其它文章
网络服务器安全问题初探
关于思科安全方面的文章
SAFE安全架构:化繁为简显风流
浅论网络防火墙技术
在VIP 上对 DDos 监控
防火墙的变革之路
连接之VPN-1 Net安全虚拟网络架构
连接之VPN-1 Pro安全虚拟网络架构
Check Point SVN (Secure Virtual Network)安全虚拟网络
Check Point挺进移动设备和无线网络安全市场
Cisco技术 / 网络安全 / Configuring GRE and IPSec with IPX Routing

Configuring GRE and IPSec with IPX Routing

作者:     http://cisco.ccxx.net

  Router1
  
  Current configuration:
  !
  version 12.0
  service timestamps debug uptime
  service timestamps log uptime
  no service password-encryption
  !
  hostname router1
  !
  ip subnet-zero
  !
  ipx routing 00e0.b064.258e
  cns event-service server
  !
  crypto isakmp policy 10
  authentication pre-share
  group 2
  lifetime 3600
  crypto isakmp key cisco address 200.1.1.1
  !
  crypto ipsec transform-set tunnelset esp-des esp-md5-hmac
  !
  crypto map toBB local-address Loopback0
  crypto map toBB 10 ipsec-isakmp
  set peer 200.1.1.1
  set transform-set tunnelset
  match address 101
  !
  interface Loopback0
  ip address 100.1.1.1 255.255.255.0
  no ip directed-broadcast
  !
  interface Tunnel0
  no ip address
  no ip directed-broadcast
  no ip route-cache
  no ip mroute-cache
  ipx network CC
  tunnel source Serial0
  tunnel destination 150.0.0.2
  crypto map toBB
  !
  interface Ethernet0
  ip address 175.1.1.1 255.255.255.0
  no ip directed-broadcast
  ipx network AA
  !
  interface Ethernet1
  no ip address
  no ip directed-broadcast
  shutdown
  !
  interface Serial0
  ip address 150.0.0.1 255.255.255.0
  no ip directed-broadcast
  no ip route-cache
  no ip mroute-cache
  no fair-queue
  crypto map toBB
  !
  interface Serial1
  no ip address
  no ip directed-broadcast
  shutdown
  !
  ip classless
  ip route 0.0.0.0 0.0.0.0 150.0.0.2
  no ip http server
  !
  access-list 101 permit gre host 150.0.0.1 host 150.0.0.2
  !
  tftp-server flash:
  !
  line con 0
  transport input none
  line aux 0
  line vty 0 4
  login
  !
  end
  
  Router2
  
  Current configuration:
  !
  version 12.0
  service timestamps debug uptime
  service timestamps log uptime
  no service password-encryption
  !
  hostname router2
  !
  ip subnet-zero
  !
  ipx routing 0010.7b37.c8ae
  cns event-service server
  !
  crypto isakmp policy 10
  authentication pre-share
  group 2
  lifetime 3600
  crypto isakmp key cisco address 100.1.1.1
  !
  crypto ipsec transform-set tunnelset esp-des esp-md5-hmac
  !
  crypto map toAA local-address Loopback0
  crypto map toAA 10 ipsec-isakmp
  set peer 100.1.1.1
  set transform-set tunnelset
  match address 101
  !
  interface Loopback0
  ip address 200.1.1.1 255.255.255.0
  no ip directed-broadcast
  !
  interface Tunnel0
  no ip address
  no ip directed-broadcast
  no ip route-cache
  no ip mroute-cache
  ipx network CC
  tunnel source Serial0
  tunnel destination 150.0.0.1
  crypto map toAA
  !
  interface Ethernet0
  ip address 75.1.1.1 255.255.255.0
  no ip directed-broadcast
  ipx network BB
  !
  interface Ethernet1
  no ip address
  no ip directed-broadcast
  shutdown
  !
  interface Serial0
  ip address 150.0.0.2 255.255.255.0
  no ip directed-broadcast
  no ip route-cache
  no ip mroute-cache
  no fair-queue
  clockrate 9600
  crypto map toAA
  !
  interface Serial1
  no ip address
  no ip directed-broadcast
  shutdown
  !
  ip classless
  ip route 0.0.0.0 0.0.0.0 150.0.0.1
  no ip http server
  !
  access-list 101 permit gre host 150.0.0.2 host 150.0.0.1
  !
  line con 0
  transport input none
  line aux 0
  line vty 0 4
  login
  !
  end
  
  Network Diagram
  Cisco 2514 Routers
  
  


收藏本页

共 0 人推荐文章 Configuring GRE and IPSec with IPX Routing

Copyright © 2006 cisco.ccxx.net 版权所有.提供Cisco技术,Cisco培训,CCNA,CCNP,CCIE培训,Cisco论坛CCIE实验室
上海地区Cisco培训、CCNA培训、CCNP培训、CCIE培训