Mainos / Advertisement:

Ero sivun ”Cisco IPSec” versioiden välillä

Kohteesta Taisto
Siirry navigaatioon Siirry hakuun
Rivi 11: Rivi 11:
 
  hash sha
 
  hash sha
 
  authentication pre-share
 
  authentication pre-share
 +
exit
 
</pre>
 
</pre>
  
Rivi 21: Rivi 22:
 
<pre>
 
<pre>
 
crypto ipsec transform-set MY-SET esp-aes  128 esp-sha-hmac
 
crypto ipsec transform-set MY-SET esp-aes  128 esp-sha-hmac
 +
exit
 
crypto ipsec security-association lifetime seconds 3600
 
crypto ipsec security-association lifetime seconds 3600
 
</pre>
 
</pre>

Versio 25. helmikuuta 2017 kello 10.09


Site to Site

Luodaan ISAKMP Policy phace 1:lle.

Create an ISAKMP policy for Phase 1

crypto isakmp policy 10
 hash sha
 authentication pre-share
exit

Luo Pre-Shared Key cisco IP:lle 192.168.1.3

crypto isakmp key 6 cisco address 192.168.1.3
crypto ipsec transform-set MY-SET esp-aes  128 esp-sha-hmac
exit
crypto ipsec security-association lifetime seconds 3600

Salli IPSec sisällepäin

ip access-list extended VPN-TRAFFIC
permit ip  192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255
Mainos / Advertisement: