hcnp-rshcdpienp認(rèn)證資深網(wǎng)絡(luò)工程師路由交換方向提升企業(yè)級性能實驗指導(dǎo)書

#^_^# 歸原作者有本資料只供試歸原作者所有本資料只供試讀資源請攻城獅 攻城獅(技術(shù)+生活)群2258097CCNA|CCNP免費答疑題庫1/歸原作者所有本資料只供試 /??????HCDP-傼???ъ???傼??????????j?Н? ??????????????????а??О?а????????

?ы澝??澝????????????????????.)*6/+4?????? ??????????????????????йО?????/):?'?

?????????

???????????О?.????????д? ?И??????????????И????????О?с??????????.4??????И?????

???

???????澝к澝????????ФИ?????????????.46 .)*6+TZKXVXOYK

. с????:6 ?О?. ??? ? ? ???????И?????Ос?????? ?澞? .46 TZKXXK .6 TKXXK ???????????????????? 澝к ?????????Ф???????????????????????澞.+TZKXXYK??

?й

??????澝.+TZKXVXOYK???????

???????

???澞????????????????????澝?. ????О? .к澝????????И???????????????ФИ????????????????О?????????Ф??????Ф????):???歸原作者所有本資料只供試 攻城獅(技術(shù)+生活)群2258097CCNA|CCNP免費答疑題庫Я??

?

?????????????.)*6??????????澞?????? 8<8)8Y<8)8Y<8)8Y<8)8Y<8)99) <8)99) <8)99:6+/<8)99:6+/<8)<8)<8)HCDPIENP??▁????? 9-????????????? -???/69+) ????з -???' -??????з

?

HCHCHUAWEI?1 HCDPIENP?аㄐ??????????? ???? ? HCDPIENP?аㄐ?????? ???:X[YZ?澝????;TZ[Y??????3?澞?????????????????????????? ?????/6?З?Entersystemview,returnuserviewwithCtrl+Z.[Huawei]sysnameR1[R1]interfaceGigabitEthernet[R1GigabitEthernet0/0/1]ipaddress24[R1GigabitEthernet0/0/1]interfaceloopback0[R1LoopBack0]ipaddress24Entersystemview,returnuserviewwithCtrl+Z.[Huawei]sysnameR2[R2]interface[R2GigabitEthernet0/0/1]ipaddress24[R2GigabitEthernet0/0/1]interfaceloopback0[R2LoopBack0]ipaddress24Entersystemview,returnuserviewwithCtrl+Z.[Huawei]sysnameR3[R3]interfaceGigabitEthernet[R3GigabitEthernet0/0/1]ipaddress24[R3GigabitEthernet0/0/1]interfaceloopback0[R3LoopBack0]ipaddress24???/6??澞??И?????????<2'4????О/TYOJK???? HCDPIENP?аㄐ??????Entersystemview,returnuserviewwithCtrl+Z.[USG2100]sysnameFW[FW]vlan[FWvlan12]quit[FW]interfacevlanif12[FWVlanif12]ipaddress5424[FWVlanif12]quit[FWEthernet1/0/0]portaccessvlan[FWEthernet1/0/0]interfaceEthernet0/0/0[FWEthernet0/0/0]ipaddress5424[FWEthernet0/0/0]interfaceethernet2/0/0[FWEthernet2/0/0]ipaddress5424[FWEthernet2/0/0]quit[FWVlanif1]undoipс???????????<2'4[Quidway]sysnameS1[S1]vlanbatch11to13[S1]interfaceGigabitEthernet[S1GigabitEthernet0/0/1]portlinktypeaccess[S1GigabitEthernet0/0/1]portdefaultvlan[S1GigabitEthernet0/0/2]portlinktypeaccess[S1GigabitEthernet0/0/3]portlinktypeaccess[S1GigabitEthernet0/0/]portdefaultvlan[S1GigabitEthernet0/0/21]portlinktypeaccess[S1GigabitEthernet0/0/22]portlinktypeaccess[S1GigabitEthernet0/0/23]portlinktypeaccess?

????

