Курс Huawei HCIP Datacom. Лекция 24. IPsec

Блок описывает настройку IPsec тоннеля. Тема 27. Обзор технологий VPN: PPTP, L2TP, IPSec, SSL. IPSEC+GRE////////////////////////////////////////////////////////RO_30/////////////// acl number 3004 rule 5 permit ip source 10.30.6.10 0 destination 10.40.6.10 0 acl number 3005 rule 5 permit ip source 10.30.6.10 0 destination 10.50.6.10 0 interface LoopBack1 ip address 10.30.6.10 255.255.255.255 ipsec proposal default encapsulation-mode tunnel esp authentication-algorithm sha2-256 esp encryption-algorithm aes-192 ike proposal 5 encryption-algorithm aes-cbc-128 dh group14 ike peer branch40 v1 pre-shared-key huawei ike-proposal 5 local-address 203.0.113.2 remote-address 203.0.113.6 ike peer branch50 v1 pre-shared-key huawei ike-proposal 5 local-address 203.0.113.2 remote-address 203.0.113.9 ipsec policy branch 40 isakmp security acl 3004 ike-peer branch40 proposal default ipsec policy branch 50 isakmp security acl 3005 ike-peer branch50 proposal default interface Ethernet0/0/0 ipsec policy branch interface Tunnel0/0/4 ip address 10.30.7.41 255.255.255.252 tunnel-protocol gre keepalive source 10.30.6.10 destination 10.40.6.10 interface Tunnel0/0/5 ip address 10.30.7.37 255.255.255.252 tunnel-protocol gre keepalive source 10.30.6.10 destination 10.50.6.10 ospf 30 router-id 10.30.6.3 area 0.0.0.0 network 10.30.7.36 0.0.0.3 network 10.30.7.40 0.0.0.3