IPsec vpn

cluo17

在GW（R3）上做了pat， R1和R3的默认网关都指向R2，R4默认网关指向R3，R1和R4上配置IPSEC
在R1和R4上 都执行：no crypto ipsec nat-transparency udp-encaps
还是能正常通讯，这是为何？ 而且GW会弹出一条日志







R1：
ip access-list extended vpn
permit ip 1.1.1.0 0.0.0.255 2.2.2.0 0.0.0.255


crypto isakmp policy 10
authentication pre-share
crypto isakmp key cisco address 100.1.1.1
crypto ipsec transform-set tran esp-3des esp-md5-hmac
no crypto ipsec nat-transparency udp-encaps
crypto map map 10 ipsec-isakmp
set peer 100.1.1.1
set transform-set tran
match address vpn
crypto map map

R4：
ip access-list extended vpn
permit ip 2.2.2.0 0.0.0.255 1.1.1.0 0.0.0.255


crypto isakmp policy 10
authentication pre-share
crypto isakmp key cisco address 202.100.1.1
crypto ipsec transform-set tran esp-3des esp-md5-hmac
no crypto ipsec nat-transparency udp-encaps
crypto map map 10 ipsec-isakmp
set peer 202.100.1.1
set transform-set tran
match address vpn
crypto map map

897162670

SPI