Настройка IPSec+GRE+OSPF на Cisco IOS через Crypto-Map

crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share

crypto isakmp key 123456 address 10.10.20.1
crypto ipsec transform-set TUNNEL_SET esp-3des esp-md5-hmac
mode tunnel

crypto map TUNNEL 10 ipsec-isakmp
set peer 10.10.20.1
set transform-set TUNNEL_SET
match address 100

interface Tunnel0
description -= REMOTE_SIDE =-
ip address 10.0.0.1 255.255.255.252
ip ospf 1 area 0
tunnel source Fa0/1
tunnel destination 10.10.20.1

interface Fa0/0
description -= LAN =-
ip address 192.168.1.1 255.255.255.0
ip ospf 1 area 0

interface Fa0/1
description -= WAN =-
ip address 10.10.10.1 255.255.255.0
crypto map TUNNEL

router ospf 1
log-adjacency-changes

ip route 0.0.0.0 0.0.0.0 10.10.10.2 name ISP

access-list 100 permit gre host 10.10.10.1 host 10.10.20.1

Related Posts

12.09.2017 · XDriver · Комментариев нет
Метки:  · Рубрики: Cisco

Написать комментарий

Вы должны войти, чтобы комментировать.