分公司2路由器配置
 Comany2（config）#crypto isakmp enable 
 Comany2（config）#crypto isakmp identity address
 Comany2（config）#crypto isakmp policy 1
 Comany2（config-isakmp）#encryption des        
 Comany2（config-isakmp）#authentication pre-share 
 Comany2（config-isakmp）#group 1   
 Comany2（config-isakmp）#hash sha   
 Comany2（config-isakmp）#exit
 Comany2（config）#
 Comany2（config）#crypto isakmp key cisco123456 address 172.16.0.1 no-xauth
 Comany2（config）#ip access-list extended ToComany
 Comany2（config-ext-nacl）#permit gre host 172.16.2.1 host 172.16.0.1
 Comany2（config-ext-nacl）#
 Comany2（config-ext-nacl）#exit
 Comany2（config）#crypto ipsec transform-set b esp-des esp-sha-hmac 
 Comany2（cfg-crypto-trans）#mode transport
 Comany2（cfg-crypto-trans）#
 Comany2（cfg-crypto-trans）#exit
 Comany2（config）#crypto map mymap1 1 ipsec-isakmp
 Comany2（config-crypto-map）#match address ToComany
 Comany2（config-crypto-map）#set transform-set b 
 Comany2（config-crypto-map）#set peer 172.16.0.1 
 Comany2（config-crypto-map）#
 Comany2（config-crypto-map）#exit
 Comany2（config）#interface e0/1 
 Comany2（config-if）#crypto map mymap1
 Comany2（config-if）#
 Comany2（config-if）#exit
 Comany2（config）#
 Comany2（config）#ip access-list extended perimeter
 Comany2（config-ext-nacl）#no permit gre host 172.16.0.1 host 172.16.2.1
 Comany2（config-ext-nacl）#
 Comany2（config-ext-nacl）#en
 Comany2#
 5.4 VPN的测试
 如果Vpn配置成功的话，在各个公司的Pc机子上可以ping通其他公司的内网Ip。
 5.4.1总公司下的测试
 左键开始按钮-运行-输入cmd-进入dos方式-ping分公司1与分公司2的ip地址
 Ping 192.168.20.123
 Ping 192.168.30.130
 测试结果如图5.2所示：
 
 图5-2 总公司下的测试
 5.4.2 分公司1下的测试
 左键开始按钮-运行-输入cmd

首页 上一页 6 7 8 9 10 下一页 尾页 9/10/10

基于思科设备得VPN实现(九)相关范文