IPsec之两台vSRX-L2L-基础实验

goodluck

vSRX version    junos-vsrx-12.1X47-D10.4-domestic
初始化配置接口和路由vSRX1
set system host-name vSRX1
set interfaces ge-0/0/0 unit 0 description "Zone untrust"
set interfaces ge-0/0/0 unit 0 family inet address 202.100.1.1/24
set interfaces ge-0/0/1 unit 0 description "Zone trust"
set interfaces ge-0/0/1 unit 0 family inet address 1.1.1.1/24
set routing-options static route 2.2.2.0/24 next-hop 202.100.1.2
第一步：定义IKE proposal
set security ike proposal ike-phase1-proposal authentication-method pre-shared-keys
set security ike proposal ike-phase1-proposal dh-group group2
set security ike proposal ike-phase1-proposal authentication-algorithm md5
set security ike proposal ike-phase1-proposal encryption-algorithm 3des-cbc

IPsec之两台vSRX-L2L-基础实验.pdf (302.29 KB, 下载次数: 25)

2015-3-16 14:34 上传

点击文件名下载附件

jcq18946450445