VPN主备切换.docx

VPN主备切换.docx

《VPN主备切换.docx》由会员分享，可在线阅读，更多相关《VPN主备切换.docx（15页珍藏版）》请在冰豆网上搜索。

VPN主备切换

RT3：

Buildingconfiguration...

Currentconfiguration:

1365bytes

!

version12.4

servicetimestampsdebugdatetimemsec

servicetimestampslogdatetimemsec

noservicepassword-encryption

!

hostnameR3

!

boot-start-marker

boot-end-marker

!

!

noaaanew-model

memory-sizeiomem5

!

!

ipcef

!

!

!

!

!

!

!

!

!

!

!

!

!

!

!

!

!

!

!

!

!

cryptoisakmppolicy10

hashmd5

authenticationpre-share

group2

cryptoisakmpkeyciscoaddress172.1.2.2

cryptoisakmpkeepalive103

!

!

cryptoipsectransform-setbluefoxesp-desesp-md5-hmac

!

cryptomapyaya10ipsec-isakmp

setpeer172.1.2.2

settransform-setbluefox

matchaddress101

reverse-route

!

!

!

!

interfaceLoopback3

ipaddress3.3.3.3255.255.255.255

!

interfaceEthernet0/0

ipaddress192.168.3.2255.255.255.252

ipospfnetworkpoint-to-point

half-duplex

cryptomapyaya

!

interfaceEthernet0/1

noipaddress

shutdown

half-duplex

!

interfaceEthernet0/2

noipaddress

shutdown

half-duplex

!

interfaceEthernet0/3

noipaddress

shutdown

half-duplex

!

routerospf1

router-id3.3.3.3

log-adjacency-changes

network3.3.3.30.0.0.0area0

network192.168.3.00.0.0.3area0

!

iphttpserver

noiphttpsecure-server

iproute0.0.0.00.0.0.0192.168.3.1

!

!

!

access-list101permitip192.168.6.00.0.0.255192.168.8.00.0.0.255

!

!

!

control-plane

SW1:

!

!

!

!

interfaceLoopback0

ipaddress1.1.1.1255.255.255.255

!

interfaceFastEthernet1/0

!

interfaceFastEthernet1/1

noswitchport

ipaddress192.168.1.2255.255.255.252

ipospfnetworkpoint-to-point

!

interfaceFastEthernet1/2

noswitchport

ipaddress192.168.3.1255.255.255.252

ipospfnetworkpoint-to-point

!

interfaceFastEthernet1/3

noswitchport

ipaddress192.168.6.1255.255.255.0

!

interfaceFastEthernet1/4

noswitchport

ipaddress192.168.4.2255.255.255.252

ipospfnetworkpoint-to-point

!

interfaceFastEthernet1/5

!

interfaceFastEthernet1/6

!

interfaceFastEthernet1/7

!

interfaceFastEthernet1/8

!

interfaceFastEthernet1/9

!

interfaceFastEthernet1/10

!

interfaceFastEthernet1/11

!

interfaceFastEthernet1/12

!

interfaceFastEthernet1/13

!

interfaceFastEthernet1/14

!

interfaceFastEthernet1/15

!

interfaceVlan1

noipaddress

!

routerospf1

router-id1.1.1.1

log-adjacency-changes

passive-interfacedefault

nopassive-interfaceFastEthernet1/1

nopassive-interfaceFastEthernet1/2

nopassive-interfaceFastEthernet1/4

network1.1.1.10.0.0.0area0

network192.168.1.00.0.0.3area0

network192.168.3.00.0.0.3area0

network192.168.4.00.0.0.3area0

network192.168.6.00.0.0.255area0

!

iphttpserver

noiphttpsecure-server

iproute0.0.0.00.0.0.0192.168.1.1

iproute192.168.8.0255.255.255.0192.168.3.2120

RT1:

!

interfaceLoopback0

ipaddress10.10.10.10255.255.255.255

!

interfaceEthernet0/0

ipaddress172.1.1.2255.255.255.240

ipnatoutside

ipvirtual-reassembly

half-duplex

!

interfaceEthernet0/1

noipaddress

shutdown

half-duplex

!

interfaceEthernet0/2

noipaddress

shutdown

half-duplex

!

interfaceEthernet0/3

noipaddress

shutdown

half-duplex

!

interfaceEthernet1/0

noipaddress

shutdown

half-duplex

!

interfaceEthernet1/1

noipaddress

shutdown

half-duplex

!

interfaceEthernet1/2

ipaddress192.168.1.1255.255.255.252

ipnatinside

ipvirtual-reassembly

ipospfnetworkpoint-to-point

half-duplex

!

interfaceEthernet1/3

noipaddress

shutdown

half-duplex

!

routerospf1

router-id10.10.10.10

log-adjacency-changes

passive-interfacedefault

nopassive-interfaceEthernet1/2

network10.10.10.100.0.0.0area0

network192.168.1.00.0.0.3area0

!

iphttpserver

noiphttpsecure-server

iproute0.0.0.00.0.0.0172.1.1.1

!

