Cloud Native应用交付
  • 首页
  • 关于本站
  • 个人介绍
  • Downloads
  • Repo
    • Github
    • Container
  • F5
    • F5 Python SDK
    • F5-container
    • F5-LBaaS
  • 社交
    • 联系我
    • 微信/微博
    • 公众号
    • 打赏赞助
行至水穷处 坐看云起时
Cloud Native Application Services: cnadn.net
  1. 首页
  2. 路由器技术
  3. 正文

Dynamic-to-Static IPSec with NAT

2006年09月19日 10267点热度 0人点赞 0条评论

IOS_804.gif

sam-i-am
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">Current configuration:<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">!<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">version 12.2<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">service timestamps debug uptime <o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">service timestamps log up time<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">no service password-encryption<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">!<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">hostname sam-i-am<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">!<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">ip subnet-zero<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">!<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- These are the IKE policies.</span></em></span><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">crypto isakmp policy 1</span></strong></span><span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- Defines an Internet Key Exchange (IKE) policy. <o:p></o:p></font></span></em></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- Use the <strong>crypto isakmp policy</strong> command <o:p></o:p></font></span></em></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- in global configuration mode. <o:p></o:p></font></span></em></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- IKE policies define a set of parameters to be used <o:p></o:p></font></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- during the IKE phase I negotiation.</span></em></span><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;IKE策略定义了IKE 第一阶段协商的参数集</font></o:p></span></span>
1
<span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">hash md5<o:p></o:p></font></span></strong></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">authentication pre-share</span></strong></span><span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- Specifies pre-shared keys as the authentication method.</span></em></span><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">crypto isakmp key cisco123 address <font color="#ff0000"><st1:chsdate w:st="on" year="1899" month="12" day="30" islunardate="False" isrocdate="False">0.0.0</st1:chsdate>.0 0.0.0.0</font></span></strong></span><span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;因为对等体的IP或名称都不知道,所以可以使用8个0来表示任意对等体</font></o:p></span></em></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- Configures a pre-shared authentication key,<o:p></o:p></font></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- used in global configuration mode.</span></em></span><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
2
3
4
<span style="m
 
so-bookmark: sam"><span la
ng="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">!<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- These are the IPSec policies.</span></em></span><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;设置IPSEC转换集,这是集合是安全协议和算法的一个合法组合.</font></o:p></span></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">crypto ipsec transform-set rtpset esp-des esp-md5-hmac</span></strong></span><span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- A transform set is an acceptable combination <o:p></o:p></font></span></em></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- of security protocols and algorithms.<o:p></o:p></font></span></em></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- This command defines a transform set<o:p></o:p></font></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- that has to be matched on the peer router.</span></em></span><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">crypto dynamic-map <font color="#ff0000">rtpmap</font> 10</span></strong></span><span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;设置一个加密动态映射,留给下面的加密映射调用,这个动态映射起到一个模板<br />作用,它可以自动与对等体进行协商请求一个新的SA.所以这个模式下不设置对等体!</font></o:p></span></em></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- Use dynamic crypto maps to create policy templates <o:p></o:p></font></span></em></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- that can be used to process negotiation requests <o:p></o:p></font></span></em></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- for new security associations (SA) from a remote IPSec peer, <o:p></o:p></font></span></em></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- even if you do not know all of the crypto map parameters <o:p></o:p></font></span></em></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- required to communicate with the remote peer,<o:p></o:p></font></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- such as the IP address of the peer.</span></em></span><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> <o:p></o:p></font></span></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">set transform-set rtpset</span></strong></span><span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;调用自己的映射集</font></o:p></span></em></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- Configure IPSec to use the transform set &quot;rtpset&quot;<o:p></o:p></font></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- that was defined previously.</span></em></span><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">match address <font color="#ff0000">115</font></span></strong></span><span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;指定哪些流量是要加密的</font></o:p></span></em></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- Assign an extended access list to a crypto map entry <o:p></o:p></font></span></em></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- that is used by IPSec to determine which traffic <o:p></o:p></font></span></em></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- should be protected by crypto and which traffic <o:p></o:p></font></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- does not need crypto protection.</span></em></span><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> <o:p></o:p></font></span></span>
1
2
3
4
<font face="宋体"><span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">crypto map rtptrans 10 ipsec-isakmp <font color="#ff
 
 
0000">dynamic rtpmap</font></span></strong></span><span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体"><em>&nbsp;配置加密映射,这个与静态的加密映射不同,它多了个dynamic rtpmap,调用了<br />上面设置的动态模板rtpmap,所以本来应该在加密映射下该设置的对等体\映射集调用\<br />ACL调用 现在就不用在设置了,因为放到</em><span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">crypto dynamic-map</span></strong></span><em>模板里设置了</em></font></o:p></span></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- Specifies that this crypto map entry is to reference <o:p></o:p></font></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- a preexisting dynamic crypto map.</span></em></span><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> <o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">!<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">interface Ethernet0<o:p></o:p></font></span></strong></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"> ip address <st1:chsdate w:st="on" year="1899" month="12" day="30" islunardate="False" isrocdate="False">10.2.2</st1:chsdate>.3 255.255.255.0</span></strong></span><span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> no ip directed-broadcast<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> <strong>ip nat inside</strong><o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> <em><o:p></o:p></em></font></span></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体"><span style="mso-spacerun: yes">&nbsp;</span>!--- This indicates that the interface is connected to the<o:p></o:p></font></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"> !--- inside network, which is subject to NAT translation.</span></em></span><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> <o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"><span style="mso-spacerun: yes">&nbsp;</span>no mop enabled<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">!<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">interface Serial0<o:p></o:p></font></span></strong></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"> ip address 99.99.99.1 255.255.255.0</span></strong></span><span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> no ip directed-broadcast<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> <strong>ip nat outside</strong><o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> <em><o:p></o:p></em></font></span></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体"><span style="mso-spacerun: yes">&nbsp;</span>!--- This indicates that the interface is connected <o:p></o:p></font></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><span style="mso-spacerun: yes">&nbsp;</span>!--- to the outside network.</span></em></span><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> <o:p></o:p></font></span></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">crypto map rtptrans</span></strong></span><span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- Use the <strong>crypto map</strong> interface configuration command<o:p></o:p></font></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- to apply a previously defined crypto map set to an interface.</span></em></span><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">!<o:p></o:p></font></span></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">ip nat inside source route-map nonat interface Serial0 overload</span></strong></span><span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- Except the private network from the NAT process.</span></em></span><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
2
3
4
<span style="m
 
 
so-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">ip classless<o:p></o:p></font></span></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">ip route <st1:chsdate w:st="on" year="1899" month="12" day="30" islunardate="False" isrocdate="False">0.0.0</st1:chsdate>.0 0.0.0.0 Serial0</span></strong></span><span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">no ip http server<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">!<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">access-list <font color="#ff0000">115</font> permit i<st1:chsdate w:st="on" year="1899" month="12" day="30" islunardate="False" isrocdate="False">p 10.2.2</st1:chsdate>.0 0.0.0.255 10.1.1.0 0.0.0.255<o:p></o:p></font></span></strong></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">access-list <font color="#ff0000">115</font> deny i<st1:chsdate w:st="on" year="1899" month="12" day="30" islunardate="False" isrocdate="False">p 10.2.2</st1:chsdate>.0 0.0.0.255 any</span></strong></span><span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- Include the private-network-to-private-network traffic<o:p></o:p></font></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- in the encryption process.</span></em></span><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">access-list 120 deny i<st1:chsdate w:st="on" year="1899" month="12" day="30" islunardate="False" isrocdate="False">p 10.2.2</st1:chsdate>.0 0.0.0.255 10.1.1.0 0.0.0.255<o:p></o:p></font></span></strong></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">access-list 120 permit i<st1:chsdate w:st="on" year="1899" month="12" day="30" islunardate="False" isrocdate="False">p 10.2.2</st1:chsdate>.0 0.0.0.255 any</span></strong></span><span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<font face="宋体"><font color="#ff0000"><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- <font color="#ff0000">Except the private</font> <font color="#ff0000">network from the NAT process</font>.</span></em></span><span style="mso-bookmark: sam"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font></font>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">route-map nonat permit 10<o:p></o:p></font></span></strong></span>
1
<font face="宋体"><span style="mso-bookmark: sam"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"> match ip address 120</span></strong></span><span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">!<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">line con 0<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> transport input none<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">line aux 0<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">line vty 0 4<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> password ww<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> login<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">!<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: sam"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">end<o:p></o:p></font></span></span>

