Mainos / Advertisement:
Ero sivun ”Cisco IPSec” versioiden välillä
Siirry navigaatioon
Siirry hakuun
| Rivi 37: | Rivi 37: | ||
<pre> | <pre> | ||
crypto map CMAP 10 ipsec-isakmp | crypto map CMAP 10 ipsec-isakmp | ||
| − | set peer | + | set peer 192.168.1.3 |
set transform-set MY-SET | set transform-set MY-SET | ||
match address VPN-TRAFFIC | match address VPN-TRAFFIC | ||
</pre> | </pre> | ||
Versio 25. helmikuuta 2017 kello 10.19
Site to Site
Luodaan ISAKMP Policy phace 1:lle.
Create an ISAKMP policy for Phase 1
crypto isakmp policy 10 hash sha authentication pre-share exit
Luo Pre-Shared Key cisco IP:lle 192.168.1.3
crypto isakmp key 6 cisco address 192.168.1.3
crypto ipsec transform-set MY-SET esp-aes 128 esp-sha-hmac exit crypto ipsec security-association lifetime seconds 3600
Salli IPSec sisällepäin
ip access-list extended VPN-TRAFFIC permit ip 10.11.0.0 0.0.0.255 10.10.0.0 0.0.0.255
Luodaan Crypto Map
crypto map CMAP 10 ipsec-isakmp set peer 192.168.1.3 set transform-set MY-SET match address VPN-TRAFFIC
Mainos / Advertisement:
