求一份IPSec vpn的配置实例

V7防火墙举例参考:

acl advanced 3101 

rule 0 permit ip source 172.x.x.0 0.0.0.15 destination 10.x.x.0 0.0.1.255

 ip route-static 10.x.x.0 255.255.254.0 117.x.x.74

ike identity fqdn yidong

 ike proposal 1

encryption-algorithm 3des-cbc

 authentication-algorithm md5

 sa duration 28800 

ike keychain keychain1 

pre-shared-key address 60.x.x.x 255.255.255.255 key simple 123456TEST 

 ike profile profile1 

proposal 1

 exchange-mode aggressive

 keychain keychain1

 local-identity fqdn yidong

 local-identity address 117.x.x.73 

match remote identity address 60.x.x.x 255.255.255.255 

match remote identity fqdn yidong

 ipsec transform-set tran_gj 

 encapsulation-mode tunnel 

 protocol esp esp 

authentication-algorithm md5

 esp encryption-algorithm 3des

 ipsec policy map1 10 isakmp

 sa duration time-based 28800 

sa duration traffic-based 1843200 

 transform-set tran_gj 

 local-address 117.x.x.73 

 remote-address 60.x.x.x

 ike-profile profile1

 security acl 3101

 interface GigabitEthernet0/3 

ipsec apply policy map1