Comany1（config）#ip access-list extended ToComany
Comany1（config-ext-nacl）#permit gre host 172.16.1.1 host 172.16.0.1
Comany1（config-ext-nacl）#
Comany1（config-ext-nacl）#exit
Comany1（config）#crypto ipsec transform-set a esp-des esp-sha-hmac
Comany1（cfg-crypto-trans）#mode transport
Comany1（cfg-crypto-trans）#
Comany1（cfg-crypto-trans）#exit
Comany1（config）#crypto map mymap 10 ipsec-isakmp
Comany1（config-crypto-map）#match address ToComany
Comany1（config-crypto-map）#set transform-set a
Comany1（config-crypto-map）#set peer 172.16.0.1
Comany1（config-crypto-map）#
Comany1（config-crypto-map）#exit
Comany1（config）#interface s0/0
Comany1（config-if）#crypto map mymap
Comany1（config-if）#
Comany1（config-if）#exit
Comany1（config）#
Comany1（config）#ip access-list extended perimeter
Comany1（config-ext-nacl）#no permit gre host 172.16.0.1 host 172.16.1.1
Comany1（config-ext-nacl）#
Comany1（config-ext-nacl）#en
Comany1#
5.3.3 分公司2路由器配置
Comany2（config）#crypto isakmp enable
Comany2（config）#crypto isakmp identity address
Comany2（config）#crypto isakmp policy 1
Comany2（config-isakmp）#encryption des
Comany2（config-isakmp）#authentication pre-share
Comany2（config-isakmp）#group 1
Comany2（config-isakmp）#hash sha
Comany2（config-isakmp）#exit
Comany2（config）#
Comany2（config）#crypto isakmp key cisco123456 address 172.16.0.1 no-xauth
Comany2（config）#ip access-list extended ToComany
Comany2（config-ext-nacl）#permit gre host 172.16.2.1 host 172.16.0.1
Comany2（config-ext-nacl）#
Comany2（config-ext-nacl）#exit
Comany2（config）#crypto ipsec transform-set b esp-des esp-sha-hmac
Comany2（cfg-crypto-trans）#mode transport
Comany2（cfg-crypto-trans）#
Comany2（cfg-crypto-trans）#exit
Comany2（config）#crypto map mymap1 1 ipsec-isakmp
Comany2（config-crypto-map）#match address ToComany
Comany2（config-crypto-map）#set transform-set b
Comany2（config-crypto-map）#set peer 172.16.0.1
Comany2（config-crypto-map）#
Comany2（config-crypto-map）#exit
Comany2（config）#interface e0/1
Comany2（config-if）#crypto map mymap1
Comany2（config-if）#
Comany2（config-if）#exit
Comany2（config）#
Comany2（config）#ip access-list extended perimeter
Comany2（config-ext-nacl）#no permit gre host 172.16.0.1 host 172.16.2.1
Comany2（config-ext-nacl）#
Comany2（config-ext-nacl）#en
Comany2#
5.4 VPN的测试
如果Vpn配置成功的话，在各个公司的Pc机子上可以ping通其他公司的内网Ip。
5.4.1总公司下的测试
左键开始按钮-运行-输入cmd-进入dos方式-ping分公司1与分公司2的ip地址
Ping 192.168.20.123
Ping 192.168.30.130
测试结果如图5.2所示：
图5-2 总公司下的测试
5.4.2 分公司1下的测试
左键开始按钮-运行-输入cmd
首页 上一页 6 7 8 9 10 下一页 尾页 9/10/10
基于思科设备得VPN实现(九)由教育资料网（www.jaoyuw.com）会员上传。
