1、sysname#aclsysname#aclnumberrule5denyipsource172.16.20.00.0.0.255destination172.16.10.00.0.0.255 rule 10 permit ipaclnumberrule5permitipsource172.16.20.00.0.0.255destination172.16.10.00.0.0.255 ipsecal#sysnameZongGongSi aclnumberrule5denyipsource172.16.10.00.0.0.255destination172.16.20.00.0.0.255 ru

2、le 10 permit ipaclnumberrule5permitipsource172.16.10.00.0.0.255destination172.16.20.00.0.0.255 ipsecproikeproikepeertestpre-shared-keysimple remote-address 23.1.1.2 ipsecpolicytest10isakmp security acl 3001ike-peer test pro al test ipaddress12.1.1.1255.255.255.0 ipsec policy testip route-sic0.0.0.00

3、.0.0.012.1.1.2 四、互通測試172.16.20.20:32data四、互通測試172.16.20.20:32databytes,PressCtrl_Cto#ipaddress12.1.1.2255.255.255.0 ipaddress23.1.1.1255.255.255.0 erfaceipaddress100.100.100.100255.255.255.0 erfaceipaddress200.200.200.200255.255.255.0 #ikepeertestpre-shared-keysimple remote-address 12.1.1.1 ipsecpol

4、icytest10isakmp security acl 3001ike-peer test pro al test ipaddress23.1.1.2255.255.255.0 ipsec policy testip route-sic0.0.0.00.0.0.023.1.1.1 disikesaConn-IDdisikesaConn-ID FlagRD-READY ST-STAYALIVE RL-REPLACED FD-FADING TO-TIMEOUT KG-LASTKNOWNGOODSEQNO. BCK-BACKEDUPdisipsecsabrief Number of SAs:2Sr

5、cDst 12.1.1.1ESP E:DESA:MD5-23.1.1.2ESP E:DESA:MD5-From 172.16.20.20: bytes=32seq=1ttl=127time=47ms From 172.16.20.20: bytes=32seq=2ttl=127time=47ms From 172.16.20.20: bytes=32seq=3ttl=127time=31ms From172.16.20.20: bytes=32seq=4ttl=127time=16ms From 172.16.20.20: bytes=32seq=5ttl=127time=31ms- 172.

6、16.20.20 s istics -5packet(s)5packet(s)0.00%packetround-tripmin/avg/max=16/34/47ms PC 100.100.100.100100.100.100.100: 32 databytes,PressCtrl_Ctobreak From 100.100.100.100:bytes=32seq=1ttl=254time=31ms From 100.100.100.100:bytes=32seq=2ttl=254time=15ms From 100.100.100.100:bytes=32seq=3ttl=254time=31ms From 100.100.100.100:bytes=32seq=4ttl=254time=47ms From 100.100.100.100:bytes=32seq=5ttl=25