ENSP ipsec isakmp（自动）

一共六步

自动isakmp

1.ike安全提议

2.ike对等体

3.定义安全流量

4.定义ipsec 安全提议

5.ipsec 安全策略

6.端口应用

先搭建好拓扑图然后配置ip

[AR6]interface GigabitEthernet0/0/0
[AR6-GigabitEthernet0/0/0]ip add 100.1.1.1 30
[AR6-GigabitEthernet0/0/0]int GigabitEthernet0/0/01
[AR6-GigabitEthernet0/0/1]ip address 192.168.10.254 24
May 22 2022 10:44:59-08:00 AR6 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IPon the interface GigabitEthernet0/0/0 has entered the UP state. [AR7]interface GigabitEthernet0/0/0
[AR7-GigabitEthernet0/0/0]ip address 200.1.1.1 30
[AR7-GigabitEthernet0/0/0]interface GigabitEthernet0/0/01
[AR7-GigabitEthernet0/0/1]ip address 192.168.20.254 24
May 22 2022 10:46:02-08:00 AR7 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IPon the interface GigabitEthernet0/0/0 has entered the UP state. [AR5]interface GigabitEthernet0/0/0
[AR5-GigabitEthernet0/0/0]ip address 100.1.1.2 30
[AR5-GigabitEthernet0/0/0]interface g0/0/01
[AR5-GigabitEthernet0/0/1]ip address 200.1.1.2 30

开始配置ike（isakmp 他要一个一个控制端，另外一个端做个对等体就行）

[AR6]acl 3000  定义一个安全流量
[AR6-acl-adv-3000]rule 5 permit ip source 192.168.10.0 0.0.0.255 destination 192
.168.20.0 0.0.0.255[AR6]ipsec proposal sh
[AR6-ipsec-proposal-sh]transform esp
[AR6-ipsec-proposal-sh]esp authentication-algorithm md5
[AR6-ipsec-proposal-sh]es encryption-algorithm 3des [AR6]ike proposal 10
[AR6-ike-proposal-10]authentication-algorithm md5
[AR6-ike-proposal-10]encryption-algorithm 3des-cbc
[AR6-ike-proposal-10]dh group1 数值越大安全系数越高[AR6]ike peer 2 v1 有分两个版本
[AR6-ike-peer-2]pre-shared-key cipher 123456 密钥对
[AR6-ike-peer-2]ike-proposal 10  应用刚刚配置ike的安全提议
[AR6-ike-peer-2]local-address 100.1.1.1
[AR6-ike-peer-2]remote-address 200.1.1.1[AR6]ipsec policy shanghai 10 isakmp
[AR6-ipsec-policy-isakmp-shanghai-10]security acl 3000
[AR6-ipsec-policy-isakmp-shanghai-10]ike-peer 2
[AR6-ipsec-policy-isakmp-shanghai-10]proposal sh[AR6]ip route-static 0.0.0.0 0 100.1.1.2 要配置一条默认路由出去[AR6]int GigabitEthernet0/0/0
[AR6-GigabitEthernet0/0/0]ipsec policy shanghai

配置对端

[AR7]acl 3000
[AR7-acl-adv-3000]rule 5 permit  ip source 192.168.20.0 0.0.0.255 destination 19
2.168.10.0 0.0.0.255[AR7]ipsec proposal bj
[AR7-ipsec-proposal-bj]transform esp
[AR7-ipsec-proposal-bj]esp authentication-algorithm md5
[AR7-ipsec-proposal-bj]esp encryption-algorithm 3des [AR7]ike proposal 10
[AR7-ike-proposal-10]authentication-algorithm md5
[AR7-ike-proposal-10]authentication-method pre-share
[AR7-ike-proposal-10]encryption-algorithm 3des-cbc [AR7]ike peer 1 v1
[AR7-ike-peer-1]pre-shared-key cipher 123456
[AR7-ike-peer-1]ike-proposal 10
[AR7-ike-peer-1]local-address 200.1.1.1
[AR7-ike-peer-1]remote-address 100.1.1.1[AR7]ipsec policy beijin 10 isakmp
[AR7-ipsec-policy-isakmp-beijin-10]security acl 3000
[AR7-ipsec-policy-isakmp-beijin-10]proposal bj
[AR7-ipsec-policy-isakmp-beijin-10]ike-peer 1[AR7]int GigabitEthernet0/0/0
[AR7-GigabitEthernet0/0/0]ipsec policy beijin 记得应用[AR7]ip route-static 0.0.0.0 0 200.1.1.2 加一条默认路由

结果

ENSP ipsec isakmp（自动）相关推荐

华为IPsec IKE自动协商配置
华为IPsec IKE自动协商配置要点 1.大家使用ENSP模拟器AR2220进行操作: 2.配置的时候梳理好逻辑,有自己一套逻辑最好,我比较习惯先让设备能通讯,然后在配置协议: 3.验证的时候最好 ...
IPsec ISAKMP（转）
IPsec ISAKMP 2010-08-10 11:47:01 标签: IPsec 职场休闲 ISAKMP Interne 安全连接和密钥管理协议(ISAKMP)是 IPsec 体系结构中的 ...
IPsec ISAKMP协议
ISAKMP:Internet Security Association and Key Management Protocol,Internet 安全关联和密钥管理协议一种协议框架,定义了有效负载 ...
IPsec ISAKMP
Interne 安全连接和密钥管理协议(ISAKMP)是 IPsec 体系结构中的一种主要协议.该协议结合认证.密钥管理和安全连接等概念来建立政府.商家和因特网上的私有通信所需要的安全. 因特网安全联 ...
华为eNSP 配置DHCP自动分配IP地址
目录一.DHCP Global 全局配置地址池 (一)修改与客户端相连的接口 (二)配置DHCP地址池 (三)自动获取IP 二.高级DHCP配置三.DHCP interface 基于接口的DHC ...
华为 eNsp ipSec vpn实验配置（1）
实验要求配置PC1~PC2的路由可达配置ACL匹配源IP192.168.1.0到192.168.2.0的数据包进行认证配置SA建立方式为手工配置实验拓扑实验配置 AR1 ip route-s ...
飞信通知api_网络通知API
飞信通知api Every UI framework has the same set of widgets which have become almost essential to modern ...
在centos上使用openswan搭建IPSec***
背景:因公司业务逐渐迁移到阿里云上,所以有需求搭建一条从公司内容到阿里云的×××隧道,因环境限制并未有***设备可以使用,所以计划在linux上搭建ipsec***来实现该功能.拓扑图如下: 目的:在 ...
商业虚拟专用网络技术六IPSec配置
一.配置IPSec 1.配置的前提配置IPSec前需要做好准备工作: (1).网络可达需要确定网络流量的可达性,就是从出站口发送的数据包是否能够通过网络到达指定IP地址的设备. (2).确定需要保 ...

ENSP ipsec isakmp（自动）

ENSP ipsec isakmp（自动）相关推荐

最新文章

热门文章