?IG?澝[ZXZ?澝?JS`???И??????ZX[YZ?澝[Z??J?З????澞HCDPIENP?аㄐ?????? [FW]firewallzone[FWzonedmz]addinterfaceEthernet2/0/0[FWzonedmz]firewallzonetrust[FWzonetrust]addinterfaceVlanif12[FWzonetrust]firewallzoneuntrust[FWzoneuntrust]addinterfaceEthernet??? ????????[FW]displayfirewallpacketfilterdefaultall10:28:182011/12/24Firewalldefaultpacketfilteractionis:packetfilterinpublic:local>trustinbound:default:permit;||IPv6acl:local>untrust:

permit;||IPv6acl:inbound:default:deny;||IPv6acl:local>dmz:

permit;||IPv6acl:inbound:default:deny;||IPv6acl:trust>untrust:

permit;||IPv6acl:inbound:default:deny;||IPv6acl:trust>dmz:

deny;||IPv6acl:inbound:default:deny;||IPv6acl:dmz>untrust:

deny;||IPv6acl:inbound:default:deny;||IPv6acl:outbound:defaultdeny;||IPv6acl:packetfilterbetween????????з??????2UIGR????:X[YZ????????????2UIGR????;TZX[YZ???????2UIGR????*3@??????????????????????????????澞????Ф????;XYZ:XY? -a:56databytes,pressCTRLCto HCDPIENP?аㄐ??????RequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout5packet(s)0packet(s)100.00%packet;XYZ?3@<R1>-a:56databytes,pressCTRLCtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout5packet(s)0packet(s)100.00%packet:[Y<R2>-a:56databytes,pressCTRLCtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout 5packet(s)0packet(s)100.00%packet:XZ?*??<R2>-a:56databytes,pressCTRLCtoHCDPIENP?аㄐ?????? RequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout5packet(s)0packet(s)100.00%packet3?XY?<R3>-a:56databytes,pressCTRLCtoRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout5packet(s)0packet(s)100.00%packet*3@???:X[YZ??<R3>-a10.0:56databytes,pressCTRLCtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout10.0 5packet(s)0packet(s)100.00%packet?,=??????8?8?8???[FW] HCDPIENP?аㄐ??????PING:56databytes,pressCTRLCtobreakRequesttimeoutReplyfrom:bytes56Sequence2ttl255time1Replyfrom:bytes56Sequence3ttl255time1Replyfrom:bytes56Sequence4ttl255time1Replyfrom:bytes56Sequence5ttl255time1ping5packet(s)4packet(s)20.00%packetroundtrip 1/1/1[FW]pingPING:56databytes,pressCTRLCtobreakRequesttimeoutReplyfrom:bytes56Sequence2ttl255time1Replyfrom:bytes56Sequence3ttl255time1Replyfrom:bytes56Sequence4tt255time1Replyfrom:bytes56Sequence5ttl255time1ping5packet(s)4packet(s)20.00%packetroundtrip 1/1/1[FW]pingPING:56databytes,pressCTRLCtobreakRequesttimeoutReplyfrom:bytes56Sequence2ttl255time1Replyfrom:bytes56Sequence3ttl255time1Replyfrom:bytes56Sequence4ttl255time1Replyfrom10..30.1:bytes56Sequence5ttl255timeping5packet(s)4packet(s)20.00%packetroudtrip 1/1/1 澝 ?8???????????О???????З2UUVHGIQHCDPIENP?аㄐ?????? л?[R1]iproutestatic0[R2]iproutestatic0[R3]iproutestatic0[FW]iproutestatic24[FW]iproutestatic24[FW]iproutestatic24[FW]firewallpacketfilterdefaultpermitall???????2UHI[R1]a:56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl254time3Replyfrom:bytes56Sequence2ttl254time3Replyfrom:bytes56Sequence3ttl254time4Replyfrom:bytes56Sequence4ttl254time2Replyfrom:bytes56Sequence5ttl254time35packet(s)5packet(s)0.00%packetroundtrip 2/3/4[R1]a10.0:56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl254time4Replyfrom:bytes56Sequence2ttl254time4Replyfrom:bytes56Sequence3ttl254time3Replyfrom:bytes56Sequence4ttl254time4Replyfrom:bytes56Sequence5ttl254time4 5packet(s)5packet(s)000%packetroundtrip 3/3/4 HCDPIENP?аㄐ?????? ???Ф?????ю:Y???????????Ф????[FW]firewallpacketfilter eny[FW]firewallpacketfilterdefaultpermitinterzonetrustuntrustdirection[FW]firewallpacketfilterdefaultpermitinterzonetrustdmzdirectionoutbound[FW]firewallsessionlinkstatecheck?? ????;XYZ:XY?