华为***配置命令
interface GigabitEthernet0/0/0ip address 100.0.0.1 255.255.255.252
interface GigabitEthernet0/0/1
ip address 172.16.10.254 255.255.255.0
ip route-static 0.0.0.0 0.0.0.0 100.0.0.2
ike proposal 1
encryption-algorithm 3des-cbc
authentication-algorithm md5
authentication-method pre-share
dh group2
ike peer 200.0.0.1 v1
pre-shared-key simple tedu
ike-proposal 1
remote-address 200.0.0.1
acl number 3000
rule 5 permit ip source 172.16.10.0 0.0.0.255 destination 10.10.33.0 0.0.0.255
ipsec proposal 1
transform ah-esp
ipsec policy yf 1 isakmp
security acl 3000
ike-peer 200.0.0.1
proposal 1
interface GigabitEthernet0/0/0
ipsec policy yf
display ike sa
display ipsec sa
页:
[1]