Методички к лабам / Лаба 5 cisco paket tracer

Router(config)#crypto ipsec transform-set TS esp-3des esp-md5-hmac

VPN:

Router(config)#ip access-list extended FOR-VPN Router(config-ext-nacl)#permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255

Router(config-ext-nacl)#exit

-

Router(config)#crypto map CMAP 10 ipsec-isakmp Router(config-crypto-map)#set peer 210.210.2.2 (IP-

Router(config-crypto-map)#set transform-set TS Router(config-crypto-map)#match address FOR-VPN

Router(config-crypto-map)#exit

-, .. VPN

:

Router(config)#interface fastEthernet 0/0

Router(config-if)#crypto map CMAP

ISAKMP

*Jan 3 07:16:26.785: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is ON

PC PC 5.4.5):

5.

75

Router0):

Router#show running-config

-list FOR-NAT 5.4.6):

5. NAT

Router#configure terminal

Router(config)#no ip access-list standard FOR-NAT (.. accesslist, NAT , VPN)

- ACL (access-list)

-

-

Router(config)#ip access-list extended FOR-NAT

NAT.

Router(config-ext-nacl)#deny ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255

NAT

- VPN-

NAT. ACL (access-list)

permitdeny

76

permit/deny ACL

Router(config-ext-nacl)#permit ip 192.168.1.0 0.0.0.255 any Router(config-ext-nacl)#end

Router#show running-config

access-list FOR-NAT 5.4.7).

5. NAT

- 5.

5.

Internet Security Association and Key

Management Protocol (ISAKMP) SA):

Router#show crypto isakmp sa

77

5.4.9):

5. VPN Router0

IPsec-show crypto ipsec sa

IPSec

5.5.

5.6.

NAT

VPN?

VPN

VPN.

VPN.

8. IPSec.

9. ISAKMP .

10. VPN

78