v4版第五天答案ccnasecurity作業(yè)

CCNASecurity1.配置L2L

（EIGRP，Site1和Site2分別通過EIGRP學到對方站點身后網(wǎng)絡(luò)路由。為了提供高可用性，公司準備在兩個站點間部署IPSec，IPSec的主要用途是為了備份專線網(wǎng)絡(luò)，例如：當“Site1EIGRP學到“Site2”身后網(wǎng)絡(luò)“2.2.2.0/24”路由的時候，兩個站點間的流量通過IPSec加密穿越互聯(lián)網(wǎng)抵達對端站點。 配置方式配置這個 答hostnameSite1!ipaddress1.1.1.1!interfaceFastEthe descriptionLink-to-Dedicatedno!interfaceFastEthe descriptionLink-to-Inte no!routereigrpnoauto-summary!hostnameSite2!ipaddress2.2.2.2!interfaceFastEthe descriptionLink-to-Dedicatedno! descriptiondescriptionLink-to-Inte ipaddress61.128.1.2255.255.255.0no!routereigrpnoauto-summary! hostnameInte!interfaceFastEthe descriptionLink-to-Inte no!interfaceFastEthe descriptionLink-to-Inte no *****************Site1傳統(tǒng)IPSec cryptoisakmp10!!permitiphost1.1.1.1host！cryptomapcisco10ipsec-isakmpsetpeer61.128.1.2settransform-setciscomatchaddress！cryptomapcisco！iproute2.2.2.0255.255.255.0202.100.1.10254（注意浮動靜態(tài)路由配置*****************Site2傳統(tǒng)IPSec cryptoisakmp10!!permitiphost2.2.2.2host!cryptomapcisco10ipsec-isakmpsetpeer202.100.1.1settransform-setciscomatchaddress! descriptiondescriptionLink-to-Inte cryptomapcisco!*****************Site1傳統(tǒng)GREOverIPSec配置******************cryptoisakmp10!cryptoipsectransform-setciscoesp-desesp-md5-hmacmodetransport!cryptoipsecprofileipsecprofsettransform-setcisco!!!routereigrp(noauto-summary*****************Site2傳統(tǒng)GREOverIPSec配置******************cryptoisakmp10!cryptoipsectransform-setciscoesp-desesp-md5-hmacmodetransport!cryptoipsecprofileipsecprofsettransform-setcisco!!!routereigrp(noauto-summary注意一定要ShutdownSi