no service password-encryption !
hostname R2 !
ip subnet-zero !
no ip domain-lookup !
ip audit notify log ip audit po max-events 100 !
crypto isakmp policy 1 encr 3des
authentication pre-share group 2
crypto isakmp key cisco address 200.1.1.1 !
crypto ipsec transform-set cisco ah-sha-hmac esp-3des !
crypto map vpn local-address Serial1/0 crypto map vpn 10 ipsec-isakmp set peer 200.1.1.1
set transform-set cisco match address 100 !
call rsvp-sync !
interface Loopback0
ip address 192.168.2.1 255.255.255.0 !
interface Tunnel0
ip address 172.16.1.2 255.255.255.0 tunnel source Serial1/0 tunnel destination 200.1.1.1 crypto map vpn !
interface FastEthernet0/0 no ip address shutdown duplex auto speed auto !
interface Serial1/0
ip address 200.1.1.2 255.255.255.0
serial restart-delay 0 crypto map vpn !
interface Serial1/1 no ip address shutdown
serial restart-delay 0 !
interface Serial1/2 no ip address shutdown
serial restart-delay 0 !
interface Serial1/3 no ip address shutdown
serial restart-delay 0 !
router ospf 1 router-id 2.2.2.2 log-adjacency-changes
network 172.16.1.2 0.0.0.0 area 0
network 192.168.2.1 0.0.0.0 area 0 !
ip classless ip http server !
access-list 100 permit gre host 200.1.1.2 host 200.1.1.1 !
dial-peer cor custom ! ! ! ! ! line con 0 exec-timeout 0 0 logging synchronous line aux 0 line vty 0 4 ! end
源文档 <[url]http://www.netyourlife.net/forum/viewthread.php?tid=5936&highlight=tunnel[/url]>
关于GRE Tunnel Over Ipsec VPN速度很慢的问题：
楼上说的不错，但是一阶段的group的资源浪费不是太明显，因为ISAKMP的SA超时时间是一天，一天内只要ipsec不断，一般来说，一阶段是不会重新协商的，但是如果2阶段设置PFS，那CPU就厉害了
源文档 <[url]http://www.netyourlife.net/forum/viewthread.php?tid=6942&highlight=ipsec+gre[/url]>
有个做法，在inter tun 0下敲tunnel mode ipsec ipv4------------这是IPSEC自己的tunnel,(不再需要GRE了)敲了后就不是GRE OVER IPSEC了，12.4开始有的，不知道你那26支持不
源文档 <[url]http://www.netyourlife.net/forum/viewthread.php?tid=6942&highlight=ipsec+gre[/url]>
上面的问题已解决了，原因是那些安全性的设置，导致不能访问应用程序。将这些 no ip redirects no ip unreachables no ip proxy-arp 删掉之后正常。
百度搜索“77cn”或“免费范文网”即可找到本站免费阅读全部范文。收藏本站方便下次阅读，免费范文网，提供经典小说综合文库GRE over IPsec 与IPsec over GRE的区别(3)在线全文阅读。
相关推荐：