思科路由器與windows建立L2L ipsecVPN

1.拓撲：

2.基本配置：

A.R1：

interface FastEthernet0/0

ip address 202.100.1.1 255.255.255.0

no shut

interface Loopback0

ip address 10.1.1.1 255.255.255.0

ip route 0.0.0.0 0.0.0.0 202.100.1.2

B.R2：

interface FastEthernet0/0

ip address 202.100.1.2 255.255.255.0

no shut

interface FastEthernet0/1

ip address 202.100.2.2 255.255.255.0

no shut

C.R3:

interface FastEthernet0/0

ip address 20.1.1.3 255.255.255.0

no shut

ip route 0.0.0.0 0.0.0.0 20.1.1.8

D.Windows2003：

eth0:

IP:202.100.2.8/24

GW:202.100.2.2

eth1:

IP:20.1.1.8/24

啟動路由和轉寄服務。