Új hozzászólás Aktív témák

  • tusi_

    addikt

    R1#terminal length 0
    R1#
    R1#
    R1#
    R1#
    R1#sh run
    Building configuration...

    Current configuration : 1606 bytes
    !
    version 12.4
    service timestamps debug datetime msec
    service timestamps log datetime msec
    no service password-encryption
    !
    hostname R1
    !
    boot-start-marker
    boot-end-marker
    !
    !
    no aaa new-model
    memory-size iomem 5
    no ip icmp rate-limit unreachable
    ip cef
    !
    !
    !
    !
    no ip domain lookup
    !
    multilink bundle-name authenticated
    !
    archive
    log config
    hidekeys
    !
    !
    crypto isakmp policy 1
    encr aes
    authentication pre-share
    group 2
    lifetime 200
    crypto isakmp key cisco address 1.1.1.2
    !
    !
    crypto ipsec transform-set ciscoset esp-aes esp-sha-hmac
    !
    crypto map CMAP 1 ipsec-isakmp
    set peer 1.1.1.2
    set transform-set ciscoset
    set pfs group2
    match address VPN
    !
    ip tcp synwait-time 5
    !
    interface FastEthernet0/0
    ip address 1.1.1.1 255.255.255.0
    ip nat outside
    ip virtual-reassembly
    speed 100
    full-duplex
    crypto map CMAP
    !
    interface FastEthernet0/1
    ip address 192.168.0.1 255.255.255.0
    ip nat inside
    ip virtual-reassembly
    speed 100
    full-duplex
    !
    ip forward-protocol nd
    ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
    !
    !
    no ip http server
    no ip http secure-server
    ip nat inside source list NAT interface FastEthernet0/0 overload
    !
    ip access-list extended NAT
    deny tcp 192.168.0.0 0.0.0.255 host 10.10.10.4 eq www
    permit ip 192.168.0.0 0.0.0.255 any
    ip access-list extended VPN
    permit tcp 192.168.0.0 0.0.0.255 host 10.10.10.4 eq www
    !
    control-plane
    !
    line con 0
    exec-timeout 0 0
    privilege level 15
    logging synchronous
    line aux 0
    exec-timeout 0 0
    privilege level 15
    logging synchronous
    line vty 0 4
    login
    !
    !
    end

    R1#

    ________________

    R2#terminal length 0
    R2#
    R2#sh run
    Building configuration...

    Current configuration : 1672 bytes
    !
    version 12.4
    service timestamps debug datetime msec
    service timestamps log datetime msec
    no service password-encryption
    !
    hostname R2
    !
    boot-start-marker
    boot-end-marker
    !
    !
    no aaa new-model
    memory-size iomem 5
    no ip icmp rate-limit unreachable
    ip cef
    !
    !
    !
    !
    no ip domain lookup
    !
    multilink bundle-name authenticated
    !
    !
    archive
    log config
    hidekeys
    !
    !
    crypto isakmp policy 1
    encr aes
    authentication pre-share
    group 2
    lifetime 200
    crypto isakmp key cisco address 1.1.1.1
    !
    !
    crypto ipsec transform-set ciscoset esp-aes esp-sha-hmac
    !
    crypto map CMAP 1 ipsec-isakmp
    set peer 1.1.1.1
    set transform-set ciscoset
    set pfs group2
    match address VPN
    !
    !
    !
    ip tcp synwait-time 5
    !
    !
    !
    !
    interface FastEthernet0/0
    ip address 1.1.1.2 255.255.255.0
    ip nat outside
    ip virtual-reassembly
    speed 100
    full-duplex
    crypto map CMAP
    !
    interface FastEthernet0/1
    ip address 10.10.10.2 255.255.255.0
    ip nat inside
    ip virtual-reassembly
    speed 100
    full-duplex
    !
    ip forward-protocol nd
    ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
    !
    !
    no ip http server
    no ip http secure-server
    ip nat inside source list NAT interface FastEthernet0/0 overload
    ip nat inside source static tcp 1.1.1.2 80 10.10.10.4 80 extendable
    !
    ip access-list extended NAT
    deny tcp host 10.10.10.4 eq www 192.168.0.0 0.0.0.255
    permit ip 10.10.10.0 0.0.0.255 any
    ip access-list extended VPN
    permit tcp host 10.10.10.4 eq www 192.168.0.0 0.0.0.255
    !
    control-plane
    !
    line con 0
    exec-timeout 0 0
    privilege level 15
    logging synchronous
    line aux 0
    exec-timeout 0 0
    privilege level 15
    logging synchronous
    line vty 0 4
    login
    !
    !
    end

    R2#

    Nemtudok amugysem aludni :DDD

Új hozzászólás Aktív témák