IPsecVPN CE端配置
【摘要】 CE设备Hostname Hostname
CE设备loopback100地址 Loopback 100 ip add
Tunnel 号 Tunnel number
Tunnel ip 地址 Tunnel ip address
Tunnel 源地址 Tunnel source
Tunnel 目的地址 Tunnel destination
ADSL WAN接口 ADSL-Inter...
hostname
vpdn enable
vpdn-group ADSL
request-dialin
protocol pppoe
crypto keyring
pre-shared-key address key
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
crypto isakmp identity hostname
crypto isakmp profile IPSECPRO
keyring
match identity address 255.255.255.255
initiate mode aggressive
crypto ipsec transform-set IPSECTRAN esp-3des esp-sha-hmac
crypto map IPSECMAP 10 ipsec-isakmp
set peer
set transform-set IPSECTRAN
set isakmp-profile IPSECPRO
match address IPSEC
interface Loopback100
ip address 255.255.255.255
interface Tunnel
ip address 255.255.255.252
ip tcp adjust-mss 1432
tunnel source Loopback100
tunnel destination
interface
no shutdown
pppoe enable group global
pppoe-client dial-pool-number 1
interface Dialer1
ip address negotiated
ip virtual-reassembly
encapsulation ppp
dialer pool 1
ppp authentication pap callin
ppp pap sent-username password 0
crypto map IPSECMAP
ip route 255.255.255.255 Dialer1
ip access-list extended IPSEC
permit ip host host
router bgp
neighbor remote-as
address-family ipv4
neighbor activate
neighbor route-map ipsec-bgp-in in
neighbor route-map ipsec-bgp-out out
ip access-list extended ipsec-bgp-in
permit ip any any
ip access-list extended ipsec-bgp-out
permit ip any any
route-map ipsec-bgp-in permit 10
set local-preference 30
route-map ipsec-bgp-out permit 10
set metric 120
【声明】本内容来自华为云开发者社区博主，不代表华为云及华为云开发者社区的观点和立场。转载时必须标注文章的来源（华为云社区）、文章链接、文章作者等基本信息，否则作者和本社区有权追究责任。如果您发现本社区中有涉嫌抄袭的内容，欢迎发送邮件进行举报，并提供相关证据，一经查实，本社区将立刻删除涉嫌侵权内容，举报邮箱：
cloudbbs@huaweicloud.com
- 点赞
- 收藏
- 关注作者
评论（0）