DDNS to establish Site-to-site IPSEC VPN

1. Topology Map:

Internet router analog into a DNS server, the actual environment needs intranet a PC as the DDNS client, boot automatically to the public network to register their own domain name.

RELATED Links: http://xrmjjz.blog.51cto.com/blog/3689370/683538

2. Basic interface Configuration:

See also: http://333234.blog.51cto.com/323234/912231

3. Static routing configuration:

See also: http://333234.blog.51cto.com/323234/912231

4.PAT configuration:

See also: http://333234.blog.51cto.com/323234/912231

5.DNS Server and Client configuration:

R3:dns Server

IP domain name cisco.com

IP Domain Lookup

IP DNS Server

IP host R4.cisco.com 202.100.2.4

IP host R2.cisco.com 202.100.1.2

R1,r5:dns Client

IP domain name cisco.com

IP Domain Lookup

IP name-server 202.100.1.3

6.VPN configuration:

A. First phase:

Crypto ISAKMP Policy 10

ENCR 3DES

Hash MD5

Authentication Pre-share

Group 2

Crypto ISAKMP key Cisco address 0.0.0.0

B. Phase II:

Crypto IPSec Transform-set Transet esp-3des Esp-sha-hmac

See more highlights of this column: http://www.bianceng.cnhttp://www.bianceng.cn/Network/Security/