HUB
路由器配置
r1#sh ru
hostname r1
!
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
crypto isakmp key cisco1234 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set ccie esp-3des esp-sha-hmac
mode transport
!
crypto ipsec profile cisco
set transform-set ccie
!
interface Tunnel0
ip address 192.168.1.1 255.255.255.0
no ip redirects
no ip next-hop-self eigrp 100
ip nhrp authentication cisco
ip nhrp map multicast dynamic
ip nhrp network-id 10000
no ip split-horizon eigrp 100
tunnel source Serial0/0
tunnel mode gre multipoint
tunnel key 10000
tunnel protection ipsec profile cisco
!
interface Loopback0
ip address 10.1.1.1 255.255.255.0
!
interface Serial0/0
ip address 173.16.1.1 255.255.255.0
!
router eigrp 100
network 10.0.0.0
network 192.168.1.0
no auto-summary
ip route 0.0.0.0 0.0.0.0 173.16.1.2
Spoke路由器配置
r2#sh run
hostname r2
!
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
crypto isakmp key cisco1234 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set ccie esp-3des esp-sha-hmac
mode transport
!
crypto ipsec profile cisco
set transform-set ccie
!
interface Tunnel0
ip address 192.168.1.2 255.255.255.0
no ip redirects
ip nhrp authentication cisco
ip nhrp map multicast 173.16.1.1
ip nhrp map 192.168.1.1 173.16.1.1
ip nhrp network-id 10000
ip nhrp nhs 192.168.1.1
tunnel source Serial0/0
tunnel mode gre multipoint
tunnel key 10000
tunnel protection ipsec profile cisco
!
interface Loopback0
ip address 10.2.2.1 255.255.255.0
!
interface Serial0/0
ip address 173.16.2.1 255.255.255.0
!
router eigrp 100
network 10.0.0.0
network 192.168.1.0
no auto-summary
ip route 0.0.0.0 0.0.0.0 173.16.2.2
Spoke路由器配置
r3#sh run
hostname r3
!
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
crypto isakmp key cisco1234 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set ccie esp-3des esp-sha-hmac
mode transport
!
crypto ipsec profile cisco
set transform-set ccie
!
interface Tunnel0
ip address 192.168.1.3 255.255.255.0
no ip redirects
ip nhrp authentication cisco
ip nhrp map multicast 173.16.1.1
ip nhrp map 192.168.1.1 173.16.1.1
ip nhrp network-id 10000
ip nhrp nhs 192.168.1.1
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 10000
tunnel protection ipsec profile cisco
!
interface Loopback0
ip address 10.3.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 173.16.3.1 255.255.255.0
duplex auto
speed auto
!
router eigrp 100
network 10.0.0.0
network 192.168.1.0
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 173.16.3.2
r1#sh ru
hostname r1
!
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
crypto isakmp key cisco1234 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set ccie esp-3des esp-sha-hmac
mode transport
!
crypto ipsec profile cisco
set transform-set ccie
!
interface Tunnel0
ip address 192.168.1.1 255.255.255.0
no ip redirects
no ip next-hop-self eigrp 100
ip nhrp authentication cisco
ip nhrp map multicast dynamic
ip nhrp network-id 10000
no ip split-horizon eigrp 100
tunnel source Serial0/0
tunnel mode gre multipoint
tunnel key 10000
tunnel protection ipsec profile cisco
!
interface Loopback0
ip address 10.1.1.1 255.255.255.0
!
interface Serial0/0
ip address 173.16.1.1 255.255.255.0
!
router eigrp 100
network 10.0.0.0
network 192.168.1.0
no auto-summary
ip route 0.0.0.0 0.0.0.0 173.16.1.2
Spoke路由器配置
r2#sh run
hostname r2
!
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
crypto isakmp key cisco1234 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set ccie esp-3des esp-sha-hmac
mode transport
!
crypto ipsec profile cisco
set transform-set ccie
!
interface Tunnel0
ip address 192.168.1.2 255.255.255.0
no ip redirects
ip nhrp authentication cisco
ip nhrp map multicast 173.16.1.1
ip nhrp map 192.168.1.1 173.16.1.1
ip nhrp network-id 10000
ip nhrp nhs 192.168.1.1
tunnel source Serial0/0
tunnel mode gre multipoint
tunnel key 10000
tunnel protection ipsec profile cisco
!
interface Loopback0
ip address 10.2.2.1 255.255.255.0
!
interface Serial0/0
ip address 173.16.2.1 255.255.255.0
!
router eigrp 100
network 10.0.0.0
network 192.168.1.0
no auto-summary
ip route 0.0.0.0 0.0.0.0 173.16.2.2
Spoke路由器配置
r3#sh run
hostname r3
!
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
crypto isakmp key cisco1234 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set ccie esp-3des esp-sha-hmac
mode transport
!
crypto ipsec profile cisco
set transform-set ccie
!
interface Tunnel0
ip address 192.168.1.3 255.255.255.0
no ip redirects
ip nhrp authentication cisco
ip nhrp map multicast 173.16.1.1
ip nhrp map 192.168.1.1 173.16.1.1
ip nhrp network-id 10000
ip nhrp nhs 192.168.1.1
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 10000
tunnel protection ipsec profile cisco
!
interface Loopback0
ip address 10.3.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 173.16.3.1 255.255.255.0
duplex auto
speed auto
!
router eigrp 100
network 10.0.0.0
network 192.168.1.0
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 173.16.3.2
本文转自hexianguo 51CTO博客，原文链接：
http://blog.51cto.com/xghe110/117580
，如需转载请自行联系原作者
