ipsec ip替换_点到多点ipsec-vpn NAT穿透和固定IP共存

总部

#

snmp-agent local-engineid 800007DB03000000000000

snmp-agent

#

clock timezone Indian Standard Time minus 05:13:20

clock daylight-saving-time Day Light Saving Time repeating 12:32 9-1 12:32 11-23

00:00 2005 2005

#

portal local-server load portalpage.zip

#

drop illegal-mac alarm

#

set cpu-usage threshold 80 restore 75

#

ipsec proposal tran1

esp authentication-algorithm sha1

esp encryption-algorithm 3des

#

ike peer rut2 v1

exchange-mode aggressive

pre-shared-key simple 123456

nat traversal

#

ipsec policy-template use1 10

ike-peer rut2

proposal tran1

#

ipsec policy policy1 10 isakmp template use1

#

aaa

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default

domain default_admin

local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$

local-user admin service-type http

#

firewall zone Local

priority 15

#

interface GigabitEthernet0/0/0

ip address 10.0.5.2 255.255.255.0

ipsec policy policy1

#

interface GigabitEthernet0/0/1

ip address 192.168.3.1 255.255.255.0

#

interface GigabitEthernet0/0/2

#

interface NULL0

#

ip route-static 0.0.0.0 0.0.0.0 10.0.5.1

#

user-interface con 0

authentication-mode password

user-interface vty 0 4

user-interface vty 16 20

#

wlan ac

#

return

分部1 ipsec

#

snmp-agent local-engineid 800007DB03000000000000

snmp-agent

#

clock timezone Indian Standard Time minus 05:13:20

clock daylight-saving-time Day Light Saving Time repeating 12:32 9-1 12:32 11-23

00:00 2005 2005

#