正在收集配置...
当前配置:
!
!version 1.3.3H
service timestamps log date
service timestamps debug date
no service password-encryption
!
hostname RT2
!
!
!
!
!
!
gbsc group default
!
!
!
!
!
!
!
!
!
crypto isakmp key 123456 10.80.255.17 255.255.255.255 !
!
crypto isakmp policy 1
hash md5
!
crypto ipsec transform-set ipsec
transform-type esp-des esp-md5-hmac
!
crypto map ipsec 10 ipsec-isakmp
set peer 10.80.255.17
set transform-set ipsec
match address ipsecacl
!
!
interface Tunnel1
mtu 1476
ip address 10.80.255.18 255.255.255.252
crypto map ipsec
tunnel source GigaEthernet0/5
tunnel destination 10.80.255.25
!
interface Multilink1
ip address 10.80.255.22 255.255.255.252 no ip directed-broadcast
ppp multilink
multilink-group 1
bandwidth 64
dlc-compress MPPC
!
interface FastEthernet0/0
no ip address
no ip directed-broadcast
!
interface GigaEthernet0/3
no ip address
no ip directed-broadcast
!
interface GigaEthernet0/3.10
ip address 172.17.10.254 255.255.255.0 no ip directed-broadcast encapsulation dot1Q 10
bandwidth 1000000
delay 1
!
interface GigaEthernet0/3.20
ip address 172.17.20.254 255.255.255.0 no ip directed-broadcast encapsulation dot1Q 20
bandwidth 1000000
delay 1
!
interface GigaEthernet0/3.100
ip address 172.17.101.254 255.255.254.0 no ip directed-broadcast encapsulation dot1Q 100
bandwidth 1000000
delay 1
!
interface GigaEthernet0/4
no ip address
!
interface GigaEthernet0/5
ip address 10.80.255.30 255.255.255.252 no ip directed-broadcast
!
interface GigaEthernet0/6
no ip address
no ip directed-broadcast
!
interface Serial0/1
no ip address
no ip directed-broadcast encapsulation ppp
ppp multilink
multilink-group 1
!
interface Serial0/2
no ip address
no ip directed-broadcast encapsulation ppp
ppp multilink
multilink-group 1
physical-layer speed 2048000
!
interface Async0/0
no ip address
no ip directed-broadcast
!
!
!
!
router rip
version 2
no auto-summary
network 10.80.255.28 255.255.255.252 network 172.17.20.0 255.255.255.0
!
!
!
router bgp 2
bgp log-neighbor-changes
network 172.17.10.0/24
neighbor 10.80.255.17 remote-as 1
neighbor 10.80.255.17 route-map Z in
neighbor 10.80.255.21 remote-as 1
neighbor 10.80.255.21 route-map B in
!
!
!
!
!
!
!
!
!
!
!
!
ip access-list extended ipsecacl
permit ip 172.17.10.0 255.255.255.0 10.80.0.0 255.255.0.0 !
!
route-map Z 1 permit
match ip address prefix-list xzcw
set metric 100
!
route-map Z 2 permit
match ip address prefix-list yx
set metric 200
!
route-map B 1 permit
match ip address prefix-list yxxx
set metric 100
!
route-map B 2 permit
match ip address prefix-list xzcw
set metric 200
!
ip prefix-list xzcw seq 1 permit 10.80.20.0/24
ip prefix-list xzcw seq 2 permit 10.80.40.0/24
ip prefix-list yx seq 1 permit 10.80.30.0/24
ip prefix-list yxxx seq 1 permit 10.80.30.0/24
ip prefix-list yxxx seq 2 permit 10.80.50.0/24
!
!
!
! ! ! ! !。