实验TOP:

 

 

RT1的配置:

==================================

<H3C>sy
[H3C]int g0/1/0
[H3C-GigabitEthernet0/1/0]ip add 192.168.1.2 255.255.255.0
[H3C-GigabitEthernet0/1/0]un shut
[H3C-GigabitEthernet0/1/0]quit
[H3C]int g0/1/1
[H3C-GigabitEthernet0/1/1]ip add 192.168.2.1 255.255.255.0
[H3C-GigabitEthernet0/1/1]un shut
[H3C-GigabitEthernet0/1/1]quit
[H3C]ike local-name rt1
[H3C]ip route-static 0.0.0.0 0.0.0.0 192.168.2.2
[H3C]ike peer peer1
[H3C-ike-peer-peer1]pre-shared-key simple abcde
[H3C-ike-peer-peer1]id-type name
[H3C-ike-peer-peer1]remote-name rt2
[H3C-ike-peer-peer1]quit
[H3C]ipsec proposal kalng
[H3C-ipsec-proposal-kalng]encapsulation-mode tunnel
[H3C-ipsec-proposal-kalng]transform esp
[H3C-ipsec-proposal-kalng]esp encryption-algorithm des
[H3C-ipsec-proposal-kalng]esp authentication-algorithm md5
[H3C-ipsec-proposal-kalng]quit
[H3C]ipsec profile abc                               (安全框架)
[H3C-ipsec-profile-abc]ike-peer peer1
[H3C-ipsec-profile-abc]proposal kalng
[H3C-ipsec-profile-abc]quit

[H3C]int Tunnel 1                                             (虚拟接口)
[H3C-Tunnel1]ip address 172.16.1.1 255.255.255.0
[H3C-Tunnel1]tunnel-protocol ipsec ipv4    
[H3C-Tunnel1]source g0/1/1                     
[H3C-Tunnel1]destination 192.168.3.2
[H3C-Tunnel1]ipsec profile abc

[H3C-ipsec-profile-abc]quit
[H3C]

 

RT2配置:

=====================================================

<H3C>sy
[H3C]int g0/1/0
[H3C-GigabitEthernet0/1/0]ip add 192.168.3.2 255.255.255.0
[H3C-GigabitEthernet0/1/0]un shu
[H3C-GigabitEthernet0/1/0]quit
[H3C]int g0/1/1
[H3C-GigabitEthernet0/1/1]ip add 192.168.4.1 255.255.255.0
[H3C-GigabitEthernet0/1/1]un shu
[H3C-GigabitEthernet0/1/1]quit
[H3C]ike local-name rt2
[H3C]ip route-static 0.0.0.0 0.0.0.0 192.168.3.1
[H3C]ike peer peer2
[H3C-ike-peer-peer2]pre-shared-key simple abcde
[H3C-ike-peer-peer2]id-type name
[H3C-ike-peer-peer2]remote-name rt1
[H3C-ike-peer-peer2]quit
[H3C]ipsec proposal kalng
[H3C-ipsec-proposal-kalng]encapsulation-mode tunnel
[H3C-ipsec-proposal-kalng]transform esp
[H3C-ipsec-proposal-kalng]esp encryption-algorithm des
[H3C-ipsec-proposal-kalng]esp authentication-algorithm md5
[H3C-ipsec-proposal-kalng]quit
[H3C]ipsec profile abc
[H3C-ipsec-profile-abc]ike-peer peer2
[H3C-ipsec-profile-abc]proposal kalng
[H3C-ipsec-profile-abc]quit
[H3C]int Tunnel 1
[H3C-Tunnel1]ip address 172.16.1.2 255.255.255.0
[H3C-Tunnel1]tunnel-protocol ipsec ipv4
[H3C-Tunnel1]source g0/1/0
[H3C-Tunnel1]destination 192.168.2.1
[H3C-Tunnel1]ipsec profile abc
[H3C-ipsec-profile-abc]quit
[H3C]