[eNSP]建立IPSec隧道

1、配置静态路由
[AR 1]ip route-static 200.2.2.0 24 200.1.1.2
[AR 1]ip route-static 192.168.2.0 24 200.2.2.1
[AR 3]ip route-static 200.1.1.0 24 200.2.2.2
[AR 3]ip route-static 192.168.1.0 24 200.1.1.12、配置ACL，定义各自要保护的数据流
[AR 1-acl-adv-3001]rule permit ip source 192.168.1.0 0.0.0.255 destination 192.168.2.0 0.0.0.255
[AR 3-acl-adv-3001]rule permit ip source 192.168.2.0 0.0.0.255 destination 192.168.1.0 0.0.0.2553、创建IPSec安全协议	
[AR 1]ipsec proposal tran1
[AR 1-ipsec-proposal-tran1]esp authentication-algorithm sha1
[AR 3]ipsec proposal tran1
[AR 3-ipsec-proposal-tran1]esp authentication-algorithm sha14、配置安全策略
[AR 1]ipsec policy map1 10 manual
[AR 1-ipsec-policy-manual-map1-10]security acl 3001
[AR 1-ipsec-policy-manual-map1-10]proposal tran1
[AR 1-ipsec-policy-manual-map1-10]tunnel remote 200.2.2.1	
[AR 1-ipsec-policy-manual-map1-10]tunnel local 200.1.1.1
[AR 1-ipsec-policy-manual-map1-10]sa spi outbound esp 12345	
[AR 1-ipsec-policy-manual-map1-10]sa spi inbound esp 54321	
[AR 1-ipsec-policy-manual-map1-10]sa string-key outbound esp simple abc	
[AR 1-ipsec-policy-manual-map1-10]sa string-key inbound esp simple cba[AR 3]ipsec policy use1 10 manual
[AR 3-ipsec-policy-manual-use1-10]security acl 3001
[AR 3-ipsec-policy-manual-use1-10]proposal tran1
[AR 3-ipsec-policy-manual-use1-10]tunnel remote 200.1.1.1	
[AR 3-ipsec-policy-manual-use1-10]tunnel local 200.2.2.1	
[AR 3-ipsec-policy-manual-use1-10]sa spi outbound esp 54321	
[AR 3-ipsec-policy-manual-use1-10]sa spi inbound esp 12345	
[AR 3-ipsec-policy-manual-use1-10]sa string-key outbound esp simple cba	
[AR 3-ipsec-policy-manual-use1-10]sa string-key inbound esp simple abc5、在接口上引用安全策略
[AR 1-GigabitEthernet0/0/0]ipsec policy map1
[AR 3-GigabitEthernet0/0/0]ipsec policy use1

本文来自互联网用户投稿，文章观点仅代表作者本人，不代表本站立场，不承担相关法律责任。如若转载，请注明出处。 如若内容造成侵权/违法违规/事实不符，请点击【内容举报】进行投诉反馈！