[R1]a:56databytes,pressCTRLCtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout5packet(s)0packet(s)100.00%packet;XYZ?3@[R1]-a:56databytes,pressCTRLCtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout 5packet(s)0packet(s)HCDPIENP?аㄐ?????? 100.00%packet:[Y[R2]-a:56databytes,pressCTRLCtobreakReplyfrom:bytes56Sequence1ttl254timeReplyfrom:bytes56Sequence2ttl254timeReplyfrom:bytes56Sequence3ttl254timeReplyfrom:bytes56Sequence4ttl254timeReplyfrom:bytes56Sequence5ttl254time5packet(s)5packet(s)0.00%packetroundtrip 3/3/3:XZ?*??[R2]-a:56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl254time5Replyfrom:bytes56Sequence2ttl254time3Replyfrom:bytes56Sequence3ttl254time3Replyfrom:bytes56Sequence4ttl254time4Replyfrom:bytes56Sequence5ttl254time35packet(s)5packet(s)0.00%packetroundtrip 3/3/53?XY?[R3]a10.03.31:56databytes,pressCTRLCtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout HCDPIENP?аㄐ??????5packet(s)0packet(s)100.00%packet*3@???:X[YZ??[R3]a:56databytes,pressCTRLCtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout5packet(s)0packet(s)100.00%packet????;ZZ???@???Y*3@?? ?6 ? [:??Y??Од???????/)366M??[FW]policyinterzonedmzuntrust[FWpolicyinterzonedmzuntrustinbound]policy[FWpolicyinterzonedmzuntrustinbound1]policyserviceserviceseticmp[FWpolicyinterzonedmzuntrustinbound1]policydestination0[FWpolicyinterzonedmzuntrustinbound1]actionpermit[FWpolicyinterzonedmzuntrustinbound1]quit[FWpolicyinterzonedmzuntrustinbound]policy2[FWpolicyinterzonedmzuntrustinbound2]policyserviceserviceset [FWpolicyinterzonedmzuntrustinbound2]policydestination0[FWpolicyinterzonedmzuntrustinbound2]actionpermit[FWpolicyinterzonedmzuntrustinbound2]quit[FWpolicyinterzonedmzuntrustinbound]policy3[FWpolicyinteronedmzuntrustinbound3]actionд: ??:KRTKZ??[R3]userinterfacevty0[R3uivty04]authenticationmode????? HCDPIENP?аㄐ?????? :56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl254time3Replyfrom:bytes56Sequence2ttl254time2Replyfrom:bytes56Sequence3ttl254time2Replyfrom:bytes56Sequence4ttl254time4Replyfrom:bytes56Sequence5ttl254time5packet(s)5packet(s)0.00%packetroundtrip 2/2/4<R1>:56databytes,pressCTRLCtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeout 5packet(s)0packet(s)100.00%packet netPressCTRL]toquit netmodeTrying...ConnectedtoConfigurationconsoleexit,pleaseretrytologTheconnectionwasclosedbytheremote net100PressCTRL]toquit netmodeTrying... HCDPIENP?аㄐ?????? ????ю?/6??????????????????????澞???????/6?????????????????????????О/6???????????Ф????/6??????????澞?????????????Г?

?????

?8??????????[R1LoopBack1]ipaddress[FW]iproutestatic24?И[FW]firewalldefendportscan

???昹 VVY澞??? ????/6??И??????????????????[FW]firewalldefendportscanmaxrate?????????О???????[FW]firewalldefendportscanblacklisttimeout ??8??????[R1]pingaPING:56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl254time4Replyfrom:bytes56Sequence2ttl254time3Replyfrom:bytes56Sequence3ttl254time3HCDPIENP?аㄐ?????? Replyfrom:bytes56Sequence4ttl254time3Replyfrom:bytes56Sequence5ttl254time3ping5packet(s)5packet(s)0.00%packetroundtrip 3/3/4

澞[FW]firewallblacklistenable[FW]firewallblacklistitem?????[R1]pingaPING:56databytes,pressCTRLCtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutping5packet(s)0packet(s)100.00%packet ?'96,

???澞????'96,??????????????=KH???????????,:澝????=KH?????????PG\G??,:6?О??????? JKLZV???,:6???????澞:,??????????????????'96,???????')2 HCDPIENP?аㄐ??????

