IPsec ×××

 
R1:
conf t
in fa0/0
ip add 170.58.12.1 255.255.255.0
no sh
in lo0
ip add 1.1.1.1 255.255.255.0
exit
ip route 0.0.0.0 0.0.0.0 170.58.12.2
crypto isakmp policy 10
 encr 3des
 hash md5
 authentication pre-share
 group 2
exit
crypto isakmp key cisco address 170.58.23.3
crypto ipsec transform-set zhang esp-3des esp-md5-hmac
exit
crypto map wang 10 ipsec-isakmp
 set peer 170.58.23.3
 set transform-set zhang
 match address ***
exit
ip access-list extended ***
 permit ip host 1.1.1.1 host 3.3.3.3
exit
in fa0/0
cry map wang
exit

R2:
conf t
in fa0/0
ip add 170.58.12.2 255.255.255.0
no sh
in fa0/1
ip add 170.58.23.2 255.255.255.0
no sh
exit

R3:
conf t
in fa0/1
ip add 170.58.23.3 255.255.255.0
no sh
in lo0
ip add 3.3.3.3 255.255.255.0
exit
ip route 0.0.0.0 0.0.0.0 170.58.23.2
crypto isakmp policy 10
 encr 3des
 hash md5
 authentication pre-share
 group 2
exit
crypto isakmp key cisco address 170.58.12.1
crypto ipsec transform-set zhang esp-3des esp-md5-hmac
exit
crypto map wang 10 ipsec-isakmp
 set peer 170.58.12.1
 set transform-set zhang
 match address ***
exit
ip access-list extended ***
 permit ip host 3.3.3.3 host 1.1.1.1
exit
in fa0/1
cry map wang
exit