IP sec的VPN配置

tytuuu

左边的router：crypto isakmp policy 1hash md5authentication pre-sharecrypto isakmp key cisco123 address 202.96.15.88!crypto ipsec transform-set rtpset esp-des esp-md5-hmac!crypto map rtp 1 ipsec-isakmpset peer 202.96.15.88set transform-set rtpsetmatch address 102!inte***ce Ethernet0/0ip address 192.168.1.1 255.255.255.0no ip directed-broadcastip nat inside!inte***ce Ethernet0/1ip address 61.153.158.44 255.255.255.0no ip directed-broadcastip nat outsideno ip route-cacheno ip mroute-cachecrypto map rtpip nat inside source route-map nonat inte***ce Ethernet0/1 overloadip classlessip route 0.0.0.0 0.0.0.0 61.153.158.4x(网关)no ip http serveraccess-list 101deny ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255access-list 101 permit ip 192.168.1.0 0.0.0.255 anyaccess-list 102 permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255route-map nonat permit 10match ip address 102右边的router：crypto isakmp policy 1hash md5authentication pre-sharecrypto isakmp key cisco123 address 61.153.158.44!crypto ipsec transform-set rtpset esp-des esp-md5-hmac!crypto map rtp 1 ipsec-isakmpset peer 61.153.158.44set transform-set rtpsetmatch address 102!inte***ce Ethernet0/0ip address 192.168.2.1 255.255.255.0no ip directed-broadcastip nat inside!inte***ce Ethernet0/1ip address 202.96.15.88 255.255.255.0no ip directed-broadcastip nat outsideno ip route-cacheno ip mroute-cachecrypto map rtpip nat insi      1/2 12下一页尾页