[21전국] 3과제 Site-to-Site VPN

WORK-R

conf t

crypto pki trustpoint VPN

enrollment url http://203.230.10.1

ip-address 203.230.10.1

subject-name CN=203.230.10.1

revocation-check none

exit

crypto pki authenticate VPN

[yes/no]:yes

crypto pki enroll VPN

※암호: korea2021##

[yes/no]:yes

[yes/no]:yes

 

CENT-R

conf t

crypto pki trustpoint VPN

enrollment url http://203.230.10.1

ip-address 107.58.56.1

subject-name CN=107.58.56.1

revocation-check none

exit

crypto pki authenticate VPN

[yes/no]:yes

crypto pki enroll VPN

※암호: korea2021##

[yes/no]:yes

[yes/no]:yes

 

 

WORK-R

conf t

crypto isakmp policy 10

encr aes 256

hash sha

group 2

authentication rsa-sig

exit

crypto ipsec transform-set VPN esp-aes esp-sha-hmac

mode tunnel

exit

crypto map VPN 10 ipsec-isakmp

set transform-set VPN

set peer 107.58.65.1

match address VPN

exit

ip access-list extended VPN

permit 41 host 1.1.1.1 host 1.1.2.2

int gig0/0/1

crypto map VPN

 

CENT-R

conf t

crypto isakmp policy 10

encr aes 256

hash sha

group 2

authentication rsa-sig

exit

crypto ipsec transform-set VPN esp-aes esp-sha-hmac

mode tunnel

exit

crypto map VPN 10 ipsec-isakmp

set transform-set VPN

set isakmp-profile VPN

set peer 203.230.10.1

match address VPN

exit

ip access-list extended VPN

permit 41 host 1.1.2.2 host 1.1.1.1

int gig0/0/1

crypto map VPN