gre over ipsec 对端是pppoe拨号如何建立

对面野蛮模式正常协商就好，用FQDN。

ipsec transform-set client

 esp encryption-algorithm des-cbc

 esp authentication-algorithm md5

#

ipsec policy mendian 1 isakmp

 transform-set client

 security acl 3000

 remote-address xxx.xxx.xxx..xx

 ike-profile xxx

#

ipsec policy mendian 2 isakmp

 transform-set xxx

 security acl xxx

 remote-address xxx.xxx.xxx.xx

 ike-profile xxx..xx

#

 ike identity fqdn client

 ike nat-keepalive 90

#

ike profile xxx.

 keychain xxx

 exchange-mode aggressive

 local-identity fqdn client

 match remote identity address xx.xxx.x.xx 255.255.255.255

 match remote identity fqdn xxx

 proposal 1 

interface Tunnel1 mode gre

description xxx

 ip address tunnel   255.255.255.252

 source LoopBack1

 destination 目的

 keepalive 5 3

ike proposal 1

#

ike keychain  xxx

 pre-shared-key address xxx.xxx.xxx.xxx 255.255.255.255 key sim xxxx

#

路由指向tunnel