Vyos GRE Over IPsec 对接 Juniper SRX300

GTaylor

于 2023-06-20 09:13:04 发布

阅读量287

点赞数

分类专栏： Vyos Juniper 文章标签：数学建模

本文链接：https://blog.csdn.net/u012836361/article/details/131011100

版权

Vyos GRE Over IPsec 对接 Juniper SRX300

VYOS GRE Over IPsec 服务端

##############
##VYOS 服务端
##############
set interfaces loopback lo address 192.168.100.172/32

echo '>>>IPSec Server 配置<<<'
set vpn ipsec esp-group ESP-FNET-01 lifetime '3600'
set vpn ipsec esp-group ESP-FNET-01 mode 'tunnel'
set vpn ipsec esp-group ESP-FNET-01 pfs 'dh-group2'
set vpn ipsec esp-group ESP-FNET-01 proposal 1 encryption '3des'
set vpn ipsec esp-group ESP-FNET-01 proposal 1 hash 'sha1'
set vpn ipsec ike-group IKE-FNET-01 key-exchange 'ikev1'
set vpn ipsec ike-group IKE-FNET-01 lifetime '28800'
set vpn ipsec ike-group IKE-FNET-01 proposal 1 encryption '3des'
set vpn ipsec ike-group IKE-FNET-01 proposal 1 hash 'sha1'
set vpn ipsec interface 'eth0'
set vpn ipsec site-to-site peer @client authentication mode 'pre-shared-secret'
set vpn ipsec site-to-site peer @client authentication pre-shared-secret 'prekey'
set vpn ipsec site-to-site peer @client authentication remote-id '0.0.0.0'
set vpn ipsec site-to-site peer @client connection-type 'respond'
set vpn ipsec site-to-site peer @client default-esp-group 'ESP-FNET-01'
set vpn ipsec site-to-site peer @client ike-group 'IKE-FNET-01'
set vpn ipsec site-to-site peer @client ikev2-reauth 'inherit'
set vpn ipsec site-to-site peer @client local-address '124.71.123.202'
set vpn ipsec site-to-site peer @client tunnel 1 local prefix '192.168.100.172/32'