云计算专业IPsec实验

最新推荐文章于 2022-02-14 19:11:23 发布

菜菜是真菜

最新推荐文章于 2022-02-14 19:11:23 发布

阅读量225

点赞数 1

分类专栏：云安全实验文章标签： ipsec

本文链接：https://blog.csdn.net/sconnie/article/details/113771213

版权

IPsec实验：
拓扑图如图所示：
在这里插入图片描述
路由器配置命令：

AR1：
system-view
sysname ISP
interface g0/0/0
ip address 6.6.6.2 29
interface g0/0/1
ip address 16.16.16.2 29

AR2：
system-view
sysname CQ
interface g0/0/0
ip address 6.6.6.1 29
interface g0/0/2
ip address 192.168.6.254 24
ip route-static 0.0.0.0 0.0.0.0 6.6.6.2

ipsec proposal CQ
encapsulation-mode tunnel
transform esp
esp authentication-algorithm sha1
esp encryption-algorithm 3des

ipsec policy CQ-SH 10 manual
security acl 3000
proposal CQ
tunnel local 6.6.6.1
tunnel remote 16.16.16.1
sa spi inbound esp 123456
sa spi outbound esp 654321
sa string-key inbound esp cipher connie
sa string-key outbound esp cipher susan

interface g0/0/0
ipsec policy CQ-SH

acl 3000
rule 5 permit ip