Address
304 North Cardinal St.
Dorchester Center, MA 02124
Work Hours
Monday to Friday: 7AM - 7PM
Weekend: 10AM - 5PM
Address
304 North Cardinal St.
Dorchester Center, MA 02124
Work Hours
Monday to Friday: 7AM - 7PM
Weekend: 10AM - 5PM
GRE:General Routing Encapsulation 通用路由封装(数据不加密)
GRE VPN配置:(公网地址可达)
(1)缺省路由配置:使得两边的公网地址互通,GRE配置前,两边公网地址互通
R1:
ip route-s 0.0.0.0 0 12.1.1.2
R3:
ip route-s 0.0.0.0 0 23.1.1.2
(2)Tunnel配置
R1:
int Tunnel 0/0/0
tunnel-protocol gre
source 12.1.1.1
destination 23.1.1.3
ip add 192.168.13.1 24
R3:
int Tunnel 0/0/0
tunnel-protocol gre
source 23.1.1.3
destination 12.1.1.1
ip add 192.168.13.3 24
配置验证:
dis int tunnel 0/0/0
dis ip int brief
(3)静态路由
R1:
ip route-s 192.168.1.0 24 tunnel 0/0/0
R3:
ip route-s 192.168.1.0 24 tunnel 0/0/0
GRE本身并不支持加密,因而通过GRE隧道传输的流量时不加密的,将IPSec技术与GRE相结合,可以先建立GRE隧道队报文进行GRE封装,然后再建立IPSec隧道,对报文进行加密,以保证报文传输的完整性和私密性,GRE Over IPSec。
GRE:数据包没有加密,可以看到内容
R1&R3:
int tunnel 0/0/0
gre key 123654 # 0-42949672595
可选配置key
int tunnel 0/0/0
keepalive # 缺省发送周期5s,缺省重传次数3次