H3C-GRE-over-IPsec配置实例

ÍØÆËÃèÊöÕ¾µãA·ÓÉÆ÷RAÍâÍøµØÖ·192.13.2.1/24ÄÚÍøµØÖ·10.1.1.1/24Õ¾µãB·ÓÉÆ÷RBÍâÍøµØÖ·132.108.5.2/24ÄÚÍøµØÖ·10.1.3.1/24RAÅäÖÃipadd192.13.2.1255.255.255.0ipadd10.1.1.1255.255.255.0interfacetunnle0ipadd10.1.2.1255.255.255.0source192.13.2.1destination132.108.5.2keepaliveiproute-static10.1.3.0255.255.255.0tunnel0aclnumber3001rulepermitipsource192.13.2.10.0.0.0destination132.108.5.20.0.0.0ruledenyipsourceanydestinationanyiprout-static132.108.5.0255.255.255.0s1/0ipsecproposaltran1encapsulation-modetunneltransformespespencryption-algorithmdesespauthentication-algorithmsha1quitikepeerpeer1pre-share-keycssl#123456remote-address132.108.5.2ipsecpolicymap110isakmpproposaltran1securityacl3001ike-peerpeer1quitinterfaces1/0ipsecpolicymap1RAÅäÖÃipadd192.13.2.1255.255.255.0ipadd10.1.1.1255.255.255.0interfacetunnle0ipadd10.1.2.1255.255.255.0source192.13.2.1destination132.108.5.2keepaliveiproute-static10.1.3.0255.255.255.0tunnel0aclnumber3001rulepermitipsource192.13.2.10.0.0.0destination132.108.5.20.0.0.0ruledenyipsourceanydestinationanyiprout-static132.108.5.0255.255.255.0s1/0ipsecproposaltran1encapsulation-modetunneltransformespespencryption-algorithmdesespauthentication-algorithmsha1quitikepeerpeer1pre-share-keycssl#123456remote-address132.108.5.2ipsecpolicymap110isakmpproposaltran1securityacl3001ike-peerpeer1quitinterfaces1/0ipsecpolicymap1RBÅäÖÃipadd132.108.5.2255.255.255.0ipadd10.1.3.1255.255.255.0interfacetunnle0ipadd10.1.2.2255.255.255.0source132.108.5.2destination192.13.2.1keepaliveiproute-static10.1.1.0255.255.255.0tunnel0aclnumber3001rulepermitipsource132.108.5.20.0.0.0destination192.13.2.10.0.0.0ruledenyipsourceanydestinationanyiprout-static192.13.2.10.0.0.0255.255.255.0s1/0ipsecproposaltran1encapsulation-modetunneltransformespespencryption-algorithmdesespauthentication-algorithmsha1quitikepeerpeer1pre-share-keycssl#123456remote-address192.13.2.1ipsecpolicymap110isakmpproposaltran1securityacl3001ike-peerpeer1quitinterfaces1/0ipsecpolicymap1