?[FW]acl[FWacladv3001]rulepermitudpdestinationporteqtftp[FWacladv3001]quitJKLOTK??:,:6???????[FW]firewallinterzonetrustdmz[FWinterzonetrustdmz]detectftp[FWinterzonetrustdmz]detectuserdefined3001outbound[FWinterzonetrustdmz]quit?????JKZKIZPG\GRIO????P???[FWinterzonetrustuntrust]detectjavablocking[FWinterzonetrustuntrust]quit?й'96,?????????????????????????15:42:112011/12/25interzonetrustdetectjavablockingdetectftpdetectuserdefined3001# ? ???????HCDPIENP?аㄐ?????? [R1]displaycurrent-sysnameR1interfaceipaddressinterfaceipaddressinterfaceipaddressiproutestatic54[R2]displaycurrent-sysnameR2interfaceipaddress255.255255.0interfaceipaddressiproutestatic54[R3]displaycurrent-sysnameR3interfaceipaddress HCDPIENP?аㄐ??????interfaceipaddressiproutestatic54[FW]displaycurrent-#sysnameFWfirewallpacketfilterdefaultpermitinterzonetrustuntrustdirectionoutboundfirewallpacketfilterdefaultpermitinterzonetrustdmzdirectionoutboundvlanbatch112firewalldefendportscanenablefirewalldefendportscanmaxrate5000firewalldefendportscanblacklisttimeout30firewallstatisticsystemenableaclnumberrule5permitudpdestinationporteqtftpinterfaceipaddress54interfaceipaddress54portlinktypeaccessportaccessvlan12#interfaceipaddress54firewalzonelocalsepriority100#firewallzoneHCDPIENP?аㄐ?????? setpriorityaddinterfaceEthernet1/0/0addinterfaceEthernet1/0/1addinterfaceEthernet1/0/2addinterfaceEthernet1/0/3addinterfaceEthernet1/0/4addinterfaceEthernet1/0/5addinterfaceEthernet1/0/6addinterfaceEthernet1/0/7addinterfaceVlanif1addinterfaceVlanif12firewallzoneuntrustsetpriority5firewallzonedmzsetpriority50firewallinterzonetrustuntrustdetectjavablocking#firewallinterzonetrustdmzdetectftpdetectuserdefined3001outboundiproutestaticiproutestaticiproutestaticiproutestaticfirewallblacklistenablefirewallblacklistitempolicyinterzonedmzuntrustinboundpolicy1actionpolicyserviceserviceseticmppolicydestination0policy2 HCDPIENP?аㄐ??????policyserviceserviceset policydestination0policy3actiondeny#[S1]displaycurrent-#sysnameS1#vlanbatch11to13interfaceGigabitEthernet0/0/1portlinktypeaccessportdefaultvlan11interfaceGigabitEthernet0/0/2portlinktypeaccessportdefaultvlan12interfaceGigabitEthernet0/0/3portlinktypeaccessportdefaultvlan13interfaceGigabitEthernet0/0/21portlinktypeaccessportdefaultvlan11interfaceGigabitEthernet0/0/22portlinktypeaccessportdefaultvlan12interfaceGigabitEthernet0/0/23portlinktypeaccessportdefaultvlan13HCDPIENP?аㄐ?????? ;9???69KI64???;9-??????/69KI???;9-??????-8+U\KX/69KI????????/69KI????????-8+U\KX/69KI? ????

?澞??????????З????:[YZ???

