在PIX上面配置remote vpn:
crypto isakmp enable outside
crypto isakmp policy 10
authentication pre-share
encryption des
hash md5
group 2
exit
唐朝
女子用的
铜镜能照清楚人吗
crypto ipsec transform-set myset esp-des esp-md5-hmac
crypto dynamic-map dymap 30 set transform-set myset
crypto map mymap 30 ipsec-isakmp dynamic dymap
crypto map mymap interface outside
ip local pool ippool 10.1.1.1-10.1.1.254 mask 255.255.255.0
tunnel-group ipsecgroup type remote-access
tunnel-group ipsecgroup general-attributes
address-pool ippool
tunnel-group ipsecgroup ipsec-attributes
pre-shared-key cisco
username cisco password cisco
access-list nonat permit ip 172.16.0.0 255.255.0.0 10.1.1.0 255.255.255.0
十八届三中全会意义PIX-1 To PIX-3 、PIX-4：
hostname pix-1
================================================================
interface Ethernet0
no shutdown
nameif inside
ip address 172.16.4.1 255.255.255.0
interface Ethernet1
no shutdown
nameif outside
security-level 0
ip address 218.85.130.1 255.255.255.0 ==》ip的配置
================================================================
================================================================
nat (inside) 1 0.0.0.0 0.0.0.0
global (outside) 1 interface ==》做NAT
================================================================
================================================================
route outside 0.0.0.0 0.0.0.0 218.85.130.6
route inside 172.16.0.0 255.255.0.0 172.16.4.254 ==》联通到internet岩矿分析与
鉴定 ================================================================
route inside 172.16.64.0 255.255.255.0 172.16.4.254
================================================================
PIX-1:
pgm_430meicrypto isakmp enable outside
crypto isakmp policy 10
authentication pre-share
encryption des
hash md5
group 2
exit
crypto isakmp key cisco address 219.85.130.1
crypto isakmp key cisco address 220.85.130.1
crypto ipsec transform-set myset esp-des esp-md5-hmac
access-list topix3 permit ip 172.16.0.0 255.255.0.0 110.1.1.0 255.255.255.0
access-list topix4 permit ip 172.16.0.0 255.255.0.0 100.1.1.0 255.255.255.0
access-list nonat permit ip 172.16.0.0 255.255.0.0 110.1.1.0 255.255.255.0
access-list nonat permit ip 172.16.0.0 255.255.0.0 100.1.1.0 255.255.255.0
crypto map mymap 10 match address topix3
crypto map mymap 10 set peer 219.85.130.1
crypto map mymap 10 set transform-set myset
crypto map mymap interface outside
crypto map mymap 20 match address topix4
crypto map mymap 20 set peer 220.85.130.1
crypto map mymap 20 set transform-set myset
nat (inside) 0 access-list nonat
PIX-3:
interface Ethernet0
no shutdown
nameif outside
ip address 219.85.130.1 255.255.255.0
interface Ethernet1
基本法104条no shutdown
nameif inside
ip address 110.1.1.1 255.255.255.0
nat (inside) 1 0 0
global (outside) 1 interface
route outside 0.0.0.0 0.0.0.0 219.85.130.6
crypto isakmp enable outside
crypto isakmp policy 10
authentication pre-share
encryption des
hash md5
group 2
exit
crypto isakm
p key cisco address 218.85.130.1
陈小蒙crypto ipsec transform-set myset esp-des esp-md5-hmac
access-list topix3 permit ip 110.1.1.0 255.255.255.0 172.16.0.0 255.255.0.0
crypto map mymap 10 match address topix3
crypto map mymap 10 set peer 218.85.130.1
crypto map mymap 10 set transform-set myset
crypto map mymap interface outside
nat (inside) 0 access-list topix3
PIX-4:
interface Ethernet0
no shutdown
nameif outside
ip address 220.85.130.1 255.255.255.0
interface Ethernet1
no shutdown
nameif inside
ip address 100.1.1.1 255.255.255.0
nat (inside) 1 0 0
global (outside) 1 interface
route outside 0.0.0.0 0.0.0.0 220.85.130.6
crypto isakmp enable outside
crypto isakmp policy 10
authentication pre-share
encryption des
hash md5
group 2
exit
crypto isakmp key cisco address 218.85.130.1
crypto ipsec transform-set myset esp-des esp-md5-hmac
access-list topix4 permit ip 100.1.1.0 255.255.255.0 172.16.0.0 255.255.0.0
crypto map mymap 10 match address topix4
crypto map mymap 10 set peer 218.85.130.1
crypto map mymap 10 set transform-set myset
crypto map mymap interface outside
nat (inside) 0 access-list topix4
豫公网安备41160202000603
站长QQ:729038198
关于我们
投诉建议