wolfvol电子邮件安全ccie13778-分解试验指南2 advanceversion 1.pdfVIP

WolfSecurityLabAdvanceVersion1.0

1．Remote

1.1RouterRemoteP3

1.2PIXRemoteP6

2.RedundanceP8

3．NAT-TP11

4.EZ

4.1Router(client)Router(Server)P13

4.2Router(client)PIX(Server)P15

4.3PIX(client)Router(Server)P17

5.DMP19

作者：2

SecurityCCIE:13778

Email:cq_bomb@

WolfSecurityLabAdvanceVersion1.0

1.Remote

技术特点：

适用于用户通过ciscoclient软件客户端拨号到站点的情况。

根据站点设备的不同分为Routerremote和PIXremote。

关键是1.5阶段的Xauth；group；ciscoclient。

1.1RouterRemote

Topology

OutsideInside

pc--routerlo0-

启动AAA功能：

aaanew-model

aaaauthenticationloginfor-remotelocal

aaaauthorizationnetworkremotelocal

usernamecciepassword0ccie

IKEPhaseI

Router1:

cryptoisakmp10

hashmd5

authenticationpre-share

group2

note：根据remoteclient的策略而设置

Group的配置

cryptoisakmpclientconfigurationgroupccie

keyccie

dns33

wins33

poolccie-pool

IPSecPhaseII

cryptoipsectransform-setciscoesp-desesp-md5-hmac

cryptodynamic-mapcisco10

settransform-setcisco

cryptomapciscoclientauthenticationlistfor-remote

cryptomapciscoisakmpauthorizationlistremote

cryptomapciscoclien