思科路由器站点到站点VPN

【思科路由器站点到站点VPN】 应用情况 , 公司总部分总互连 , 都有公网IP
R1路由器上连通性配置R1(config)#interface e0R1(config-if)#ip address 10.1.1.1 255.255.255.0R1(config-if)#no shutdownR1(config)#interface e1R1(config-if)#ip address 1.1.1.1 255.255.255.0R1(config-if)#no shutdownR1(config)#ip route 0.0.0.0 0.0.0.0 10.1.1.2R2路由器上连通性配置R2(config)#interface e0R2(config-if)#ip address 1.1.1.2 255.255.255.0R2(config-if)#no shutdownR2(config)#interface e1R2(config-if)#ip address 2.2.2.2 255.255.255.0R2(config-if)#no shutdownR2(config)#ip route 0.0.0.0 0.0.0.0 10.1.1.1R1路由器IpSec配置R1(config)#crypto isakmp enable (optional)默认启用R1路由器IpSec isakmp 配置(阶段一的策略)R1(config)#crypto isakmp policy 10R1(config-isakmp)#hash md5R1(config-isakmp)#authentication pre-sharedR1(config-isakmp)#encryption 3desR1(config-isakmp)#group 2R1路由器Pre-Share认证配置R1(config)#crypto isakmp key cisco address 10.1.1.2R1路由器IpSec变换集配置(阶段二的策略)R1(config)#crypto ipsec transform-set cisco esp-3des esp-md5-hmacR1 (cfg-crypto-trans)#mode tunnelR1路由器加密图的配置R1(config)#crypto map cisco10 ipsec-isakmpR1(config-crypto-map)#set peer 10.1.1.2R1(config-crypto-map)#set transform-set ciscoR1(config-crypto-map)#match address 101R1路由器定义感兴趣流量R1(config)#access-list 101 permit ip 1.1.1.0 0.0.0.255 2.2.2.0 0.0.0.255 R1路由器加密图绑定到接口R1(config)#interface e0R1(config-if)#crypto map cisco4、R2路由器IpSec配置R2(config)#crypto isakmp enable(optional)默认启用R2路由器IpSec isakmp 配置(阶段一的策略)R2(config)#crypto isakmp policy 10R2(config-isakmp)#hash md5R2(config-isakmp)#authentication pre-shareR2(config-isakmp)#encryption 3desR2(config-isakmp)#group 2R2路由器Pre-Share认证配置R2(config)#crypto isakmp key cisco address 10.1.1.1R2路由器IpSec变换集配置(阶段二的策略)R2(config)#crypto ipsec transform-set cisco esp-3des esp-md5-hmacR2(cfg-crypto-trans)#mode tunnelR2路由器加密图的配置R2(config)#crypto map cisco 10 ipsec-isakmpR2(config-crypto-map)#set peer 10.1.1.1R2(config-crypto-map)#set transform-set ciscoR2(config-crypto-map)#match address 101R2路由器定义感兴趣流量R2(config)#access-list 101 permit ip 2.2.2.0 0.0.0.255 1.1.1.0 0.0.0.255R2路由器加密图绑定到接口R2(config)#interface e0R2(config-if)#crypto map cisco

    推荐阅读