锐捷复习笔记-IPSec VPN

hostname R1

interface GigabitEthernet 0/0

 no switchport

 ip address 192.168.10.1 255.255.255.0

interface Loopback 0

 ip address 1.1.1.1 255.255.255.255

     

ip route 0.0.0.0 0.0.0.0 192.168.10.254

hostname R2

ip access-list extended 101

 10 permit ip 192.168.10.0 0.0.0.255 192.168.20.0 0.0.0.255

crypto isakmp policy 1

 encryption 3des

 authentication pre-share

crypto isakmp keepalive 5 periodic

crypto isakmp key 7 050a1337092610 address 34.0.0.4

crypto ipsec transform-set set esp-des esp-md5-hmac

crypto map map 5 ipsec-isakmp

 set peer 34.0.0.4 

 set transform-set set

 match address 101

interface GigabitEthernet 0/0

 no switchport

 ip address 192.168.10.254 255.255.255.0

interface GigabitEthernet 0/1

 no switchport

 ip address 23.0.0.2 255.255.255.0

 ip ospf 1 area 0

 crypto map map

interface Loopback 0

 ip address 2.2.2.2 255.255.255.255

 ip ospf 1 area 0

router ospf 1

 graceful-restart

ip route 192.168.20.0 255.255.255.0 23.0.0.3

hostname R3

interface GigabitEthernet 0/0

 no switchport

 ip address 23.0.0.3 255.255.255.0

 ip ospf 1 area 0

interface GigabitEthernet 0/1

 no switchport

 ip address 34.0.0.3 255.255.255.0

 ip ospf 1 area 0

interface Loopback 0

 ip address 3.3.3.3 255.255.255.255

 ip ospf 1 area 0

router ospf 1

 graceful-restart

hostname R4

ip access-list extended 101

 10 permit ip 192.168.20.0 0.0.0.255 192.168.10.0 0.0.0.255

crypto isakmp policy 1

 encryption 3des

 authentication pre-share

crypto isakmp keepalive 5 periodic

crypto isakmp key 7 035122110c3706 address 23.0.0.2

crypto ipsec transform-set set esp-des esp-md5-hmac

crypto map map 5 ipsec-isakmp

 set peer 23.0.0.2 

 set transform-set set

 match address 101

interface GigabitEthernet 0/0

 no switchport

 ip address 34.0.0.4 255.255.255.0

 ip ospf 1 area 0

 crypto map map

interface GigabitEthernet 0/1

 no switchport

 ip address 192.168.20.254 255.255.255.0

interface Loopback 0

 ip address 4.4.4.4 255.255.255.255

router ospf 1

 graceful-restart

ip route 192.168.10.0 255.255.255.0 34.0.0.3

hostname R5

interface GigabitEthernet 0/0

 no switchport

 ip address 192.168.20.1 255.255.255.0

      

interface Loopback 0

 ip address 5.5.5.5 255.255.255.255

ip route 0.0.0.0 0.0.0.0 192.168.20.254