v4版第五天答案ccnasecurity作业

CCNASecurity1.配置L2L

（EIGRP，Site1和Site2分别通过EIGRP学到对方站点身后网络路由。为了提供高可用性，公司准备在两个站点间部署IPSec，IPSec的主要用途是为了备份专线网络，例如：当“Site1EIGRP学到“Site2”身后网络“2.2.2.0/24”路由的时候，两个站点间的流量通过IPSec加密穿越互联网抵达对端站点。 配置方式配置这个 答hostnameSite1!ipaddress1.1.1.1!interfaceFastEthe descriptionLink-to-Dedicatedno!interfaceFastEthe descriptionLink-to-Inte no!routereigrpnoauto-summary!hostnameSite2!ipaddress2.2.2.2!interfaceFastEthe descriptionLink-to-Dedicatedno! descriptiondescriptionLink-to-Inte ipaddress61.128.1.2255.255.255.0no!routereigrpnoauto-summary! hostnameInte!interfaceFastEthe descriptionLink-to-Inte no!interfaceFastEthe descriptionLink-to-Inte no *****************Site1传统IPSec cryptoisakmp10!!permitiphost1.1.1.1host！cryptomapcisco10ipsec-isakmpsetpeer61.128.1.2settransform-setciscomatchaddress！cryptomapcisco！iproute2.2.2.0255.255.255.0202.100.1.10254（注意浮动静态路由配置*****************Site2传统IPSec cryptoisakmp10!!permitiphost2.2.2.2host!cryptomapcisco10ipsec-isakmpsetpeer202.100.1.1settransform-setciscomatchaddress! descriptiondescriptionLink-to-Inte cryptomapcisco!*****************Site1传统GREOverIPSec配置******************cryptoisakmp10!cryptoipsectransform-setciscoesp-desesp-md5-hmacmodetransport!cryptoipsecprofileipsecprofsettransform-setcisco!!!routereigrp(noauto-summary*****************Site2传统GREOverIPSec配置******************cryptoisakmp10!cryptoipsectransform-setciscoesp-desesp-md5-hmacmodetransport!cryptoipsecprofileipsecprofsettransform-setcisco!!!routereigrp(noauto-summary注意一定要ShutdownSi