!

ipnatinsidesourcelist101interfaceEthernet0/0overload

ipnatinsidesourcestatic192.168.3.2interfaceEthernet0/0

!

access-list101permitipanyany

!

RT4:

!

interfaceLoopback0

ipaddress4.4.4.4255.255.255.255

!

interfaceEthernet0/0

ipaddress192.168.4.1255.255.255.252

ipospfnetworkpoint-to-point

half-duplex

!

interfaceEthernet0/1

ipaddress192.168.5.2255.255.255.252

ipospfnetworkpoint-to-point

shutdown

half-duplex

!

interfaceEthernet0/2

noipaddress

shutdown

half-duplex

!

interfaceEthernet0/3

noipaddress

shutdown

half-duplex

!

routerospf1

router-id4.4.4.4

log-adjacency-changes

passive-interfacedefault

nopassive-interfaceEthernet0/0

nopassive-interfaceEthernet0/1

network4.4.4.40.0.0.0area0

network192.168.4.00.0.0.3area0

network192.168.5.00.0.0.3area0

!

iphttpserver

RT5:

interfaceLoopback0

ipaddress5.5.5.5255.255.255.255

!

interfaceEthernet0/0

ipaddress192.168.7.2255.255.255.252

ipospfnetworkpoint-to-point

shutdown

half-duplex

!

interfaceEthernet0/1

ipaddress192.168.5.1255.255.255.252

ipospfnetworkpoint-to-point

half-duplex

!

interfaceEthernet0/2

noipaddress

shutdown

half-duplex

!

interfaceEthernet0/3

noipaddress

shutdown

half-duplex

!

routerospf1

router-id5.5.5.5

log-adjacency-changes

passive-interfacedefault

nopassive-interfaceEthernet0/0

nopassive-interfaceEthernet0/1

network5.5.5.50.0.0.0area0

network192.168.5.00.0.0.3area0

network192.168.7.00.0.0.3area0

!

iphttpserver

noiphttpsecure-server

RT2:

cryptoisakmppolicy10

hashmd5

authenticationpre-share

group2

cryptoisakmpkeyciscoaddress172.1.1.2

cryptoisakmpkeepalive103

!

!

cryptoipsectransform-setbluefoxesp-desesp-md5-hmac

!

cryptomapyaya10ipsec-isakmp

setpeer172.1.1.2

settransform-setbluefox

matchaddress101

reverse-route

!

!

!

!

interfaceLoopback0

ipaddress20.20.20.20255.255.255.255

!

interfaceEthernet0/0

ipaddress172.1.2.2255.255.255.240

half-duplex

cryptomapyaya

!

interfaceEthernet0/1

ipaddress192.168.2.1255.255.255.252

ipospfnetworkpoint-to-point

half-duplex

!

interfaceEthernet0/2

noipaddress

shutdown

half-duplex

!

interfaceEthernet0/3

noipaddress

shutdown

half-duplex

!

interfaceEthernet1/0

noipaddress

shutdown

half-duplex

!

interfaceEthernet1/1

noipaddress

shutdown

half-duplex

!

interfaceEthernet1/2

noipaddress

shutdown

half-duplex

!

interfaceEthernet1/3

noipaddress

shutdown

half-duplex

!

routerospf1

router-id20.20.20.20

log-adjacency-changes

passive-interfacedefault

nopassive-interfaceEthernet0/1

network20.20.20.200.0.0.0area0

network192.168.2.00.0.0.3area0

!

iphttpserver

noiphttpsecure-server

iproute0.0.0.00.0.0.0172.1.2.1

!

!

!

access-list101permitip192.168.8.00.0.0.255192.168.6.00.0.0.255

!

!

SW2:

interfaceLoopback0

ipaddress2.2.2.2255.255.255.255

!

interfaceFastEthernet1/0

!

interfaceFastEthernet1/1

noswitchport

ipaddress192.168.2.2255.255.255.252

ipospfnetworkpoint-to-point

!

interfaceFastEthernet1/2

noswitchport

ipaddress192.168.8.1255.255.255.0

!

interfaceFastEthernet1/3

noswitchport

ipaddress192.168.7.1255.255.255.252

ipospfnetworkpoint-to-point

!

interfaceFastEthernet1/4

!

interfaceFastEthernet1/5

!

interfaceFastEthernet1/6

!

interfaceFastEthernet1/7

!

interfaceFastEthernet1/8

!

interfaceFastEthernet1/9

!

interfaceFastEthernet1/10

!

interfaceFastEthernet1/11

!

interfaceFastEthernet1/12

!

interfaceFastEthernet1/13

!

interfaceFastEthernet1/14

!

interfaceFastEthernet1/15

!

interfaceVlan1

noipaddress

!

routerospf1

router-id2.2.2.2

log-adjacency-changes

passive-interfacedefault

nopassive-interfaceFastEthernet1/1

nopassive-interfaceFastEthernet1/3

network2.2.2.20.0.0.0area0

network192.168.2.00.0.0.3area0

network192.168.7.00.0.0.3area0

network192.168.8.00.0.0.255area0

!

iphttpserver

noiphttpsecure-server

iproute192.168.6.0255.255.255.0192.168.2.1120

!

!

!

!