华为***配置命令

interface GigabitEthernet0/0/0
ip address 100.0.0.1 255.255.255.252

interface GigabitEthernet0/0/1
ip address 172.16.10.254 255.255.255.0

ip route-static 0.0.0.0 0.0.0.0 100.0.0.2

ike proposal 1
encryption-algorithm 3des-cbc
authentication-algorithm md5
authentication-method pre-share
dh group2

ike peer 200.0.0.1 v1
pre-shared-key simple tedu
ike-proposal 1
remote-address 200.0.0.1

acl number 3000
rule 5 permit ip source 172.16.10.0 0.0.0.255 destination 10.10.33.0 0.0.0.255

ipsec proposal 1
transform ah-esp

ipsec policy yf 1 isakmp
security acl 3000
ike-peer 200.0.0.1
proposal 1

interface GigabitEthernet0/0/0
ipsec policy yf

display ike sa
display ipsec sa

Tracert加ip地址 //路径追踪

转载于:https://blog.51cto.com/13562306/2070292