數(shù)據(jù)網(wǎng)組建與維護 項目9 異地互聯(lián)組建VPN-項目實施

表92中。表STYLEREF1\s9SEQ表\*ARABIC\s12三層設(shè)備和終端的接口IP地址分配表設(shè)備節(jié)點接口名稱IP地址子網(wǎng)掩碼PC1Ethernet0/0/110.0.1.2255.255.255.0PC2Ethernet0/0/110.0.2.2255.255.255.0PC3Ethernet0/0/1172.16.0.2255.255.255.0LSW1VLAN1010.10.0.1255.255.255.0VLAN2010.0.1.1255.255.255.0VLAN3010.0.2.1255.255.255.0LSW2VLAN10172.31.0.1255.255.255.0VLAN20172.16.0.1255.255.255.0AR1g0/0/0100.0.0.1255.255.255.0g0/0/110.10.0.2255.255.255.0AR2g0/0/0172.31.0.2255.255.255.0g0/0/1200.0.0.1255.255.255.0ISPg0/0/0100.0.0.2255.255.255.0g0/0/1200.0.0.2255.255.255.04.設(shè)備配置。（1）LSW1的接口IP與路由配置。<Huawei>untermo<Huawei>sy[Huawei]syLSW1[LSW1]vlanbatch102030[LSW1]intg0/0/1[LSW1-GigabitEthernet0/0/1]portlinkaccess[LSW1-GigabitEthernet0/0/1]portdefaultvlan10[LSW1-GigabitEthernet0/0/1]intg0/0/2[LSW1-GigabitEthernet0/0/2]portlinkaccess[LSW1-GigabitEthernet0/0/2]portdefaultvlan20[LSW1-GigabitEthernet0/0/2]intg0/0/3[LSW1-GigabitEthernet0/0/3]portlinkaccess[LSW1-GigabitEthernet0/0/3]portdefaultvlan30[LSW1-GigabitEthernet0/0/3]q[LSW1]intvlan10[LSW1-Vlanif10]ipadd10.10.0.124[LSW1-Vlanif10]intvlan20[LSW1-Vlanif20]ipadd10.0.1.124[LSW1-Vlanif20]intvlan30[LSW1-Vlanif30]ipadd10.0.2.124[LSW1-Vlanif30]q[LSW1]iproute-static0.0.0.0010.10.0.2（2）LSW2的接口IP與路由配置。<Huawei>untermo<Huawei>sy[Huawei]sysnameLSW2[LSW2]vlanbatch1020[LSW2]intg0/0/1[LSW2-GigabitEthernet0/0/1]portlinkaccess[LSW2-GigabitEthernet0/0/1]portdefaultvlan10[LSW2-GigabitEthernet0/0/1]intg0/0/2[LSW2-GigabitEthernet0/0/2]portlinkaccess[LSW2-GigabitEthernet0/0/2]portdefaultvlan20[LSW2-GigabitEthernet0/0/2]q[LSW2]intvlan10[LSW2-Vlanif10]ipadd172.31.0.124[LSW2-Vlanif10]intvlan20[LSW2-Vlanif20]ipadd172.16.0.124[LSW2-Vlanif20]q[LSW2]iproute-static0.0.0.00172.31.0.2[LSW2]（3）AR1、AR2和ISP路由器的接口配置。[AR1]intg0/0/0[AR1-GigabitEthernet0/0/0]ipadd100.0.0.124[AR1-GigabitEthernet0/0/0]intg0/0/1[AR1-GigabitEthernet0/0/1]ipadd10.10.0.224[AR1-GigabitEthernet0/0/1]q[AR1][AR2]intg0/0/0[AR2-GigabitEthernet0/0/0]ipadd172.31.0.224[AR2-GigabitEthernet0/0/0]intg0/0/1[AR2-GigabitEthernet0/0/1]ipadd200.0.0.124[AR2-GigabitEthernet0/0/1]q[AR2][ISP]intg0/0/0[ISP-GigabitEthernet0/0/0]ipadd100.0.0.224[ISP-GigabitEthernet0/0/0]intg0/0/1[ISP-GigabitEthernet0/0/1]ipadd200.0.0.224[ISP-GigabitEthernet0/0/1]q[ISP]（4）AR1的GREoverIPSec配置。[AR1]intTunnel0/0/0[AR1-Tunnel0/0/0]ipadd172.17.0.124[AR1-Tunnel0/0/0]tunnel-protocolipsec[AR1-Tunnel0/0/0]source100.0.0.1[AR1-Tunnel0/0/0]destination200.0.0.1[AR1-Tunnel0/0/0]q[AR1]iproute-static0.0.0.00100.0.0.2[AR1]iproute-static172.16.0.024172.17.0.2[AR1]iproute-static10.0.0.01610.10.0.1[AR1]ipsecproposalprop[AR1-ipsec-proposal-prop]q[AR1]ikepeertofenv2[AR1-ike-peer-tofen]peer-id-typeip[AR1-ike-peer-tofen]pre-shared-keysimple111[AR1-ike-peer-tofen]q[AR1]ipsecprofileprofile1[AR1-ipsec-profile-profile1]ike-peertofen[AR1-ipsec-profile-profile1]proposalprop[AR1-ipsec-profile-profile1]q[AR1]intTunnel0/0/0[AR1-Tunnel0/0/0]ipsecprofileprofile1[AR1-Tunnel0/0/0]q[AR1]（5）AR2的GREoverIPSec配置。[AR2]intTunnel0/0/0[AR2-Tunnel0/0/0]ipadd172.17.0.224[AR2-Tunnel0/0/0]tunnel-protocolipsec[AR2-Tunnel0/0/0]source200.0.0.1[AR2-Tunnel0/0/0]destination100.0.0.1[AR2-Tunnel0/0/0]q[AR2]iproute-static0.0.0.00200.0.0.2[AR2]iproute-static10.0.0.016172.17.0.1[AR2]iproute-static172.16.0.024172.31.0.1[AR2]ipsecproposalprop[AR2-ipsec-proposal-prop]q[AR2]ikepeertozongv2[AR2-ike-peer-tozong]peer-id-typeip[AR2-ike-peer-tozong]pre-shared-keysimple111[AR2-ike-peer-tozong]q[AR2]ipsecprofileprofile1[AR2-ipsec-profile-profile1]ike-peertozong[AR2-ipsec-profile-profile1]proposalprop[AR2-ipsec-profile-profile1]q[AR2]intTunnel0/0/0[AR2-Tunnel0/0/0]ipsecprofileprofile1[AR2-Tunnel0/0/0]q[AR2]q