华为IPSec VPN配置详解

lyzhanwz

OKKOOKKOOK

奥力

谢谢分享

guptmzh

华为IPSec VPN配置详解

893316556

感谢分享

nigelye

学习

richest41

谢谢楼主分享

wwyh2391

学习一下

wwyh2391

麻烦看一下我的这个配置，是那里不合适，不是ping不通





[R1]:
int g0/0/0
ip add 12.1.1.1 24
undo shut

int g0/0/1
ip add 13.1.1.1 24
undo shut

ip route-s 192.168.1.0 255.255.255.0 12.1.1.2
ip route-s 172.16.1.0 255.255.255.0 13.1.1.3
quit


[R2]:
int g0/0/1
ip add 12.1.1.2 24
undo shut

int g0/0/0
ip add 192.168.1.10 24
undo shut

ip route-s 0.0.0.0 255.255.255.0 12.1.1.1

acl 3000
rule 5 permit ip source 192.168.1.0 0.0.0.255 destination 172.16.1.0 0.0.0.255
quit

ipsec proposal huawei
transform esp
encap tunnel
esp auth sha1
esp encryption-algorithm aes-128

ipsec policy huawei 10 manual
secu acl 3000
prop huawei
tunnel local 12.1.1.2
tunnel remote 13.1.1.3
sa spi inb esp 54321
sa string-key inbound esp cipher huawei
sa spi outb esp 12345
sa string-key outbound esp cipher huawei

int g0/0/0
ipsec policy huawei
quit




[R3]:
int g0/0/1
ip add 172.16.1.0 24
undo shut

int g0/0/0
ip add 13.1.1.3 24
undo shut

ip route-s 0.0.0.0 255.255.255.0 13.1.1.1

acl 3000
rule 5 permit ip source 172.16.1.0 0.0.0.255 destination 192.168.1.0 0.0.0.255

ipsec proposal huawei
transform esp
encap tunnel
esp auth sha1
esp encry aes

ipsec policy huawei 10 manual
secu acl 3000
prop huawei
tunnel local 13.1.1.3
tunnel remote 12.1.1.2
sa spi inb esp 12345
sa string-key inbound esp cipher huawei
sa spi outb esp 54321
sa string-key outbound esp cipher huawei

int g0/0/0
ipsec policy huawei
quit

Cookiesnob

华为IPSec VPN配置详解