Вы находитесь на странице: 1из 19

BR1 configuration

BR#sh run
Building configuration...

Current configuration : 1443 bytes


!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname BR
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
ip cef
!
!
!
!
!
!
!
!
!

!
crypto isakmp policy 110
hash md5
authentication pre-share
lifetime 300
crypto isakmp key cisco1234 address 110.1.1.1
!
!
crypto ipsec transform-set t2 ah-md5-hmac
!
crypto map mymap 10 ipsec-isakmp
set peer 110.1.1.1
set transform-set t2
match address 120
!
!
!
interface Tunnel0
ip address 10.10.10.2 255.255.255.0
tunnel source 120.1.1.2
tunnel destination 110.1.1.1
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 172.16.1.1 255.255.255.0

duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
clock rate 125000
!
interface Serial0/0/1
ip address 120.1.1.2 255.255.255.0
clock rate 125000
crypto map mymap
!
router ospf 1
log-adjacency-changes
network 10.10.10.0 0.0.0.255 area 0
network 172.16.1.0 0.0.0.255 area 0
!
router rip
version 2
network 10.0.0.0
network 172.18.0.0
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 120.1.1.1
ip route 110.1.1.1 255.255.255.255 120.1.1.1
!
!
no ip http server
no ip http secure-server

!
access-list 120 permit gre host 120.1.1.2 host 110.1.1.1
!
!
!
!
control-plane
!
!
!
line con 0
line aux 0
line vty 0 4
login
!
scheduler allocate 20000 1000
end

HQ configurationHQ>en
HQ#sh run
Building configuration...
Current configuration : 1599 bytes
!
version 12.4
service timestamps debug datetime msec

service timestamps log datetime msec


no service password-encryption
!
hostname HQ
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
no aaa new-model
memory-size iomem 5
dot11 syslog
ip source-route
!
!
!
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!

!
!
archive
log config
hidekeys
!
!
crypto isakmp policy 110
hash md5
authentication pre-share
lifetime 300
crypto isakmp key cisco1234 address 120.1.1.2
!
!
crypto ipsec transform-set t2 ah-md5-hmac
!
crypto map mymap 10 ipsec-isakmp
set peer 120.1.1.2
set transform-set t2
match address 120
!
!
!
!
!

!
interface Tunnel0
ip address 10.10.10.1 255.255.255.0
tunnel source 110.1.1.1
tunnel destination 120.1.1.2
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 192.168.2.2 255.255.255.0
duplex auto
speed auto
!
interface Serial0/0/0
ip address 110.1.1.1 255.255.255.0
no fair-queue
crypto map mymap
!
interface Serial0/0/1
no ip address
shutdown

!
router ospf 1
log-adjacency-changes
network 10.10.10.0 0.0.0.255 area 0
network 192.168.2.0 0.0.0.255 area 0
!
router rip
version 2
network 10.0.0.0
network 192.168.2.0
no auto-summary
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 110.1.1.2
ip route 120.1.1.2 255.255.255.255 110.1.1.2
no ip http server
no ip http secure-server
!
!
!
access-list 120 permit gre host 110.1.1.1 host 120.1.1.2
!
!
!
!

!
!
control-plane
!
!
!
line con 0
line aux 0
line vty 0 4
login
!
scheduler allocate 20000 1000
end

Internet configurationinternet#sh run


Building configuration...
Current configuration : 881 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!

hostname internet
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
no aaa new-model
memory-size iomem 5
dot11 syslog
ip source-route
!
!
!
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
archive

log config
hidekeys
!
!
!
!
!
!
!
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
ip address 110.1.1.2 255.255.255.0
clock rate 2000000

!
interface Serial0/0/1
ip address 120.1.1.1 255.255.255.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
control-plane
!
!
!
line con 0
line aux 0
line vty 0 4
login
!

scheduler allocate 20000 1000


end

tests and verifications :


SH IP INT BRIEF HQ AND BR

GRE TUNNEL HQ AND BR

PING

SH IP ROUTE

HQ ,BR-ISAKMP

IPSEC HQ AND BR

SH CRYPTO MAP- HQ AND BR

Вам также может понравиться