采用默认配置通过IKE协商方式建立IPSec隧道示例
ar1为总部,ar2为分部,实验模拟采用默认配置通过IKE协商方式建立IPSec隧道示例
ar1配置命令
[ar1]int g0/0/1
[ar1-GigabitEthernet0/0/1]ip add 192.168.10.254 24
[ar1]int g0/0/0
[ar1-GigabitEthernet0/0/0]ip add 10.10.10.1 24
[ar1]ip route-static 20.20.20.0 24 10.10.10.2
[ar1]acl 3000
[ar1-acl-adv-3000]rule 5 permit ip source 192.168.10.0 0.0.0.255 destination 192.168