设为首页收藏本站language 语言切换
查看: 1743|回复: 0
收起左侧

[求助] IPsec dynamic 显示连接怎么Ping不通

[复制链接]
发表于 2014-3-22 11:04:55 | 显示全部楼层 |阅读模式
30鸿鹄币
crypto keyring abc
  pre-shared-key address 0.0.0.0 0.0.0.0 key shzygit***
!
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
lifetime 86000
crypto isakmp profile ppp
   keyring abc
   match identity address 0.0.0.0
!
!
crypto ipsec transform-set ccie esp-3des esp-sha-hmac
!
crypto dynamic-map dymap 5
set transform-set ccie
set isakmp-profile ppp
!
!
crypto map mymap 10 ipsec-isakmp dynamic dymap
!
!
!
!
!
interface GigabitEthernet0/0
ip address 172.16.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
!
interface GigabitEthernet0/1
ip address 172.16.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
!
interface GigabitEthernet0/2
ip address 211.136.***.*** 255.255.255.252
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
crypto map mymap
!




interface: GigabitEthernet0/2
    Crypto map tag: mymap, local addr 211.136.***.***

   protected vrf: (none)
   local  ident (addr/mask/prot/port): (172.16.0.0/255.255.255.0/0/0)
   remote ident (addr/mask/prot/port): (192.168.19.0/255.255.255.0/0/0)
   current_peer 116.226.59.143 port 5793
     PERMIT, flags={}
    #pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
    #pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0
    #pkts compressed: 0, #pkts decompressed: 0
    #pkts not compressed: 0, #pkts compr. failed: 0
    #pkts not decompressed: 0, #pkts decompress failed: 0
    #send errors 0, #recv errors 0

     local crypto endpt.: 211.136.***.***, remote crypto endpt.: 116.226.59.143
     path mtu 1500, ip mtu 1500, ip mtu idb GigabitEthernet0/2
     current outbound spi: 0xB78177F(192419711)
     PFS (Y/N): N, DH group: none

     inbound esp sas:
      spi: 0x8BAC2B4F(2343316303)
        transform: esp-3des esp-sha-hmac ,
        in use settings ={Tunnel, }
        conn id: 2013, flow_id: Onboard VPN:13, sibling_flags 80000046, crypto m
ap: mymap
        sa timing: remaining key lifetime (k/sec): (4511873/3597)
        IV size: 8 bytes
        replay detection support: Y
        Status: ACTIVE

     inbound ah sas:

     inbound pcp sas:

     outbound esp sas:
      spi: 0xB78177F(192419711)
        transform: esp-3des esp-sha-hmac ,
        in use settings ={Tunnel, }
        conn id: 2014, flow_id: Onboard VPN:14, sibling_flags 80000046, crypto m
ap: mymap
        sa timing: remaining key lifetime (k/sec): (4511873/3597)
        IV size: 8 bytes
        replay detection support: Y
        Status: ACTIVE

     outbound ah sas:

     outbound pcp sas:

公司总部是固定IP,路由设备是2921
分部是电信PPPOE用户,路由设备是linksys RV072


2

2

3

3

4

4

1

1
您需要登录后才可以回帖 登录 | 论坛注册

本版积分规则

QQ|Archiver|手机版|小黑屋|sitemap|鸿鹄论坛 ( 京ICP备14027439号 )  

GMT+8, 2025-2-3 08:48 , Processed in 0.060253 second(s), 16 queries , Redis On.  

  Powered by Discuz!

  © 2001-2025 HH010.COM

快速回复 返回顶部 返回列表