H3C IPsec+IKE 野蛮模式配置实验

M建

于 2024-10-11 20:10:58 发布

阅读量770

点赞数 3

CC 4.0 BY-SA版权

分类专栏： M建的知识库文章标签：路由器 IPsec 野蛮模式

本文链接：https://blog.csdn.net/m0_37568649/article/details/142862312

H3C IPsec+IKE 野蛮模式配置实验

实验拓扑

实验需求

按照图示配置 IP 地址，R3出接口自动获取公网IP地址
在 R1 上配置默认路由连通公网
在 R1 和 R3 上配置 IPsec VPN，使两端私网可以互相访问

实验步骤

按照图示配置 IP 地址，R3出接口自动获取公网IP地址

[R1]display ip interface brief 
*down: administratively down
(s): spoofing  (l): loopback
Interface           Physical Protocol IP address/Mask    VPN instance Description  
GE0/0               up       up       100.1.1.1/24       --           --
GE0/1               up       up       192.168.1.254/24   --           --

[R2]display ip interface brief 
*down: administratively down
(s): spoofing  (l): loopback
Interface           Physical Protocol IP address/Mask    VPN instance Description  
GE0/0               up       up       100.1.1.2/24       --           --
GE0/1               up       up       100.2.2.2/24       --           --
#
dhcp server ip-pool 1
 gateway-list 100.2.2.2
 network 100.2.2.0 mask 255.255.255.0

[R3]
#
interface GigabitEthernet0/0
 ip address dhcp-alloc

[R3]display ip interface brief 
*down: administratively down
(s): spoofing  (l): loopback
Interface           Physical Protocol IP address/Mask    VPN instance Description  
GE0/0               up       up       100.2.2.1/24       --           --
GE0/1               up       up       192.168.2.254/24   -