boson路由器上配置vpn的错误 救急哦
我是新人 正在学习中 在boson上用两个3620路由器做vpn练习 但是用命令show crypto isakmp sa 没有出来任何信息
不知道哪里错了 烦恼中!!!!
拓扑结构:pc1-----router1---------router2------pc2
pc1:ip---------50.50.50.20/24
GW-------50.50.50.50/24
pc2:ip---------60.60.60.20/24
GW------60.60.60.60./24
router1:E0/0------50.50.50.50/24
S0/0----20.20.20.21/24
router2:E0/0------60.60.60.60./24
S0/0-------20.20.20.20/24
简单的配置过程(router1):
一 router1上的设置
int s0/0
ip address 20.20.20.21 255.255.255.0
clock rate 64000
no shut
int e0/0
ip address 50.50.50.50 255.255.255.0
no shut
ip route 60.60.60.0 255.255.255.0 20.20.20.20
vpn的设置
一 配置isakmp
crypto isakmp enable
crypto isakmp policy 1
authentication pre-share
encryption 3des
hash md5
crypto isakmp key test1111 address 20.20.20.20
二配置ipsec
crypto ipsec transform-set test2222 ah-md5-hmac
access-list 110 permit ip 50.50.50.0 0.0.0.255 60.60.60.0 0.0.0.255
三 应用到端口
crypto map test3333 10 ipsec-isakmp
set peer 20.20.20.20
set transform-set test2222
match address 110
int s0/0
crypto map test3333
router2的设置跟上面一致 对端地址肯定是改了的哈 各位大虾 帮忙啊