做了一个GRE的实验。把配置粘下来给大家分享。
。r2#show runBuilding configuration...
Current configuration : 1543 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname r2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
ip cef
!
!
!
!
no ip domain lookup
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key cisco address 10.0.13.3
!
!
crypto ipsec transform-set ccnp esp-aes esp-md5-hmac
!
crypto map ab 10 ipsec-isakmp
set peer 10.0.13.3
set transform-set ccnp
match address 100
!
!
!
!
interface Tunnel0
ip address 1.1.1.1 255.255.255.0
ip mtu 1420
tunnel source 10.0.12.2
tunnel destination 10.0.13.3
crypto map ab
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
ip address 10.0.24.2 255.255.255.0
serial restart-delay 0
!
interface Serial1/1
ip address 10.0.12.2 255.255.255.0
serial restart-delay 0
crypto map ab
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
router eigrp 1
network 1.1.1.0 0.0.0.255
network 10.0.24.0 0.0.0.255
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 Serial1/1
!
!
no ip http server
no ip http secure-server
!
access-list 100 permit gre host 10.0.12.2 host 10.0.13.3
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
!
!
end
------------------------------------------------------------------------------
r3#show run
Building configuration...
Current configuration : 1539 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname r3
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
ip cef
!
!
!
!
no ip domain lookup
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key cisco address 10.0.12.2
!
!
crypto ipsec transform-set ccnp esp-aes esp-md5-hmac
!
crypto map ab 10 ipsec-isakmp
set peer 10.0.12.2
set transform-set ccnp
match address 100
!
!
!
!
interface Tunnel0
ip address 1.1.1.2 255.255.255.0
ip mtu 1420
tunnel source 10.0.13.3
tunnel destination 10.0.12.2
crypto map ab
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
ip address 10.0.35.3 255.255.255.0
serial restart-delay 0
!
interface Serial1/1
ip address 10.0.13.3 255.255.255.0
serial restart-delay 0
crypto map ab
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
router eigrp 1
network 1.1.1.2 0.0.0.0
network 10.0.35.3 0.0.0.0
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 Serial1/1
!
!
no ip http server
no ip http secure-server
!
access-list 100 permit gre host 10.0.13.3 host 10.0.12.2
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
!
!
end IPSEC代理。是用来区分流量的，那些流量用来加密。那些流量不用加密。一般用ACL来区分
GRE 可以指动态路由。保护GRE
版权声明：本文为博主原创文章，未经博主允许不得转载。
页:
[1]