|
vSRX version junos-vsrx-12.1X47-D10.4-domestic
初始化配置接口和路由vSRX1
set system host-name vSRX1
set interfaces ge-0/0/0 unit 0 description "Zone untrust"
set interfaces ge-0/0/0 unit 0 family inet address 202.100.1.1/24
set interfaces ge-0/0/1 unit 0 description "Zone trust"
set interfaces ge-0/0/1 unit 0 family inet address 1.1.1.1/24
set routing-options static route 2.2.2.0/24 next-hop 202.100.1.2
第一步:定义IKE proposal
set security ike proposal ike-phase1-proposal authentication-method pre-shared-keys
set security ike proposal ike-phase1-proposal dh-group group2
set security ike proposal ike-phase1-proposal authentication-algorithm md5
set security ike proposal ike-phase1-proposal encryption-algorithm 3des-cbc
IPsecVPN之juniper vSRX和思科c7200实验.pdf
(291.79 KB, 下载次数: 116)
|
|