 

dr_whoovie
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">Current configuration:<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">!<o:p></o:p></font></span></span>
1
2
3
4
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12
 
 
pt; COLOR: black"><font face="宋体">version 12.2<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">service timestamps debug uptime<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">service timestamps log uptime<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">no service password-encryption<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">!<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">hostname dr_whoovie<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">!<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">ip subnet-zero<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">!<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- These are the IKE policies.</span></em></span><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">crypto isakmp policy 1</span></strong></span><span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- Defines an Internet Key Exchange (IKE) policy. <o:p></o:p></font></span></em></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- Use the <strong>crypto isakmp policy</strong> command <o:p></o:p></font></span></em></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- in global configuration mode. <o:p></o:p></font></span></em></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- IKE policies define a set of parameters to be used <o:p></o:p></font></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- during the IKE phase I negotiation.</span></em></span><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> <strong>hash md5<o:p></o:p></strong></font></span></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">authentication pre-share</span></strong></span><span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- Specifies pre-shared keys as the authentication method.</span></em></span><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">crypto isakmp key cisco123 address 99.99.99.1</span></strong></span><span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"> <o:p></o:p></span></span></font>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- Configures a pre-shared authentication key,<o:p></o:p></font></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- used in global configuration mode.</span></em></span><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">!<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- These are the IPSec policies.</span></em></span><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">crypto ipsec transform-set rtpset esp-des esp-md5-hmac</span></strong></span><span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- A transform set is an acceptable combination <o:p></o:p></font></span></em></span>
1
2
3
4
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- of security protocols and algorithms.<o:p></o:p></font></sp
 
 
an></em></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- This command defines a transform set<o:p></o:p></font></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- that has <font color="#ff0000">to be matched on the peer router</font>.</span></em></span><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">!<o:p></o:p></font></span></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">crypto map rtp 1 ipsec-isakmp</span></strong></span><span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><span style="mso-spacerun: yes">&nbsp; </span><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- Creates a crypto map and indicates that IKE will be used <o:p></o:p></font></span></em></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- to establish the IPSec SAs for protecting <o:p></o:p></font></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- the traffic specified by this crypto map entry.</span></em></span><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;这个路由器就是静态设置对等体,不在加密映射语句里调用crypto dynamic-map了</font></o:p></span></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">set peer 99.99.99.1</span></strong></span><span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- Use the <strong>set peer</strong> command to specify an IPSec peer in a crypto map entry.</span></em></span><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">set transform-set rtpset</span></strong></span><span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"> <o:p></o:p></span></span></font>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- Configure IPSec to use the transform set &quot;rtpset&quot;<o:p></o:p></font></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- that was defined previously.</span></em></span><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> <strong>match address 115</strong><o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体">!--- Include the private-network-to-private-network traffic<o:p></o:p></font></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue">!--- in the encryption process.</span></em></span><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">!<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">interface Ethernet0<o:p></o:p></font></span></strong></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black">ip address <st1:chsdate w:st="on" year="1899" month="12" day="30" islunardate="False" isrocdate="False">10.1.1</st1:chsdate>.1 255.255.255.0</span></strong></span><span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> no ip directed-broadcast<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> <strong>ip nat inside</strong><o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体"> !--- This indicates that the interface is connected to the<o:p></o:p></font></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"> !--- inside network, which is subject to NAT translation.</span></em></span><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> no mop enabled<o:p></o:p></font></span></span>
1
2
3
4
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black
 
 
"><font face="宋体">!<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体">interface Serial0<o:p></o:p></font></span></strong></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><strong><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"> ip address negotiated</span></strong></span><span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></span></font>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体"> !--- Specifies that the IP address for this interface<o:p></o:p></font></span></em></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体"> !--- is obtained via PPP/IPCP address negotiation.<o:p></o:p></font></span></em></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体"> !--- This example was set up in a lab with an IP address<o:p></o:p></font></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"> !--- assigned with IPCP.</span></em></span><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> no ip directed-broadcast<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> <strong>ip nat outside</strong><o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体"> !--- This indicates that the interface is connected <o:p></o:p></font></span></em></span>
1
<font face="宋体"><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><span style="mso-spacerun: yes">&nbsp;</span>!--- to the outside network.</span></em></span><span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p></o:p></span></em></span></font>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> encapsulation ppp<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> no ip mroute-cache<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> no ip route-cache<o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><font face="宋体"> <strong>crypto map rtp</strong><o:p></o:p></font></span></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: black"><o:p><font face="宋体">&nbsp;</font></o:p></span></em></span>
1
<span style="mso-bookmark: dr"><em><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: blue"><font face="宋体"> !--- Use the <strong>crypto map</strong> interface configuration command<o</