Tìm hiểu tổng quan về IPSec

Faza IR2config# crypto isakmp policy 10 R2config-isakmp# authentication pre-share, rsa-sig, rsa-enc R2config-isakmp# crypto isakmp key cisco address 10.0.0.1 R2config-isakmp# group 1, 2,

Faza I

R2(config)# crypto isakmp policy 10

R2(config-isakmp)# authentication (pre-share, rsa-sig, rsa-enc)

R2(config-isakmp)# crypto isakmp key cisco address 10.0.0.1

R2(config-isakmp)# group (1, 2, 5)

R2(config-isakmp)# encr (des, 3des)

R2(config-isakmp)# lifetime 20000

R2#sh crypto isakmp policy

Faza II

R2(config)# crypto ipsec transform-set nazwa parametry (np esp-des esp-md5-hmac)

R2(config-crypto-trans)#mode tunnel R2#sh crypto ipsec transform-set nazwa

ACL

R2(config)# access-list 101permit ip 192.168.1.0 0.0.0.255

192.168.0.0 0.0.0.255

Crypto mapa

R2(config)# crypto map mapa1 ipsec-isakmp R2(config-crypto-map)# set peer 10.0.0.1 R2(config-crypto-map)# match address101 R2(config-crypto-map)# set transform-set nazwa

R2#sh crypto map

Przypisanie crypto mapy do interfejsu

R2(config-if)# crypto map mapa

R2#sh crypto ipsec sa