通过互联作备份配置实例牛

通过DDN互联VPN作备份配置实例3

转换集的配置：

crypto ipsec transform-set cisco esp-3des esp-md5-hmac

动态加密图的配置：

crypto dynamic-map cisco 10

set transform-set cisco

match address 100

把动态加密图加入到MAP上：

crypto map cisco 10 ipsec-isakmp dynamic cisco

把加密图应用到接口上：

interface FastEthernet0/1

no ip address

ip nat outside

ip virtual-reassembly

duplex auto

speed auto

pppoe enable

pppoe-client dial-pool-number 1

crypto map cisco

interface Dialer1

mtu 1492

ip address negotiated

ip nat outside

ip virtual-reassembly

encapsulation ppp

no ip route-cache cef

no ip route-cache

no ip mroute-cache

dialer pool 1

dialer-group 1

ppp authentication pap callin

ppp chap hostname *

ppp chap password 0 *

ppp pap sent-username * password 0 *

crypto map cisco

定义需要加密的流量：

access-list 100 permit ip 192.168.7.0 0.0.0.255 192.168.10.0 0.0.0.255

access-list 100 permit ip 192.168.8.0 0.0.0.255 192.168.10.0 0.0.0.255

access-list 100 permit ip 192.168.9.0 0.0.0.255 192.168.10.0 0.0.0.255

access-list 100 permit ip 192.168.11.0 0.0.0.255 192.168.10.0 0.0.0.255

access-list 100 deny

ip 192.168.7.0 0.0.0.255 any

access-list 100 deny

ip 192.168.8.0 0.0.0.255 any

access-list 100 deny

ip 192.168.9.0 0.0.0.255 any

他说：“棋牌室里烟味大的情况 access-list 100 deny

ip 192.168.11.0 0.0.0.255 any

张掖白癜风医院地址
南昌男科治疗
拉稀怎么回事