gre over ipsec VPN 求高手解答问题

UID: 142998

R1
ike local-name center
ike peer branch
exchange-mode aggressive
pre-shared-key simple 97lab
id-type name
remote-name branch
quit
ipsec propsal yy
quit
ipsec policy-template tt 10
ike-peer branch
propsal yy
quit
ipsec policy h3c 10 isakmp template tt
acl number 2000
rule permit sou any
quit
interface loopback 0
ip address 10.1.1.1 32
interface loopback 1
ip address 10.1.2.1 32
quit
ip route-static 0.0.0.0 0.0.0.0 15.1.1.2
ip route-static 10.2.1.1 255.255.255.255 15.1.1.2
int tunnel 12
ip address 10.1.12.1 255.255.255.0
source loopback 1
destination 10.2.1.1
keepalive
quit
interface g0/1/2
nat outbound 2000
ip add 15.1.1.1 24
ipsec police h3c
quit
ospf 1
area 0.0.0.0
network 10.0.0.0 0.255.255.255



R5
dhcp enable
dhcp server ip-pool 52
network 25.1.1.0 mask 255.255.255.0
gateway-list 25.1.1.1
int loopback  1
ip address 5.5.5.5 32
int g0/1/1
ip add 25.1.1.1 24


R2
ike local-name branch
ike peer center
exchange-mode aggressive
pre-shared-key simple 97lab
id-type name
remote-name center
remote-address 15.1.1.1
quit
ipsec propsal yy
quit
ipsec policy h3c 10 isakmp
security acl 3021
ike-peer center
propsal yy
quit
acl number 3021
rule permit ip sou 10.2.1.1 0 des 10.1.2.1 0
rule deny ip
quit
acl number 2000
rule permit sou any
quit
interface loopback 0
ip address 10.2.2.2 32
interface loopback 1
ip address 10.2.1.1 32
quit
ip route-static 0.0.0.0 0.0.0.0 15.1.1.2
ip route-static 10.1.2.1 255.255.255.255 25.1.1.1
int tunnel 12
ip address 10.1.12.2 255.255.255.0
source loopback 1
destination 10.1.2.1
keepalive
quit
interface g0/1/2
nat outbound 2000
ip add dhcp-alloc
ipsec police h3c
quit
ospf 1
area 0.0.0.0
network 10.0.0.0 0.255.255.255

UID: 99839

游客，如果您要查看本帖隐藏内容请登录

UID: 45837

游客，如果您要查看本帖隐藏内容请登录

UID: 170958

游客，如果您要查看本帖隐藏内容请登录

UID: 136463

游客，如果您要查看本帖隐藏内容请登录

UID: 136934

游客，如果您要查看本帖隐藏内容请登录

UID: 138291

游客，如果您要查看本帖隐藏内容请登录

UID: 36932

游客，如果您要查看本帖隐藏内容请登录

UID: 594667

游客，如果您要查看本帖隐藏内容请登录

UID: 594667

游客，如果您要查看本帖隐藏内容请登录

UID: 594667

游客，如果您要查看本帖隐藏内容请登录