h3c msr830 三台830路由器是否可以通过IPsec连接，实现三个局域网互通

可以。举个例子，VPN1建立三条IPSec隧道：

# interface LoopBack0 

  ip address 10.1.1.1 255.255.255.0 

# interface GigabitEthernet0/0 

  ip address 202.0.0.1 255.255.255.0 

  ipsec apply policy vpn 

# 

  ip route-static 0.0.0.0 0 202.0.0.2 

# 

acl advanced 3000

  rule 0 permit ip source 10.1.1.0 0.0.0.255 destination 10.2.2.0 0.0.0.255 

#

 acl advanced 3001  

 rule 0 permit ip source 10.1.1.0 0.0.0.255 destination 10.3.2.0 0.0.0.255 

#

acl advanced 3002  

 rule 0 permit ip source 10.1.1.0 0.0.0.255 destination 10.4.2.0 0.0.0.255 

#

 ipsec transform-set 1 

  esp encryption-algorithm 3des-cbc 

  esp authentication-algorithm sha1 

 #

ipsec policy vpn 1 isakmp transform-set 1  

 security acl 3000 remote-address 203.0.0.1 

  ike-profile 1 

#

ipsec policy vpn 2 isakmp transform-set 1 

 security acl 3001 remote-address 204.0.0.1 

 ike-profile 2 

# 

ipsec policy vpn 3 isakmp transform-set 1 

 security acl 3002 remote-address 205.0.0.1 

 ike-profile 3 

#

ike profile 1 

 keychain 1

 local-identity address 202.0.0.1 match remote identity address 203.0.0.1 255.255.255.0 

 proposal 1 

 # 

ike profile 2

 keychain 2 

 local-identity address 202.0.0.1 match remote identity address 204.0.0.1 255.255.255.0   

 proposal 1

#

ike profile 3 

 keychain 3 

 local-identity address 202.0.0.1 match remote identity address 205.0.0.1 255.255.255.0   

 proposal 1

 #

ike proposal 1

# 

ike keychain 1  

 pre-shared-key address 203.0.0.1 255.255.255.0 key cipher $c$3$lElK7w3LuuI8Ss26gl4UM2AhqWtffg== 

# 

ike keychain 2  

 pre-shared-key address 204.0.0.1 255.255.255.0 key cipher $c$3$8/J5e7OKLI0t6nIJbtgB+WGlj4cPaQ== 

# 

ike keychain 3

 pre-shared-key address 205.0.0.1 255.255.255.0 key cipher $c$3$Rki7mz+Gx/XjPmCdhGb2gS+3jQYC6g== #

VPN2-4等的配置与此类似。粘贴为什么不识别格式呢？这字体也太难看了。