路由器站点到站点之间VPN.doc

实现站点与站点之间VPN IPsec Router1#show run Building configuration... Current configuration : 1565 bytes ! version 12.4 service config service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router1 ! boot-start-marker boot-end-marker ! ! no aaa new-model ! resource policy ! ip cef ! no ip domain lookup ! crypto isakmp policy 10 encr 3des hash md5 authentication pre-share group 2 crypto isakmp key cisco1234 address ! ! crypto ipsec transform-set ccsp esp-des esp-md5-hmac ! crypto map cisco 1 ipsec-isakmp set peer set transform-set ccsp match address 101 ! ! ! ! interface FastEthernet0/0 ip address duplex full ! interface Serial1/0 ip address encapsulation ppp serial restart-delay 0 crypto map cisco ! interface Serial1/1 no ip address shutdown serial restart-delay 0 ! interface Serial1/2 no ip address shutdown serial restart-delay 0 ! ip route no ip http server no ip http secure-server ! ! ! logging alarm informational access-list 101 permit ip 55 55 ! control-plane ! ! line con 0 exec-timeout 0 0 stopbits 1 line aux 0 stopbits 1 line vty 0 4 ! ! end Router2#show run Building configuration... Current configuration : 1175 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router2 ! boot-start-marker boot-end-marker ! ! no aaa new-model ! resource policy ! ip cef ! no ip domain lookup ! ! interface FastEthernet0/0 ip address duplex full ! interface Serial1/0 ip address encapsulation ppp serial restart-delay 0 ! interface Serial1/1 ip address encapsulation ppp serial restart-delay 0 ! interface Serial1/2 no ip address shutdown serial restart-delay 0 ! no ip http server no ip http secure-server ! logging alarm informational control-plane ! ! line con 0 exec-timeout 0 0 stopbits 1 line aux 0 stopbits 1 line vty 0 4 login ! ! End Router3#show run Bu