說明：<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" />

1、用小凡搭建實驗環境。

2、使用4臺3640模擬路由器

3、完成實驗目的：出差的員工和分公司的員工都能訪問總公司的資源。

?網絡拓樸如下圖所示：

R1

interface?FastEthernet0/0

?ip?address?192.168.2.1?255.255.255.0

?ip?nat?inside

?ip?virtual-reassembly

?duplex?auto

?speed?auto

interface?FastEthernet1/0

?ip?address?200.200.13.1?255.255.255.0

?ip?nat?outside

?ip?virtual-reassembly

?duplex?auto

?speed?auto

ip?route?0.0.0.0?0.0.0.0?FastEthernet1/0

ip?nat?inside?source?list?1?interface?FastEthernet1/0?overload

access-list?1?permit?192.168.2.0?0.0.0.255

R2

crypto?isakmp?policy?1

?encr?3des

?hash?md5

?authentication?pre-share

?group?2

crypto?isakmp?key?6?for_***?address?200.200.34.4???????

crypto?ipsec?transform-set?for_***?esp-3des?esp-md5-hmac?

crypto?map?for_map?1?ipsec-isakmp?

?set?peer?200.200.34.4

?set?transform-set?for_***?

?match?address?for_***

interface?FastEthernet0/0

?ip?address?192.168.3.1?255.255.255.0

?duplex?auto

?speed?auto

interface?FastEthernet1/0

?ip?address?200.200.23.2?255.255.255.0

?duplex?auto

?speed?auto

?crypto?map?for_map

ip?route?0.0.0.0?0.0.0.0?FastEthernet1/0

ip?access-list?extended?for_***

permit?ip?192.168.3.0?0.0.0.255?192.168.4.0?0.0.0.255

R3

interface?Loopback0

?ip?address?200.200.3.3?255.255.255.0

!

interface?FastEthernet0/0

?ip?address?200.200.23.3?255.255.255.0

?duplex?auto

?speed?auto

!

interface?FastEthernet1/0

?ip?address?200.200.13.3?255.255.255.0

?duplex?auto

?speed?auto

!

interface?FastEthernet2/0

?ip?address?200.200.34.3?255.255.255.0

?duplex?auto

?speed?auto

R4

aaa?new-model

aaa?authentication?login?***_authen?local

aaa?authorization?network?***_author?local?

username?aa?password?0?123456

crypto?isakmp?policy?1

?encr?3des

?hash?md5

?authentication?pre-share

?group?2

crypto?isakmp?policy?2

?hash?md5

?authentication?pre-share

crypto?isakmp?key?6?for_***?address?200.200.23.2?no-xauth

crypto?isakmp?client?configuration?group?***_group

?key?6?123456

?pool?***_pool

?acl?for_***

?netmask?255.255.255.0

crypto?ipsec?transform-set?for_***?esp-3des?esp-md5-hmac?

!

crypto?dynamic-map?***_dy_map?1

?set?transform-set?for_***?

?reverse-route

crypto?map?***_map?client?authentication?list?***_authen

crypto?map?***_map?isakmp?authorization?list?***_author

crypto?map?***_map?client?configuration?address?respond

crypto?map?***_map?1?ipsec-isakmp?dynamic?***_dy_map?

crypto?map?***_map?2?ipsec-isakmp?

?set?peer?200.200.23.2

?set?transform-set?for_***?

?match?address?for_***

interface?FastEthernet0/0

?ip?address?192.168.4.1?255.255.255.0

?ip?nat?inside

?ip?virtual-reassembly

?duplex?auto

?speed?auto

interface?FastEthernet1/0

?ip?address?200.200.34.4?255.255.255.0

?ip?nat?outside

?ip?virtual-reassembly

?duplex?auto

?speed?auto

?crypto?map?***_map

ip?local?pool?***_pool?172.16.10.1?172.16.10.100

ip?route?0.0.0.0?0.0.0.0?FastEthernet1/0

ip?nat?inside?source?list?for_nat?interface?FastEthernet1/0?overload

ip?access-list?extended?for_nat

?deny???ip?192.168.4.0?0.0.0.255?192.168.3.0?0.0.0.255

?deny???ip?192.168.4.0?0.0.0.255?172.16.10.0?0.0.0.255

?permit?ip?any?any

ip?access-list?extended?for_***

?permit?ip?192.168.4.0?0.0.0.255?192.168.3.0?0.0.0.255

?permit?ip?192.168.4.0?0.0.0.255?172.16.10.0?0.0.0.255

轉載于:https://blog.51cto.com/chuan/93371

總結

以上是生活随笔為你收集整理的拔号×××与站点×××的配置的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。