IPSec××× HA（120÷162）

IPSec××× HA（120÷162）

Primary节点：crypto isakmp policy 10authentication pre-sharecrypto isakmp key cisco address 202.100.1.1crypto isakmp keepalive 10 periodic!crypto ipsec transform-set cisco esp-3des esp-md5-hmacmode tunnel!crypto map cisco 10 ipsec-isakmpset peer 202.100.1.1set transform-set ciscoset reverse-route tag 100match address reverse-route!router ospf 110router-id 33.1.1.1redistribute static subnets tag 100network 10.1.1.0 0.0.0.255 area 0!ip route 0.0.0.0 0.0.0.0 61.128.1.10!ip access-list extended permit ip 44.1.1.0 0.0.0.255 11.1.1.0 0.0.0.255

Secondary节点：crypto isakmp policy 10authentication pre-sharecrypto isakmp key cisco address 202.100.1.1crypto isakmp keepalive 10 periodic!crypto ipsec transform-set cisco esp-3des esp-md5-hmacmode tunnel!crypto map cisco 10 ipsec-isakmpset peer 202.100.1.1set transform-set ciscoset reverse-route tag 100match address reverse-route!interface Ethernet0/2ip address 137.78.5.1 255.255.255.0crypto map cisco!router ospf 110router-id 55.1.1.1redistribute static subnets tag 100network 10.1.1.0 0.0.0.255 area 0!ip route 0.0.0.0 0.0.0.0 137.78.5.10!ip access-list extended permit ip 44.1.1.0 0.0.0.255 11.1.1.0 0.0.0.255

Primary节点：crypto isakmp policy 10authentication pre-sharecrypto isakmp key cisco address 202.100.1.1!crypto ipsec transform-set cisco esp-3des esp-md5-hmacmode tunnel!crypto map cisco 10 ipsec-isakmpset peer 202.100.1.1set transform-set ciscoset reverse-route tag 100match address reverse-route static!interface Ethernet0/1ip address 61.128.1.1 255.255.255.0standby 1 ip 61.128.1.100standby 1 priority 105standby 1 preemptstandby 1 name Redun.crypto map cisco redundancy Redun.!router ospf 110router-id 33.1.1.1redistribute static subnets tag 100network 10.1.1.0 0.0.0.255 area 0!ip route 0.0.0.0 0.0.0.0 61.128.1.10!ip access-list extended permit ip 44.1.1.0 0.0.0.255 11.1.1.0 0.0.0.255

Secondary节点：crypto isakmp policy 10authentication pre-sharecrypto isakmp key cisco address 202.100.1.1!crypto ipsec transform-set cisco esp-3des esp-md5-hmacmode tunnel!crypto map cisco 10 ipsec-isakmpset peer 202.100.1.1set transform-set ciscoset reverse-route tag 100match address reverse-route static!interface Ethernet0/1ip address 61.128.1.2 255.255.255.0standby 1 ip 61.128.1.100standby 1 preemptstandby 1 name Redun.crypto map cisco redundancy Redun.!router ospf 110router-id 55.1.1.1redistribute static subnets tag 100network 10.1.1.0 0.0.0.255 area 0!ip route 0.0.0.0 0.0.0.0 61.128.1.10!ip access-list extended permit ip 44.1.1.0 0.0.0.255 11.1.1.0 0.0.0.255

公司内部Server节点：router ospf 110router-id 44.1.1.1network 0.0.0.0 255.255.255.255 area 0

版权声明：本文内容由网络用户投稿，版权归原作者所有，本站不拥有其著作权，亦不承担相应法律责任。如果您发现本站中有涉嫌抄袭或描述失实的内容，请联系我们jiasou666@gmail.com 处理，核实后本网站将在24小时内删除侵权内容。