OpenForum RSS: �� VPN ipsec �� CISCO and Linux

�� VPN ipsec �� CISCO and Linux (lesha4ever)

Thu, 30 Jul 2009 11:59:49 GMT

�� .
��!
�� ip cef!!!!!
�� no ip cef - �� .
�� , ��

ip route 192.168.0.0 255.255.255.0 GigabitEthernet0/1
� �� -�� ip cef

�� IP � �� .
ip route 192.168.0.0 255.255.255.0 192.168.0.�

�� http://www.certification.ru/cgi-bin/forum.cgi?action=thread&id=28641

�� VPN ipsec �� CISCO and Linux (lesha4ever)

Wed, 29 Jul 2009 12:19:39 GMT

�� .
�� Linux � �� - � �� . �� .
�� - �� . �� , �� (((

�� VPN ipsec �� CISCO and Linux (lesha4ever)

Wed, 29 Jul 2009 06:57:28 GMT

>[�� ]
>>!
>>crypto isakmp key SECRETKEY address IP_REMOTE_PEER
>>crypto isakmp invalid-spi-recovery
>>crypto isakmp keepalive 60
>>!
>>!
>>crypto ipsec transform-set SITE_TO_SITE esp-3des esp-md5-hmac
>> mode transport
>
>� �� tunnel?

�� - ��

>[�� ]
>>!
>>crypto map L2TP 1 ipsec-isakmp
>> set peer IP_REMOTE_PEER
>> set security-association lifetime seconds 28800
>> set transform-set SITE_TO_SITE
>> set pfs group2
>> match address CRYPTO_ACL_IPSec
>>crypto map L2TP 20 ipsec-isakmp dynamic L2TP_D
>
> � ��

�� . �� , ��

>[�� ]
>>PING 192.168.0.x (192.168.0.X) 1415(1443) bytes of data.
>>1423 bytes from 192.168.0.X: icmp_seq=1 ttl=63 time=27.4 ms
>>1423 bytes from 192.168.0.X: icmp_seq=2 ttl=63 time=26.9 ms
>>
>>--- 192.168.0.X ping statistics ---
>>2 pack

�� VPN ipsec �� CISCO and Linux (GolDi)

Wed, 29 Jul 2009 06:45:03 GMT

>[�� ]
> authentication pre-share
> group 2
>!
>crypto isakmp key SECRETKEY address IP_REMOTE_PEER
>crypto isakmp invalid-spi-recovery
>crypto isakmp keepalive 60
>!
>!
>crypto ipsec transform-set SITE_TO_SITE esp-3des esp-md5-hmac
> mode transport

� �� tunnel?
>!
>!
>crypto map L2TP 1 ipsec-isakmp
> set peer IP_REMOTE_PEER
> set security-association lifetime seconds 28800
> set transform-set SITE_TO_SITE
> set pfs group2
> match address CRYPTO_ACL_IPSec
>crypto map L2TP 20 ipsec-isakmp dynamic L2TP_D

� ��
>[�� ]
>PING 192.168.0.x (192.168.0.X) 1415(1443) bytes of data.
>1423 bytes from 192.168.0.X: icmp_seq=1 ttl=63 time=27.4 ms
>1423 bytes from 192.168.0.X: icmp_seq=2 ttl=63 time=26.9 ms
>
>--- 192.168.0.X ping statistics ---
>2 packets transmitted, 2 received, 0% packet loss, time 1000ms
>rtt min/avg/max/mdev = 26.936/27.186/27.437/0.299 ms
>
>
>�� ?

OpenForum RSS: ��������� VPN ipsec ����� CISCO and Linux

��������� VPN ipsec ����� CISCO and Linux (lesha4ever)

��������� VPN ipsec ����� CISCO and Linux (lesha4ever)

��������� VPN ipsec ����� CISCO and Linux (lesha4ever)

��������� VPN ipsec ����� CISCO and Linux (GolDi)

OpenForum RSS: �� VPN ipsec �� CISCO and Linux

�� VPN ipsec �� CISCO and Linux (lesha4ever)

�� VPN ipsec �� CISCO and Linux (lesha4ever)

�� VPN ipsec �� CISCO and Linux (lesha4ever)

�� VPN ipsec �� CISCO and Linux (GolDi)