最佳答案
默认路由不要走隧道
明细路由丢给隧道
(0)
明细路由使用ospf宣告的, Destination/Mask Proto Pre Cost NextHop Interface 0.0.0.0/0 Static 60 0 122.1.1.2 GE1/0/0 0.0.0.0/32 Direct 0 0 127.0.0.1 InLoop0 10.0.0.0/30 Direct 0 0 10.0.0.1 Tun0 10.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0 10.0.0.3/32 Direct 0 0 10.0.0.1 Tun0 10.10.10.0/30 Direct 0 0 10.10.10.1 RAGG1 10.10.10.1/32 Direct 0 0 127.0.0.1 InLoop0 10.10.10.3/32 Direct 0 0 10.10.10.1 RAGG1 10.11.11.0/30 O_INTRA 10 1563 10.0.0.2 Tun0 122.1.1.0/30 Direct 0 0 122.1.1.1 GE1/0/0 122.1.1.1/32 Direct 0 0 127.0.0.1 InLoop0 122.1.1.3/32 Direct 0 0 122.1.1.1 GE1/0/0 127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0 127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0 127.255.255.255/32 Direct 0 0 127.0.0.1 InLoop0 192.168.1.0/24 O_INTER 10 2 10.10.10.2 RAGG1 224.0.0.0/4 Direct 0 0 0.0.0.0 NULL0 224.0.0.0/24 Direct 0 0 0.0.0.0 NULL0 255.255.255.255/32 Direct 0 0 127.0.0.1 InLoop0
是不是路由丢到tunnel口了
(0)
静态缺省0.0.0.0路由还是走的公网,ospf宣告的内网段
静态缺省0.0.0.0路由还是走的公网,ospf宣告的内网段
配置有问题,得把你现在的配置贴出来哦。
(0)
interface GigabitEthernet1/0/0 port link-mode route combo enable copper ip address 122.1.1.1 255.255.255.252 manage ping inbound manage ping outbound ipsec apply policy zongbu acl advanced 3000 rule 5 deny ip source 192.168.1.0 0.0.0.255 destination 192.168.2.0 0.0.0.255 rule 10 permit ip source 192.168.1.0 0.0.0.255 ipsec transform-set zongbu_IPv4_1 esp encryption-algorithm 3des-cbc esp authentication-algorithm sha256 # ipsec policy-template zongbu 1 transform-set zongbu_IPv4_1 local-address 122.1.1.1 ike-profile zongbu_IPv4_1 # ipsec policy zongbu 1 isakmp template zongbu # ike profile zongbu_IPv4_1 keychain zongbu_IPv4_1 exchange-mode aggressive match remote identity address 0.0.0.0 0.0.0.0 match local address GigabitEthernet1/0/0 proposal 1 # ike proposal 1 encryption-algorithm 3des-cbc dh group5 authentication-algorithm sha256 # ike keychain zongbu_IPv4_1 match local address GigabitEthernet1/0/0 pre-shared-key address 0.0.0.0 0.0.0.0 key cipher $c$3$QxKQDQWBTiOvEwSkfLNp6hDgrnp6Zg==
楼下配置
不是吧,你这问题还没解决
完整配置
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
明细路由使用ospf宣告的, Destination/Mask Proto Pre Cost NextHop Interface 0.0.0.0/0 Static 60 0 122.1.1.2 GE1/0/0 0.0.0.0/32 Direct 0 0 127.0.0.1 InLoop0 10.0.0.0/30 Direct 0 0 10.0.0.1 Tun0 10.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0 10.0.0.3/32 Direct 0 0 10.0.0.1 Tun0 10.10.10.0/30 Direct 0 0 10.10.10.1 RAGG1 10.10.10.1/32 Direct 0 0 127.0.0.1 InLoop0 10.10.10.3/32 Direct 0 0 10.10.10.1 RAGG1 10.11.11.0/30 O_INTRA 10 1563 10.0.0.2 Tun0 122.1.1.0/30 Direct 0 0 122.1.1.1 GE1/0/0 122.1.1.1/32 Direct 0 0 127.0.0.1 InLoop0 122.1.1.3/32 Direct 0 0 122.1.1.1 GE1/0/0 127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0 127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0 127.255.255.255/32 Direct 0 0 127.0.0.1 InLoop0 192.168.1.0/24 O_INTER 10 2 10.10.10.2 RAGG1 224.0.0.0/4 Direct 0 0 0.0.0.0 NULL0 224.0.0.0/24 Direct 0 0 0.0.0.0 NULL0 255.255.255.255/32 Direct 0 0 127.0.0.1 InLoop0