配置IPsec Tunnel With TACACS+ User Authentication.pdf

配置IPsec Tunnel With TACACS+ User Authentication 一、，网络拓扑 波 二、拓扑说明 选 本实例中使用的ACS4.0 TACACS+做为验证服务器，使用了TACACS+ Server、VPN Client 4.x、Split Tunneling 三种技术。 张 三、VPN Server 完整配置 ： RA#sh running-config Building configuration... 人 Current configuration : 1581 bytes ! 作 version 12.4 service timestamps debug datetime msec 制 service timestamps log datetime msec no service password-encryption ! hostname RA ! boot-start-marker boot-end-marker ! ! aaa new-model ! ! aaa authentication login userauth group tacacs+ aaa authorization network author local ! aaa session-id common ! resource policy ! ip cef ! ! ! ! crypto isakmp policy 10 encr 3des authentication pre-share group 2 ! crypto isakmp client configuration group author 波 key cisco123 dns 选 wins domain pool vpool 张 acl 101 netmask ： ! ! 人 crypto ipsec transform-set vpnset esp-3des esp-sha-hmac ! crypto dynamic-map dmap 10 作 set transform-set vpnset ! 制 ! crypto map map1 client authentication list userauth crypto map map1 isakmp authorization list author crypto map map1 client configuration address respond crypto map map1 10 ipsec-isakmp dynamic dmap ! ! ! interface Loopback0 ip address ! interface Loopback1 ip address ! interface FastEthernet0/0 ip address 0 duplex half crypto map map1 ! interface Ethernet1/0 ip address 0 duplex half ! interface Ethernet1/1 no ip address shutdown duplex half ! interface Ethernet1/2 no ip address