CCIE Learning notes----GRE over IPsec

Source: Internet
Author: User
Tags hmac

GRE over IPsec

This kind of thing can be basically NAT and all kinds of encryption Baotou things

R1:!interface ETHERNET0/0 IP Address 192.168.12.1 255.255.255.0 ip OSPF 1 area 0  ---------------- ----------------------------------------------------------------- r2: crypto ISAKMP Policy 10  Authentication Pre-sharecrypto ISAKMP key Cisco address 192.168.34.4   !! Crypto IPSec Transform-set CCNA esp-des esp-md5-hmac mode Transport!!! Crypto map Jiance 1 Ipsec-isakmp set Peer 192.168.34.4 set transform-set CCNA MATCH address!!!!! Interface Tunnel0 ip address 10.0.0.1 255.255.255.0 tunnel source Ethernet0/1 tunnel destination 192.168.34.4 tunnel key 100!interface ethernet0/0 ip address 192.168.12.2 255.255.255.0!interface Ethernet0 /1 IP address 192.168.23.2 255.255.255.0 crypto map jiance!router OSPF 1 network 192.168.23.2 0.0.0.0 Area 0!router OSPF 2 network 10.0.0.1 0.0.0.0 area 0 network 192.168.12.2 0.0.0.0 area 0!ip forward-protocol nd!         &NBSp;! IP route 192.168.34.0 255.255.255.0 192.168.23.3!!! Access-list Permit IP host 192.168.23.2 host 192.168.34.4!   ------------------------------------- --------------------------------------------  r3:!interface Ethernet0/0 ip Address 192.168.34.3 255.255.255.0!interface Ethernet0/1 ip Address 192.168.23.3 255.255.255.0!! router OSPF 1 network 0.0.0.0 255.255.255.255 area 0!  ---------------------------------------------- -----------------------------------  r4:  crypto ISAKMP Policy 10 authentication Pre-sharecrypto ISAKMP key Cisco address 192.168.23.2   !! Crypto IPSec Transform-set CCNA esp-des esp-md5-hmac mode Transport!!! Crypto map Jiance 1 Ipsec-isakmp set Peer 192.168.23.2 set transform-set ccna match address 100!  &NB Sp      !!!! Interface Tunnel0 ip address 10.0.0.2 255.255.255.0 tunnel source Ethernet0/0 tunnel destination 192.168.23.2 tunnel key 100!interface Ethernet0/0 ip address 192.168.34.4 255.255.255.0 crypto map Jiance!interface ETHERNET0/1 IP address 192.168.45.4 255.255.255.0!router OSPF 1 network 192.168.34.4 0.0.0.0 area 0!router OSPF 2 network 10.0.0.2 0.0.0.0 area 0!!! Access-list Permit IP host 192.168.34.4 host 192.168.23.2!  ------------------------------------------- --------------------------------------  r5!interface Ethernet0/1 ip Address 192.168.45.5 255.255.255.0 IP OSPF 1 Area 0!  ------------------------------------------------------------------ ---------------  Experimental results:  r1#show IP OSPF neighbor neighbor id     Pri   state            dead time   Address         interface192.168. 12.2      1   FULL/BDR        00:00:38    192.168.12.2  &nbsp ; ethernet0/0r1#  ---------------------------------------------------------------------------------  r2#show IP Routecodes:l-Local, c-connected, S-static, R-rip, M-mobile, b-bgp       D-EIGRP, EX-E IGRP external, O-OSPF, IA-OSPF Inter area       N1-OSPF NSSA external type 1, N2-OSPF NSSA ext Ernal type 2       E1-OSPF external type 1, E2-OSPF external type 2       i- Is-is, Su-is-is Summary, L1-is-is level-1, L2-is-is level-2       ia-is-is Inter area, *-Can Didate default, U-per-user static route       O-ODR, P-periodic downloaded static route, H-NHR P, l-lisp       a-application route       +-replicated route,%-Next hop O Verride gateway of last resort isn't set       10.0.0.0/8 is variably subnetted, 2 subnets, 2 MA sksc        10.0.0.0/Directly connected, tunnel0l        10.0.0.1/32 is directly connected, tunnel0    &NBS P 192.168.12.0/24 is variably subnetted, 2 subnets, 2 masksc        192.168.12.0/24 are directly connecte D, ethernet0/0l        192.168.12.2/32 is directly connected, ethernet0/0      192.168. 23.0/24 is variably subnetted, 2 subnets, 2 masksc        192.168.23.0/24 are directly connected, ether net0/1l        192.168.23.2/32 is directly connected, ethernet0/1s     192.168.34.0/ [1/0] via 192.168.23.3 !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! R2#show IP OSPF neighbor neighbor id     Pri   State          &NBSP ;D ead time   Address         Interface192.168.12.1      1    full/dr         00:00:39    192.168.12.1   ethernet0/0192.168.34.4      0   FULL/ -        00:00:31    10.0.0.2        tunnel0192.168.34.3      1   FULL/DR    &NB Sp    00:00:31    192.168.23.3    ethernet0/1  ------------------------------- --------------------------------------------------  r4#show IP OSPF neighbor  neighbor ID      Pri   State           dead time   Address  &NB Sp      Interface192.168.12.2      0   FULL/ -        00:0 0:39    10.0.0.1        tunnel0192.168.34.3      1   FULL/DR          00:00:34    192.168.34.3    ethernet0/0   ------- -------------------------------------------------------------------------- r5#show IP routecodes:l-Local, c-connected, S-static, R-rip, M-mobile, B-bgp&nbs P      D-EIGRP, ex-eigrp external, O-OSPF, IA-OSPF Inter area       N1-OSPF NSS A external Type 1, N2-OSPF NSSA external type 2       E1-OSPF external type 1, E2-OSPF external Type 2       i-is-is, Su-is-is Summary, L1-is-is level-1, L2-is-is level-2       ia-is-is Inter area, *-candidate default, U-per-user static route       O-ODR, P-peri Odic downloaded static route, H-NHRP, l-lisp       a-application route      &NBSP ; +-Replicated route,%-Next hop override gateway of last resort are not set       192.168.45.0 /24 is variably subnetted, 2 subnets, 2 masksc        192.168.45.0/24 are directly connected, Ethernet0 /1l    &nbsP   192.168.45.5/32 is directly connected, ethernet0/1            

CCIE Learning notes----GRE over IPsec

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.