VPN综合实验_动态IPsec.pdf

r1-center#sh run Building configuration... Current configuration : 1852 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname r1-center ! boot-start-marker boot-end-marker ! ! aaa new-model ! ! ! aaa session-id common ! resource policy ! memory-size iomem 5 ip cef ! ! ! ! no ip domain lookup ip domain name ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! username dongzhi password 0 cisco ! ! ! crypto isakmp policy 10 hash md5 authentication pre-share group 2 lifetime 3600 crypto isakmp key cisco address crypto isakmp key cisco hostname r2-part1 crypto isakmp key cisco hostname r3-part2 ! ! crypto ipsec transform-set cisco ah-md5-hmac esp-des ! crypto dynamic-map cisco 10 set transform-set cisco match address cisco ! ! crypto map r1 10 ipsec-isakmp dynamic cisco ! ! ! ! ! interface Loopback0 ip address ! interface FastEthernet0/0 no ip address shutdown duplex auto speed auto ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! interface Serial1/0 ip address encapsulation frame-relay serial restart-delay 0 crypto map r1 ! interface Serial1/1 no ip address shutdown serial restart-delay 0 ! interface Serial1/2 no ip address shutdown serial restart-delay 0 ! interface Serial1/3 no ip address shutdown serial restart-delay 0 ! router eigrp 100 passive-interface Loopback0 network network no auto-summary ! ! ! ip http server no ip http secure-server ! ip access-list extended cisco permit tcp host host permit tcp host host ! ! ! ! ! ! ! control-plane ! ! ! ! ! ! ! ! ! ! ! line con 0 exec-timeout 0 0 logging synchronous line aux 0 line vty 0 4