海淀
ip route 0.0.0.0 0.0.0.0 10.1.1.254
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
crypto isakmp key cisco address 20.1.1.1
!
!
crypto ipsec transform-set hujianli-set esp-aes esp-md5-hmac
!
crypto map mymap 1 ipsec-isakmp
set peer 20.1.1.1
set transform-set hujianli-set
match address 100
access-list 100 permit ip 192.168.0.0 0.0.255.255 192.16.0.0 0.0.255.255
access-list 100 permit ip 192.168.0.0 0.0.255.255 172.16.0.0 0.0.255.255
北京
ip route 0.0.0.0 0.0.0.0 20.1.1.254
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
crypto isakmp key cisco address 10.1.1.1
crypto isakmp key cisco address 30.1.1.1
!
!
crypto ipsec transform-set hujianli-set esp-aes esp-md5-hmac
!
crypto map mymap 1 ipsec-isakmp
set peer 10.1.1.1
set transform-set hujianli-set
match address 100
crypto map mymap 2 ipsec-isakmp
set peer 30.1.1.1
set transform-set hujianli-set
match address 101
access-list 100 permit ip 192.16.0.0 0.0.255.255 192.168.0.0 0.0.255.255
access-list 100 permit ip 172.16.0.0 0.0.255.255 192.168.0.0 0.0.255.255
access-list 101 permit ip 192.16.0.0 0.0.255.255 172.16.0.0 0.0.255.255
access-list 101 permit ip 192.168.0.0 0.0.255.255 172.16.0.0 0.0.255.255
朝阳
ip route 0.0.0.0 0.0.0.0 30.1.1.254
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
crypto isakmp key cisco address 20.1.1.1
!
!
crypto ipsec transform-set hujianli-set esp-aes esp-md5-hmac
!
crypto map mymap 2 ipsec-isakmp
set peer 20.1.1.1
set transform-set hujianli-set
match address 100
access-list 100 permit ip 172.16.0.0 0.0.255.255 192.16.0.0 0.0.255.255
access-list 100 permit ip 172.16.0.0 0.0.255.255 192.168.0.0 0.0.255.255
isp
interface FastEthernet1/0
ip address 10.1.1.254 255.255.255.0
interface FastEthernet2/0
ip address 20.1.1.254 255.255.255.0
interface FastEthernet3/0
ip address 30.1.1.254 255.255.255.0