20.3 IPsec VPN与源NAT配置

1.R1配置

[R1]acl 3001
[R1-acl-adv-3001]rule deny ip source 192.168.1.0 0.0.0.255 destination 192.168.3.0 0.0.0.255
[R1-acl-adv-3001]rule permit ip source 192.168.1.0 0.0.0.255

2.R3配置

[R3]acl 3001
[R3-acl-adv-3001]rule deny ip source 192.168.3.0 0.0.0.255 destination 192.168.1.0 0.0.0.255
[R3-acl-adv-3001]rule permit ip source 192.168.3.0 0.0.0.255

3.R2配置

[R2]interface LoopBack 0
[R2-LoopBack0]ip address 2.2.2.2 32

3.PC连通性测试R2LoopBack 0

PC1>ping 192.168.3.1
Ping 192.168.3.1: 32 data bytes, Press Ctrl_C to break
From 192.168.3.1: bytes=32 seq=2 ttl=127 time=16 ms

PC2>ping 2.2.2.2
Ping 2.2.2.2: 32 data bytes, Press Ctrl_C to break
From 2.2.2.2: bytes=32 seq=1 ttl=254 time=16 ms