ܲcisco·
Ҫãصڴʡԣ

 

crypto isakmp policy 1

authentication pre-share

crypto isakmp key ikeadmin address 0.0.0.0

!

crypto ipsec transform-set jiang esp-des esp-md5-hmac

mode transport

!

crypto ipsec profile vpnconfig

set transform-set jiang

!

interface Tunnel0

bandwidth 2000

ip address 10.0.0.1 255.255.255.0

ip mtu 1436עMTU

ip nhrp authentication dmvpnkeynhrp֤ƥ󣬵mGREԣ

ip nhrp map multicast dynamicNHRPԶ֧·ಥNHRPӳУ

ip nhrp network-id 99NHRP,ƥ󣬵mGREԣ

ip nhrp holdtime 300

no ip split-horizon eigrp 1ʹEIGRPЭʱˮƽָ

no ip next-hop-self eigrp 1 (ʹEIGRPʱֱӽ̬SPOKE-TO-SPOKE)

delay 1000

tunnel source Ethernet1

tunnel mode gre multipointӿڵķװģʽΪmGRE

tunnel key daoyou (tunnel ֤)

tunnel protection ipsec profile vpnconfig(ΪӿָIPSECģ)

!

interface Ethernet1

ip address 218.4.x.2 255.255.255.224

!

interface Ethernet0

ip address 192.168.2.253 255.255.255.0

!

router eigrp 1

network 10.0.0.0 0.0.0.255 area 0

network 192.168.0.0 0.0.0.255 area 0

 

´·
crypto isakmp policy 1

authentication pre-share

crypto isakmp key ikeadmin address 0.0.0.0

!

crypto ipsec transform-set jiang esp-des esp-md5-hmac

mode transport

!

crypto ipsec profile vpnconfig

set transform-set jiang

 

interface Tunnel0

 ip address 10.0.0.2 255.255.255.0

 ip nhrp authentication dmvpnkey

 ip nhrp map 10.0.0.1 218.4.x.2

ip nhrp map multicast 218.4.x.2

 ip nhrp network-id 99

 ip nhrp holdtime 60

 ip nhrp nhs 10.0.0.1

 ip tcp adjust-mss 1436

 tunnel source Dialer0

tunnel destination  218.4.x.2

 tunnel key daoyou

tunnel protection ipsec profile vpnprof

!

interface Ethernet0

 ip address 192.168.0.1 255.255.255.0

 ip nat inside

 half-duplex

!

interface FastEthernet0

 no ip address

 speed auto

 half-duplex

 pppoe enable

 pppoe-client dial-pool-number 1

!

interface Dialer0

 mtu 1436

 bandwidth 2048

 ip address negotiated

 ip nat outside

 encapsulation ppp

 dialer pool 1

 dialer-group 1

 ppp authentication pap callin

 ppp pap sent-username sz3343535@163.gd password 7 

!

dialer-list 1 protocol ip permit

ip nat inside source list 100 interface Dialer0 overload

