vpn不通

canchan89

r2




crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp key cisco123 address 200.1.1.1
!
!
crypto ipsec transform-set ccie esp-3des esp-sha-hmac
!
crypto map 121 1 ipsec-isakmp
set peer 200.1.1.1
set transform-set ccie
match address 100
!
!
!
!
interface Ethernet0/0
ip address 192.168.12.2 255.255.255.0
half-duplex
!
interface Ethernet0/1
ip address 100.1.1.1 255.255.255.0
half-duplex
crypto map 121
!
interface Ethernet0/2
no ip address
shutdown
half-duplex
!
interface Ethernet0/3
no ip address
shutdown
half-duplex
!
ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 100.1.1.5
!
!
!
access-list 100 permit ip 192.168.12.0 0.0.0.255 10.1.1.0 0.0.0.255
!


===================================================

r4



crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp key cisco123 address 100.1.1.1
!
!
crypto ipsec transform-set ccie esp-3des esp-sha-hmac
!
crypto map 121 1 ipsec-isakmp
set peer 100.1.1.1
set transform-set ccie
match address 100
!
!
!
!
interface Ethernet0/0
ip address 200.1.1.1 255.255.255.0
half-duplex
crypto map 121
!
interface Ethernet0/1
ip address 10.1.1.1 255.255.255.0
half-duplex
!
interface Ethernet0/2
no ip address
shutdown
half-duplex
!
interface Ethernet0/3
no ip address
shutdown
half-duplex
!
ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 200.1.1.5
!
!
!
access-list 100 permit ip 200.1.1.0 0.0.0.255 192.168.1.0 0.0.0.255
!


==========================================

能帮看下这个vpn怎么通不了，r2到r4是通的&
r1，和r5都是no ip routi ，然后指的默认网关，没有问题&

谢谢

xuexinjin

能说清楚点，VPN不通，是哪两个之间

canchan89

在r2，和r4之间做的vpn，但不通，感觉配置没问题

lkuikui

ACL  

zyc2004

{:soso_e108:}

123@

你R4 上的访问控制列表配置的不对，应该是两个私有网段，你怎么配置了一个公网访问私网的配置R4的访问控制列表应该改成 access-list 100 permit ip 10.1.1.0 0.0.0.255  192.168.1.0 0.0.0.255

palm4444

这是不好东西呀

2008Lenovo