需求:分支機(jī)構(gòu)(R1)只有ADSL線路,需要與總部(R3)實(shí)現(xiàn)LAN能互訪。
===========R3-HQ===============
crypto keyring PSK
pre-shared-key address 0.0.0.0 0.0.0.0 key cisco
crypto ipsec transform-set TS esp-3des esp-sha-hmac
!
crypto ipsec profile VTI
set transform-set TS
crypto isakmp profile DVTI
keyring PSK
match identity address 0.0.0.0
virtual-template 1
interface Virtual-Template1 type tunnel
ip unnumbered Loopback0
tunnel mode ipsec ipv4
tunnel protection ipsec profile VTI
interface Loopback0
ip address 192.168.1.3 255.255.255.0
!
!
interface Loopback100
ip address 10.23.0.3 255.255.255.0
!
interface GigabitEthernet0/0
ip address 100.23.0.3 255.255.255.0
!
!
router ospf 1
network 10.23.0.0 0.0.0.255 area 0
network 192.168.1.0 0.0.0.255 area 0
ip route 0.0.0.0 0.0.0.0 100.23.0.2
==========R1-Branch============
crypto keyring PSK
pre-shared-key address 0.0.0.0 0.0.0.0 key cisco
!
!
crypto ipsec transform-set TS esp-3des esp-sha-hmac
!
crypto ipsec profile VTI
set transform-set TS
!
interface Loopback0
ip address 192.168.1.1 255.255.255.0
!
!
interface Loopback100
ip address 10.12.0.1 255.255.255.0
!
!
interface Tunnel1
ip unnumbered Loopback0
tunnel source GigabitEthernet0/0
tunnel mode ipsec ipv4
tunnel destination 100.23.0.3
tunnel protection ipsec profile VTI
!
interface GigabitEthernet0/0
ip address 100.12.0.1 255.255.255.0
!
router ospf 1
network 10.12.0.0 0.0.0.255 area 0
network 192.168.1.0 0.0.0.255 area 0
!
ip route 0.0.0.0 0.0.0.0 100.12.0.2
另外有需要云服務(wù)器可以了解下創(chuàng)新互聯(lián)cdcxhl.cn,海內(nèi)外云服務(wù)器15元起步,三天無(wú)理由+7*72小時(shí)售后在線,公司持有idc許可證,提供“云服務(wù)器、裸金屬服務(wù)器、高防服務(wù)器、香港服務(wù)器、美國(guó)服務(wù)器、虛擬主機(jī)、免備案服務(wù)器”等云主機(jī)租用服務(wù)以及企業(yè)上云的綜合解決方案,具有“安全穩(wěn)定、簡(jiǎn)單易用、服務(wù)可用性高、性價(jià)比高”等特點(diǎn)與優(yōu)勢(shì),專為企業(yè)上云打造定制,能夠滿足用戶豐富、多元化的應(yīng)用場(chǎng)景需求。