溫馨提示×
您好，登錄后才能下訂單哦！
點擊 登錄注冊 即表示同意《億速云用戶服務條款》
您好，登錄后才能下訂單哦！
拓撲圖：![[簡簡單單]神州數碼防火墻與路由器實現IPSec](https://cache.yisu.com/upload/information/20200217/69/5533.jpg)
一、R2的配置
接口配置
interface FastEthernet0/0**
ip address 10.135.101.254 255.255.255.0
interface GigaEthernet0/3**
ip address 11.1.1.2 255.255.255.252
crypto map VP1隧道配置
crypto isakmp key 12345 11.1.1.1 255.255.255.255
!
crypto isakmp policy 1
group 2
hash md5
!
crypto ipsec transform-set p2
transform-type esp-des esp-md5-hmac
!
crypto map VP1 0 ipsec-isakmp
set peer 11.1.1.1
set pfs group2
set transform-set p2
match address vpacl
感興趣的流量配置
ip access-list extended vpacl
permit ip 10.135.101.0 255.255.255.0 192.168.1.0 255.255.255.0
二、FW1的配置
![[簡簡單單]神州數碼防火墻與路由器實現IPSec](https://cache.yisu.com/upload/information/20200217/69/5536.jpg)
![[簡簡單單]神州數碼防火墻與路由器實現IPSec](https://cache.yisu.com/upload/information/20200217/69/5538.jpg)
![[簡簡單單]神州數碼防火墻與路由器實現IPSec](https://cache.yisu.com/upload/information/20200217/69/5540.jpg)
![[簡簡單單]神州數碼防火墻與路由器實現IPSec](https://cache.yisu.com/upload/information/20200217/69/5546.jpg)
![[簡簡單單]神州數碼防火墻與路由器實現IPSec](https://cache.yisu.com/upload/information/20200217/69/5549.jpg)
![[簡簡單單]神州數碼防火墻與路由器實現IPSec](https://cache.yisu.com/upload/information/20200217/69/5552.jpg)
![[簡簡單單]神州數碼防火墻與路由器實現IPSec](https://cache.yisu.com/upload/information/20200217/69/5557.jpg)
![[簡簡單單]神州數碼防火墻與路由器實現IPSec](https://cache.yisu.com/upload/information/20200217/69/5559.jpg)
三、在FW1或R2內ping對端內網網關，觸發隧道，連通之后狀態如下：
![[簡簡單單]神州數碼防火墻與路由器實現IPSec](https://cache.yisu.com/upload/information/20200217/69/5563.jpg)
![[簡簡單單]神州數碼防火墻與路由器實現IPSec](https://cache.yisu.com/upload/information/20200217/69/5564.jpg)
免責聲明：本站發布的內容（圖片、視頻和文字）以原創、轉載和分享為主，文章觀點不代表本網站立場，如果涉及侵權請聯系站長郵箱：is@yisu.com進行舉報，并提供相關證據，一經查實，將立刻刪除涉嫌侵權內容。
