VPN over GRE (Routing Protocol OSPF) ppsx

Buoc 2:Buoc 3: Nhap cac thong so cho GRE tunnel... Buoc 4: Tao 1 duong backup GREBuoc 5: VPN authentication dung Pre-shared key... Buoc 6: chi dinh thuat toan ma hoa, xac thuc dung defau

Buoc 1: Bat dau cau hinh VPN

GRE Tunnel135.3.25.1/24

133.1.1.1/24 133.1.1.2/24 132.1.1.1/24 132.1.1.2/24

136.25.4.1/24

Fa0/00Fa0/00

Buoc 2:

Buoc 3: Nhap cac thong so cho GRE tunnel

Buoc 4: Tao 1 duong backup GRE

Buoc 5: VPN authentication (dung Pre-shared key)

Buoc 6: chi dinh thuat toan ma hoa, xac thuc (dung default)

Buoc 7: chi dinh Transform-set (dung default)

Buoc 8: chi dinh giao thuc dinh tuyen nao se chay tren VPN (dung OSPF)

Buoc 9: cac thong so cua giao thuc dinh tuyen OSPF

Buoc 10: Ket thuc cau hinh VPN

Cau hinh cua router RB ( Router RA lam tuong tu) Tren router ISP chi dat IP chi cac interface

service timestamps debug datetime msec

service timestamps log datetime msec

description Tunnel to133.1.1.1 set peer 133.1.1.1

set transform-set ESP-3DES-SHA match address 100

crypto map SDM_CMAP_1

access-list 100 remark SDM_ACL Category=4

access-list 100 permit gre host 132.1.1.2 host 133.1.1.1

Create a secure GRE Tunnel

Chi dinh cac IP Physical va IP Gre-Tunnel

Co the su dung BackUp Gre-Tunnel neu can.

Thiet lap cac thong so cho VNP Connection: Authentication, encryption…

Chon giao thuc Routing (OSPF)

Add nhung Network can quang ba, trong TH nay quang ba 2 mang: Lan va Tunnel

Gre-Finished & Test

Success

Cau hinh Applied tren Router

crypto map SDM_CMAP_1 1 ipsec-isakmp

description Tunnel to132.1.1.2

access-list 100 permit gre host 133.1.1.1 host 132.1.1.2