MSR2600的配置代码中这一段#ike peer v5 proposal 1 pre-shared-key cipher $c$3$jNmFZRpJxkAMsrIVwMoYWJ8014PJfMpLhg== remote-address ***.*** / 这个域名是对端ER3200G2的。 remote-address 113.116.57.250 /再次查看的时候就是显示ip地址#这个地址然后就固定了 。当对端ER3200G2的ip地址发送动态变化后,VPN就断开了。请问这种情况怎么处理
按道理配置的时候写的是固定域名了 msr2600应该一直连接才对。
是不是代码写的有问题?
请指教了 谢谢了
(0)
最佳答案
是不是配置有问题呢 以下是配置
MSR2600配置
version 5.20, Release 2514P14
#
sysname MSR2600
#
domain default enable system
#
dns resolve
dns proxy enable
#
telnet server enable
#
port-security enable
#
password-recovery enable
#
acl number 3002
rule 0 permit ip source 192.168.2.0 0.0.0.255 destination 192.168.1.0 0.0.0.255
acl number 3333
rule 0 deny ip source 192.168.2.0 0.0.0.255 destination 192.168.1.0 0.0.0.255
rule 5 permit ip
#
vlan 1
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
ike proposal 1
encryption-algorithm 3des-cbc
dh group2
authentication-algorithm md5
#
ike peer v5
proposal 1
pre-shared-key cipher $c$3$jNmFZRpJxkAMsrIVwMoYWJ8014PJfMpLhg==
remote-address 113.116.57.250
#
ipsec transform-set v5
encapsulation-mode tunnel
transform esp
esp authentication-algorithm md5
esp encryption-algorithm 3des
#
ipsec policy v5 1 isakmp
security acl 3002
ike-peer v5
transform-set v5
#
dhcp server ip-pool vlan1 extended
network ip range 192.168.2.16 192.168.2.254
network mask 255.255.255.0
gateway-list 192.168.2.1
dns-list 114.114.114.114 202.96.128.86
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$0Yu/gQOnbonGYdaV9U6Btq0aes6GlTV+UXcL
authorization-attribute level 3
service-type telnet
service-type web
#
cwmp
undo cwmp enable
#
ddns policy ***.***
url ***.***/dyndns/update?system=dyndns&hostname=<h>&myip=<a>
username bestcare2017
password cipher $c$3$qPLj7v6f9MYFOnk2pvmMwntaH8M3ga+1okSF
#
interface Aux0
async mode flow
link-protocol ppp
#
interface Cellular0/0
async mode protocol
link-protocol ppp
ipsec no-nat-process enable
#
interface Dialer10
nat outbound 3333
link-protocol ppp
ppp chap user 075500873715@163.gd
ppp chap password cipher $c$3$Z2w3wlqpN5jG5P5FvJGT1buk6/qzu+amUZCA
ppp pap local-user 075500873715@163.gd password cipher $c$3$/JF3XnTrRTwu8r9zAid
jml/3iKQaE8/eIP2X
ppp ipcp dns admit-any
ppp ipcp dns request
mtu 1200
ip address ppp-negotiate
tcp mss 1024
dialer user username
dialer-group 10
dialer bundle 10
ipsec policy v5
ddns apply policy ***.*** fqdn ***.***
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.2.1 255.255.255.0
dhcp server apply ip-pool vlan1
#
interface GigabitEthernet0/0
port link-mode route
ip address 192.168.3.2 255.255.255.0
#
interface GigabitEthernet0/1
port link-mode route
nat outbound 3333
pppoe-client dial-bundle-number 10
#
interface GigabitEthernet0/2
port link-mode bridge
#
interface GigabitEthernet0/3
port link-mode bridge
#
interface GigabitEthernet0/4
port link-mode bridge
#
interface GigabitEthernet0/5
port link-mode bridge
#
interface GigabitEthernet0/6
port link-mode bridge
#
interface GigabitEthernet0/7
port link-mode bridge
#
interface GigabitEthernet0/8
port link-mode bridge
#
interface GigabitEthernet0/9
port link-mode bridge
#
ip route-static 0.0.0.0 0.0.0.0 Dialer10
#
dhcp enable
#
dialer-rule 10 ip permit
#
nms primary monitor-interface GigabitEthernet0/0
#
load xml-configuration
#
load tr069-configuration
#
user-interface tty 12
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
#
return
[MSR2600]dis ike sa
total phase-1 SAs: 0
connection-id peer flag phase doi
----------------------------------------------------------------
1468 <unnamed> NONE 1 IPSEC
flag meaning
RD--READY ST--STAYALIVE RL--REPLACED FD--FADING TO--TIMEOUT RK--REKEY
(0)
暂无评论
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论