vpn配置手冊(cè)-資料下載頁(yè)
2024-12-16 14:12本頁(yè)面
【導(dǎo)讀】{ "error_code": 17, "error_msg": "Open api daily request limit reached" }
【正文】 y PIX basic configuration 定義分配的地址池 : ip local pool POOL 定義走 VPN的流量 : accesslist nonat permit ip any nat (inside) 0 accesslist nonat 允許進(jìn)入的流量： Sysopt connection permitipsec IKE Phase I policy Isakmp enable outside Isakmp identity address 這個(gè)配置非常重要，因?yàn)?PIX默認(rèn)是 identity hostname Isakmp policy 10 authentication preshare Isakmp policy 10 encryption des Isakmp policy 10 hash md5 Isakmp policy 10 group 2 定義用戶(hù)名 Username ccie password ccie IPSec Phase II policy crypto ipsec transformset cisco espdes espmd5hmac crypto dynamicmap dymap 10 set transformset cisco crypto map cisco 10 ipsecisakmp dynamic dymap crypto map cisco client configuration address initiate crypto map cisco client configuration address respond crypto map cisco client authentication LOCAL crypto map cisco interface outside VPN Group的配置 vpngroup cisco addresspool POOL vpngroup cisco password cisco 實(shí)驗(yàn)十五 、 Redundance VPN Redundance VPN 技術(shù)特點(diǎn)： 使用 cisco 的 hsrp技術(shù)實(shí)現(xiàn) vpn的 redundance。 能夠?qū)崿F(xiàn) vpn的快速切換。 對(duì)連接的 client是透明的， client只需要連接 hrsp地址。 basic configuration Initial： ip route e0 Redun_1: ip route e0/0 interface e0/0 ip add standby 1 ip standby 1 name Redun standby 1 priority 110 standby 1 preempt Redun_2: Ip route e0/0 interface e0/0 ip add standby 1 ip standby 1 name Redun IKE Phase I policy Initial: crypto isakmp policy 10 hash md5 authentication preshare crypto isakmp key cisco address crypto isakmp keepalive 10 快速的探測(cè)對(duì)端是不是還存在 Redun_1: crypto isakmp policy 10 hash md5 authentication preshare crypto isakmp key cisco address crypto isakmp keepalive 10 Redun_2: crypto isakmp policy 10 hash md5 authentication preshare crypto isakmp key cisco address crypto isakmp keepalive 10 IPSec Phase II policy Initial: crypto ipsec transformset cisco espdes espmd5hmac accesslist 101 permit ip crypto map cisco 10 ipsecisa match address 101 set transformset cisco set peer Redun_1: crypto ipsec transformset cisco espdes espmd5hmac accesslist 101 permit ip crypto map cisco 10 ipsecisa match address 101 set transformset cisco set peer Redun_2: crypto ipsec transformset cisco espdes espmd5hmac accesslist 101 permit ip crypto map cisco 10 ipsecisa match address 101 set transformset cisco set peer Apply VPN Configuration Initial: interface Ether0 crypto map cisco Redun_1: interface Ether0/0 crypto map cisco redundancy Redun Redun_2: interface Ether0/0 crypto map cisco redundancy Redun
教學(xué)課件相關(guān)推薦
鄂ICP備17016276號(hào)-1