Mainos / Advertisement:
Ero sivun ”Cisco IPSec” versioiden välillä
Siirry navigaatioon
Siirry hakuun
| Rivi 31: | Rivi 31: | ||
ip access-list extended VPN-TRAFFIC | ip access-list extended VPN-TRAFFIC | ||
permit ip 10.11.0.0 0.0.0.255 10.10.0.0 0.0.0.255 | permit ip 10.11.0.0 0.0.0.255 10.10.0.0 0.0.0.255 | ||
| + | </pre> | ||
| + | |||
| + | Luodaan Crypto Map | ||
| + | |||
| + | <pre> | ||
| + | crypto map CMAP 10 ipsec-isakmp | ||
| + | set peer 1.1.1.2 | ||
| + | set transform-set MY-SET | ||
| + | match address VPN-TRAFFIC | ||
</pre> | </pre> | ||
Versio 25. helmikuuta 2017 kello 10.19
Site to Site
Luodaan ISAKMP Policy phace 1:lle.
Create an ISAKMP policy for Phase 1
crypto isakmp policy 10 hash sha authentication pre-share exit
Luo Pre-Shared Key cisco IP:lle 192.168.1.3
crypto isakmp key 6 cisco address 192.168.1.3
crypto ipsec transform-set MY-SET esp-aes 128 esp-sha-hmac exit crypto ipsec security-association lifetime seconds 3600
Salli IPSec sisällepäin
ip access-list extended VPN-TRAFFIC permit ip 10.11.0.0 0.0.0.255 10.10.0.0 0.0.0.255
Luodaan Crypto Map
crypto map CMAP 10 ipsec-isakmp set peer 1.1.1.2 set transform-set MY-SET match address VPN-TRAFFIC
Mainos / Advertisement:
