Geneko GWR-I series, Руководство пользователя

Страница: 101 / 113

USER MANUAL GWR-I Cellular Router Series
101
crypto map GWR 10 ipsec-isakmp dynamic dynGWR
!
interface FastEthernet0/0
description WAN INTERFACE
ip address 150.160.170.1 255.255.255.252
ip nat outside
no ip route-cache
no ip mroute-cache
duplex auto
speed auto
crypto map GWR
!
interface FastEthernet0/1
description LAN INTERFACE
ip address 10.10.10.1 255.255.255.0
ip nat inside
no ip route-cache
no ip mroute-cache
duplex auto
speed auto
!
ip route 0.0.0.0 0.0.0.0 150.160.170.2
!
ip http server
no ip http secure-server
ip nat inside source list nat_list interface FastEthernet0/0 overload
!
ip access-list extended nat_list
deny ip 10.10.10.0 0.0.0.255 192.168.10.0 0.0.0.255
permit ip 10.10.10.0 0.0.0.255 any
!
access-list 23 permit any
!
line con 0
line aux 0
line vty 0 4
access-class 23 in
privilege level 15
login local
transport input telnet ssh
line vty 5 15
access-class 23 in
privilege level 15
login local
transport input telnet ssh
!
end
Use this section to confirm that your configuration works properly. Debug commands that run on the
Cisco router can confirm that the correct parameters are matched for the remote connections.
show ip interface —Displays the IP address assignment to the spoke router.
show crypto isakmp sa detail —Displays the IKE SAs, which have been set-up between the IPsec
initiators.
show crypto ipsec sa —Displays the IPsec SAs, which have been set-up between the IPsec initiators.
debug crypto isakmp —Displays messages about Internet Key Exchange (IKE) events.
debug crypto ipsec —Displays IPsec events.
debug crypto engine —Displays crypto engine events.
IPSec Tunnel configuration between GWR-I Router and Juniper SSG firewall
IPSec tunnel is a type of a VPN tunnels with a secure tunneling method. On the diagram below
Figure 90 is illustrated simple network with GWR-I Router and Cisco Router. Idea is to create IPSec tunnel
for LAN to LAN (site to site) connectivity.