标签:protoc end 公网 red mat mit The 隧道 obj
------------------IKEV2-----------------------------tunnel-group 201.1.1.100 type ipsec-l2l ------定义隧道,类型为ipsec-l2l
tunnel-group 201.1.1.100 ipsec-attributes
ikev2 remote-authentication pre-shared-key cisco ------配置预共享密钥为cisco
ikev2 local-authentication pre-shared-key cisco
6.2 IPSEC-***第二阶段ipsec配置
crypto ipsec ikev2 ipsec-proposal cisco -------定义ipsec转换集
protocol esp encryption aes-256
protocol esp integrity md5
6.3 定义map映射绑定策略与ipsec转换集
crypto map cisco 10 match address 110 -----定义crypto map,绑定***感兴趣流ACL 110
crypto map cisco 10 set peer 201.1.1.100-------指定peer对等体公网IP地址
crypto map cisco 10 set ikev2 ipsec-proposal cisco ------调用刚才创建的ipsec转换集
cryptomap cisco interface outside -------将map应用到outside接口
6.4 开启ikev2策略到outside接口
crypto ikev2 enable outside
标签:protoc end 公网 red mat mit The 隧道 obj
原文地址:https://blog.51cto.com/13251917/2541562