Tìm hiểu tổng quan về IPSec

Faza I Faza II R2(config)# crypto isakmp policy 10 R2(config-isakmp)# authentication (pre-share, rsa-sig, rsa-enc) R2(config-isakmp)# crypto isakmp key cisco address 10.0.0.1 R2(config-isakmp)# group (1, 2, 5) R2(config-isakmp)# encr (des, 3des) R2(config-isakmp)# lifetime 20000 R2(config)# crypto ipsec transform-set nazwa parametry (np esp-des esp-md5-hmac) R2(config-crypto-trans)#mode tunnel R2#sh crypto ipsec transform-set nazwa R2#sh crypto isakmp policy Crypto mapa R2(config)# crypto map mapa ipsec-isakmp R2(config-crypto-map)# set peer 10.0.0.1 R2(config-crypto-map)# match address 101 R2(config-crypto-map)# set transform-set nazwa ACL R2(config)# access-list 101 permit ip 192.168.1.0 0.0.0.255 192.168.0.0 0.0.0.255 R2#sh crypto map Przypisanie crypto mapy interfejsu R2(config-if)# crypto map mapa R2#sh crypto ipsec sa