OpenForum RSS: Ipsec � ��

Ipsec � �� (walterwest7)

Thu, 17 Jun 2010 09:55:52 GMT

��o!

Ipsec � �� (karen durinyan)

Thu, 17 Jun 2010 09:40:53 GMT

>[�� ]
>crypto map myvpn 10+n ipsec-isakmp
> set peer n.n.n.n
> set transform-set myset
>!--- Include the private-network-to-private-network traffic
>!--- in the encryption process:
>match address 10n
>!
>access-list 10x permit ip 172.16.1.0 0.0.0.255 10.x.1.0 0.0.0.255
>...
>access-list 10n permit ip 172.16.1.0 0.0.0.255 10.n.1.0 0.0.0.255

and sure don't forget to exclude branch networks from the nat ACL
!
access-list 175 deny ip 172.16.1.0 0.0.0.255 10.1.1.0 0.0.0.255
access-list 175 deny ip 172.16.1.0 0.0.0.255 10.x.1.0 0.0.0.255
...
access-list 175 deny ip 172.16.1.0 0.0.0.255 10.n.1.0 0.0.0.255
access-list 175 permit ip 172.16.1.0 0.0.0.255 any

Ipsec � �� (karen)

Thu, 17 Jun 2010 07:50:14 GMT

>[�� ]
>line con 0
> exec-timeout 0 0
>line aux 0
>line vty 0 4
> login
>!
>end
>
>�� . �� , ��
>1841?

crypto isakmp key ciscokey address x.x.x.x
...
crypto isakmp key ciscokey address n.n.n.n
!
!
crypto map myvpn 10+x ipsec-isakmp
set peer x.x.x.x
set transform-set myset
!--- Include the private-network-to-private-network traffic
!--- in the encryption process:
match address 10x
!
!
crypto map myvpn 10+n ipsec-isakmp
set peer n.n.n.n
set transform-set myset
!--- Include the private-network-to-private-network traffic
!--- in the encryption process:
match address 10n
!
access-list 10x permit ip 172.16.1.0 0.0.0.255 10.x.1.0 0.0.0.255
...
access-list 10n permit ip 172.16.1.0 0.0.0.255 10.n.1.0 0.0.0.255

OpenForum RSS: Ipsec � ����������� ���������

Ipsec � ����������� ��������� (walterwest7)

Ipsec � ����������� ��������� (karen durinyan)

Ipsec � ����������� ��������� (karen)

OpenForum RSS: Ipsec � ��

Ipsec � �� (walterwest7)

Ipsec � �� (karen durinyan)

Ipsec � �� (karen)