cisco路由器配置站点到站点的VPN

cisco路由器配置站点到站点的VPN[图片]cisco路由器配置站点到站点的VPNRouterA(config)#iproute0.0.0.00.0.0.020.20.20.20RouterA(config)#cryptoisakmppolicy1RouterA(config-isakmap)#hashmd5RouterA(config-isakmap)#authenticationpre−shareRouterA(config)#cryptoisakmpkeypasswordaddress20.20.20.20RouterA(config)#cryptoipsectransform−setjcannetsetah−md5−hmacesp−desRouterA(config)#access−list101permitip50.50.50.00.0.0.25560.60.60.00.0.0.255RouterA(config)#cryptomapjcannetmap1ipsec−isakmpRouterA(config-crypto-map)#setpeer20.20.20.20RouterA(config-crypto-map)#settransform−setjcannetsetRouterA(config-crypto-map)#matchaddress101RouterA(config)#interfaceserial0/0RouterA(config-if)#cryptomapjcannetmapRouterB(config)#iproute0.0.0.00.0.0.020.20.20.21RouterB(config)#cryptoisakmppolicy1RouterB(config-isakmap)#hashmd5RouterB(config-isakmap)#authenticationpre−shareRouterB(config)#cryptoisakmpkeypasswordaddress20.20.20.21RouterB(config)#cryptoipsectransform−setjcannetsetah−md5−hmacesp−desRouterB(config)#access−list101permitip60.60.60.00.0.0.25550.50.50.00.0.0.255RouterB(config)#cryptomapjcannetmap1ipsec−isakmpRouterB(config-crypto-map)#setpeer20.20.20.21RouterB(config-crypto-map)#settransform−setjcannetsetRouterB(config-crypto-map)#matchaddress101RouterB(config)#interfaceserial0/0RouterB(config-if)#cryptomapjcannetmap