vpn（ipsec）的配置－路由器配置（內(nèi)部培訓(xùn)）神州數(shù)碼網(wǎng)絡(luò)大學(xué)

1、實(shí)驗(yàn)四十四、實(shí)驗(yàn)四十四、VPN（IPSec）的配置）的配置一、實(shí)驗(yàn)?zāi)康?.掌握手工配置密鑰建立VPN的配置2.理解密鑰在隧道建立過(guò)程中的作用二、應(yīng)用環(huán)境IPSec實(shí)現(xiàn)了在網(wǎng)絡(luò)上的數(shù)據(jù)機(jī)密性、完整性和源認(rèn)證的功能，有效的保護(hù)了數(shù)據(jù)。手工配置密鑰減少了密鑰交換的開(kāi)銷，提高了效率三、實(shí)驗(yàn)設(shè)備1.DCR1751兩臺(tái)2.PC機(jī)兩臺(tái)四、實(shí)驗(yàn)拓?fù)湮?、?shí)驗(yàn)要求配置表RouterARouterBF00192.168.0.124F00192.168.2.1

2、24S11(DCE)192.168.1.124S10192.168.1.224PCSERVERIP192.168.0.1024192.168.2.224網(wǎng)關(guān)192.168.0.1192.168.2.1結(jié)果：結(jié)果：在路由器A與B之間建立VPN，保護(hù)從PC到SERVER的數(shù)據(jù)攻城獅論壇bbs.#^_^#.版權(quán)歸原作者所有本資料僅供試讀攻城獅論壇(技術(shù)生活)群2258097spi:0x7d0(2000)transfm:ahmd5hmacinu

3、sesettings=Tunnelnosatimingoutboundespsas:spi:0x3e9(1001)transfm:esp3desinusesettings=Tunnelnosatimingoutboundahsas:spi:0x3e8(1000)transfm:ahmd5hmacinusesettings=TunnelnosatimingRouterA#shcryptomap！查看！查看IPSec映射映射CryptoMa

4、pmy10ipsecmanualExtendedIPaccesslist101permitip192.168.0.0255.255.255.0192.168.2.0255.255.255.0peer=192.168.1.2Inboundespspi:2001cipherkey:ffeeddccbbaa001122334455667788999988776655443322authkeyInboundahspi:2000key:ffeed

5、dccbbaa00112233445566778899Outboundespspi:1001cipherkey:aabbccddeeff001122334455667788999988776655443322authkeyOutboundahspi:1000key:aabbccddeeff00112233445566778899Transfmsets=oneRouterA#shcryptoipsectransfmset！查看轉(zhuǎn)換集！查看