2.1 IKEv2 标准 IOS vs ASA Crypto Map
-------------------------------------------------------
.1 .1 .10 .10 .1 .1 .10
-------Branch--------Internet-----Center-ASA-----Inside---
172.16.1.1 202.100.1.0 61.128.1.0 10.1.1.0
--------------------------------------------------------------
IOS vs ASA Crypto Map IKEv2
---------------------------------------------------
hostname Branch
interface loopback 0
ip address 172.16.1.1 255.255.255.0
interface FastEthernet 0/0
ip address 202.100.1.1 255.255.255.0
no shutdown
duplex full
ip route 0.0.0.0 0.0.0.0 202.100.1.10
hostname Internet
interface FastEthernet 0/0
ip address 202.100.1.10 255.255.255.0
no shutdown
interface FastEthernet 0/1
ip address 61.128.1.10 255.255.255.0
no shutdown
hostname Center-ASA
interface GigabitEthernet 1
nameif Outside
security-level 0
ip address 61.128.1.1 255.255.255.0
no shutdown
interface GigabitEthernet 2
nameif Inside
security-level 100
ip address 10.1.1.1 255.255.255.0
no shutdown
route Outside 0.0.0.0 0.0.0.0 61.128.1
-------------------------------------------------------
.1 .1 .10 .10 .1 .1 .10
-------Branch--------Internet-----Center-ASA-----Inside---
172.16.1.1 202.100.1.0 61.128.1.0 10.1.1.0
--------------------------------------------------------------
IOS vs ASA Crypto Map IKEv2
---------------------------------------------------
hostname Branch
interface loopback 0
ip address 172.16.1.1 255.255.255.0
interface FastEthernet 0/0
ip address 202.100.1.1 255.255.255.0
no shutdown
duplex full
ip route 0.0.0.0 0.0.0.0 202.100.1.10
hostname Internet
interface FastEthernet 0/0
ip address 202.100.1.10 255.255.255.0
no shutdown
interface FastEthernet 0/1
ip address 61.128.1.10 255.255.255.0
no shutdown
hostname Center-ASA
interface GigabitEthernet 1
nameif Outside
security-level 0
ip address 61.128.1.1 255.255.255.0
no shutdown
interface GigabitEthernet 2
nameif Inside
security-level 100
ip address 10.1.1.1 255.255.255.0
no shutdown
route Outside 0.0.0.0 0.0.0.0 61.128.1