r1:
conf t
int f0/1
ip add 172.16.1.1 255.255.255.0
no sh
int f0/0
ip add 14.0.0.1 255.255.255.0
no sh
exit
router rip
ver 2
no au
net 14.0.0.0
exit
int tunnel 0
ip add 192.168.2.1 255.255.255.0
tunnel source 14.0.0.1
tunnel des 24.0.0.2
int tunnel 1
ip add 192.168.3.1 255.255.255.0
tunnel source 14.0.0.1
tunnel des 34.0.0.3
exit
router ospf 1
network 192.168.2.0 0.0.0.255 a 0
network 192.168.3.0 0.0.0.255 a 0
network 172.16.1.0 0.0.0.255 a 0
exit
R2:
conf t
int f0/1
ip add 172.16.2.1 255.255.255.0
no sh
int f0/0
ip add 24.0.0.2 255.255.255.0
no sh
exit
router rip
ver 2
no au
net 24.0.0.0
exit
int tunnel 0
ip add 192.168.2.2 255.255.255.0
tunnel source 24.0.0.2
tunnel des 14.0.0.1
exit
router ospf 1
network 192.168.2.0 0.0.0.255 a 0
network 172.16.2.0 0.0.0.255 a 0
exit
R3:
conf t
int f0/1
ip add 172.16.3.1 255.255.255.0
no sh
int f0/0
ip add 34.0.0.3 255.255.255.0
no sh
exit
router rip
ver 2
no au
net 34.0.0.0
exit
int tunnel 1
ip add 192.168.3.3 255.255.255.0
tunnel sou 34.0.0.3
tunnel des 14.0.0.1
exit
router ospf 1
network 192.168.3.0 0.0.0.255 a 0
network 172.16.3.0 0.0.0.255 a 0
R4:
conf t
int f0/1
ip add 14.0.0.4 255.255.255.0
no sh
int f0/2
ip add 24.0.0.4 255.255.255.0
no sh
int f0/3
ip add 34.0.0.4 255.255.255.0
no sh
exit
router rip
ver 2
no au
net 14.0.0.0
net 24.0.0.0
net 34.0.0.0
exit
最重要的区别!!!IPSEC只支持TCP/IP协议的网络,GRE则支持多协议,不同的网络类型。(如IPX,APPLETALK)
这就是为什么IPSEC和GRE常常联用的原因。
把IPSEC封装成GRE来穿越不同的网络类型,从而使IPSEC对等体的建立在不同网络环境中。。。
欢迎分享,转载请注明来源:夏雨云
评论列表(0条)