VyOS 站点到站点（Site-to-Site）VPN 配置

 发表于 January 1, 0001  |  3 分钟  |  581 个字  |  SK

r1: set interfaces ethernet eth0 address 192.168.12.1/24 set protocols static route 0.0.0.0/0 next-hop 192.168.12.2

r2: set nat source rule 100 description “to internet” set nat source rule 100 source address 192.168.12.0/24 #nat set nat source rule 100 outbound-interface eth0 set nat source rule 100 translation address masquerade

#set nat source rule 10 outbound-interface ’eth0' #set nat source rule 10 source address ‘192.168.1.0/24’ #set nat source rule 10 translation address ‘masquerade’

[阅读全文]
netops  vyos  VPN  网络运维 

华为设备 IPsec VPN 配置

 发表于 January 1, 0001  |  1 分钟  |  143 个字  |  SK 

#R1
#
acl number 3100  
 rule 5 permit ip source 192.168.10.0 0.0.0.255 destination 10.192.0.0 0.0.0.255
 
#
ipsec proposal pro1
#
ike peer r4 v1
 pre-shared-key simple sklinux
 remote-address 122.0.34.4
#
ipsec policy r1 10 isakmp
 security acl 3100
 ike-peer r4
 proposal pro1
#
...
#
interface GigabitEthernet0/0/0
 ip address 120.0.12.1 255.255.255.0 
 ipsec policy r1 #接口下应用ipsec策略
#
interface GigabitEthernet0/0/1
 ip address 192.168.10.254 255.255.255.0 
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 120.0.12.2
#

#R4

#
acl number 3100  
 rule 5 permit ip source 10.192.0.0 0.0.0.255 destination 192.168.10.0 0.0.0.255
 
#
ipsec proposal pro1
#
ike peer r1 v1
 pre-shared-key simple sklinux
 remote-address 120.0.12.1
#
ipsec policy r4 10 isakmp
 security acl 3100
 ike-peer r1
 proposal pro1
#
...
interface GigabitEthernet0/0/0
 ip address 122.0.34.4 255.255.255.0 
 ipsec policy r4  #接口应用ipsec策略
#
interface GigabitEthernet0/0/1
 ip address 10.192.0.254 255.255.255.0 
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 122.0.34.3
#
netops  ipsec  VPN  网络安全