wKioL1QxQcTxSmGUAAH40aBiThw332.jpg

 

 

 

 

 

 

 

 

 

 

 

海淀
ip route 0.0.0.0 0.0.0.0 10.1.1.254
crypto isakmp policy 10
 encr 3des
 authentication pre-share
 group 2 
crypto isakmp key cisco address 20.1.1.1
!        
!        
crypto ipsec transform-set hujianli-set esp-aes esp-md5-hmac
!        
crypto map mymap 1 ipsec-isakmp
 set peer 20.1.1.1
 set transform-set hujianli-set
 match address 100
access-list 100 permit ip 192.168.0.0 0.0.255.255 192.16.0.0 0.0.255.255
access-list 100 permit ip 192.168.0.0 0.0.255.255 172.16.0.0 0.0.255.255

北京
ip route 0.0.0.0 0.0.0.0 20.1.1.254
crypto isakmp policy 10
 encr 3des
 authentication pre-share
 group 2 
crypto isakmp key cisco address 10.1.1.1
crypto isakmp key cisco address 30.1.1.1
!        
!        
crypto ipsec transform-set hujianli-set esp-aes esp-md5-hmac
!        
crypto map mymap 1 ipsec-isakmp
 set peer 10.1.1.1
 set transform-set hujianli-set
 match address 100
crypto map mymap 2 ipsec-isakmp
set peer 30.1.1.1
 set transform-set hujianli-set
 match address 101

access-list 100 permit ip 192.16.0.0 0.0.255.255 192.168.0.0 0.0.255.255
access-list 100 permit ip 172.16.0.0 0.0.255.255 192.168.0.0 0.0.255.255
access-list 101 permit ip 192.16.0.0 0.0.255.255 172.16.0.0 0.0.255.255
access-list 101 permit ip 192.168.0.0 0.0.255.255 172.16.0.0 0.0.255.255

朝阳
ip route 0.0.0.0 0.0.0.0 30.1.1.254
crypto isakmp policy 10
 encr 3des
 authentication pre-share
 group 2 
crypto isakmp key cisco address 20.1.1.1
!        
!        
crypto ipsec transform-set hujianli-set esp-aes esp-md5-hmac
!        
crypto map mymap 2 ipsec-isakmp
 set peer 20.1.1.1
 set transform-set hujianli-set
 match address 100
access-list 100 permit ip 172.16.0.0 0.0.255.255 192.16.0.0 0.0.255.255
access-list 100 permit ip 172.16.0.0 0.0.255.255 192.168.0.0 0.0.255.255

isp
interface FastEthernet1/0
 ip address 10.1.1.254 255.255.255.0
       
interface FastEthernet2/0
 ip address 20.1.1.254 255.255.255.0
       
interface FastEthernet3/0
 ip address 30.1.1.254 255.255.255.0