第8章 IPSEC-VPN-8.1 VPN

1.GRE-VPN

1）配置内网互通路由
#R1
ip route-static 172.16.1.0 24 172.16.14.4

#R4
ip route-static 0.0.0.0 0.0.0.0 172.16.14.1

#R3
ip route-static 172.17.1.0 24 172.16.35.5

#R5
ip route-static 0.0.0.0 0.0.0.0 172.16.35.3

2）配置出口路由
#R1
ip route-static 0.0.0.0 0.0.0.0 12.1.1.2

#R3
ip route-static 0.0.0.0 0.0.0.0 23.1.1.2

3）配置隧道
#R1
interface Tunnel0/0/13
 ip address 172.16.13.1 255.255.255.0 
 tunnel-protocol gre
 source 12.1.1.1
 destination 23.1.1.3

#R3
interface Tunnel0/0/13
 ip address 172.16.13.3 255.255.255.0 
 tunnel-protocol gre
 source 23.1.1.3
 destination 12.1.1.1

4）配置隧道路由
#R1
ip route-static 172.17.1.0 24 Tunnel 0/0/13 172.16.13.3

#R3
ip route-static 172.16.1.0 24 Tunnel 0/0/13 172.16.13.1