????????Ф?????????Ф??????????版權(quán)歸原作者所有本資料只供試讀更多資源請訪問攻城獅論壇 HCDPIENP?аㄐ?????? ?????/699??????????澞

??????????????/6????澞??О?Entersystemview,returnuserviewwithCtrl+Z.[Huawei]sysnameR1[R1]interfaceGigabitEthernet[R1GigabitEthernet0/0/1]ipaddress24[R1GigabitEthernet0/0/1]interfaceSerial1/0/0[R1Serial1/0/0]ipaddress24[R1Serial1/0/0]interfaceloopback0[R1LoopBack0]ipaddress24Entersystemview,returnuserviewwithCtrl+Z.[Huawei]sysnameR2[R2]interface[R2GigabitEthernet0/0/2]ipaddress24[R2GigabitEthernet0/0/2]interfaceSerial1/0/0[R2Serial1/0/0]ipaddress100.12.224[R2Serial1/0/0]interfaceSerial2/0/0[R2Serial2/0/0]ipaddress24[R2Serial2/0/0]interfaceloopback0[R2LoopBack0]ipaddress24Entersystemview,returnuserviewwithCtrl+Z.[Huawei]sysnameR3[R3]interface[R3Serial2/0/0]ipaddress24[R3Serial2/0/0]interfaceloopback0[R3LoopBack0]ipaddress24?????,=?,=?????HCDPIENP?аㄐ?????? Entersystemview,returnuserviewwithCtrl+Z.[USG2100]sysnameFW1[FW1Ethernet0/0/0]ipaddress24[FW1Ethernet0/0/0]interfaceEthernet2/0/0[FW1Ethernet2/0/0]ipaddress24[FW1Ethernet2/0/0]interfacevlanif1[FW1Vlanif1]unpEntersystemview,returnuserviewwithCtrl+Z.[USG2100]sysnameFW2[FW2Ethernet0/0/0]ipaddress24[FW2Ethernet0/0/0]interfaceEthernet2/0/0[FW2Ethernet2/0/0]ipaddress24[FW2Ethernet2/0/0]interfacevlanif1[FW2Vlanif1]unp????,=?,=? ? ? ??澞[FW1zoneuntrust]addinterfaceEthernet2/0/0[FW1zoneuntrust]undoaddinterfaceEthernet0/0/0[FW1zoneuntrust]quit[FW1zonetrust]addinterfaceEthernet[FW2zoneuntrust]addinterfaceEthernet2/0/0[FW2zoneuntrust]undoaddinterfaceEthernet0/0/0[FW2zoneuntrust]quit[FW2zonetrust]addinterfaceEthernet ???????????:[YZ ?? ;T[YZ??????;T[YZ 2IGR????????????[FW1]firewallpacketfilterdefaultpermitinterzonetrustuntrust[FW1]firewallpacketfilterdefaultpermitinterzonelocal HCDPIENP?аㄐ??????[FW2]firewallpacketfilterdefaultpermitinterzonetrustuntrust[FW2]firewallpacketfilterdefaultpermitinterzonelocal ????????? 澝 澝 澝,= ?,=?????596,? ?Ф?????澞[R1]ospf[R1ospf1]area[R1ospf1area]network[R1ospf1area]network[R2]ospf[R2ospf1]area[R2ospf1area]network[R2ospf1area]network[R2ospf1area]network[R3]ospf[R3ospf1]area[R3ospf1area]network[FW1]ospf[FW1ospf1]area[FW1ospf1area]network[FW2]ospf[FW2ospf1]area[FW2ospf1area0.0.00]network?,=?,=????????[FW1]ping10PING10.0.202:56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl253time40Replyfrom:bytes56Sequence2ttl253time30Replyfrom:bytes56Sequence3ttl253time30Replyfrom:bytes56Sequence4ttl253time40Replyfrom:bytes56Sequence5ttl253time30ping5packet(s)5packet(s)HCDPIENP?аㄐ?????? 0.00%packetroundtripmin/avg/max 30/34/40ms[FW1]:56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl253time70Replyfrom:bytes56Sequence2ttl253time60Replyfrom:bytes56Sequence3ttl253time70Replyfrom:bytes56Sequence4ttl253time70Replyfrom:bytes56Sequence5ttl253time605packet(s)5packet(s)0.00%packetroundtrip [FW2]:56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl253time40Replyfrom:bytes56Sequence2tt253time30Replyfrom:bytes56Sequence3ttl253time40Replyfrom:bytes56Sequence4ttl253time30Replyfrom:bytes56Sequence5ttl253time305packet(s)5packet(s)0.00%packetroundtripmin/avg/max 30/34/40ms[FW2]:56databytespressCTRLCtoReplyfrom:bytes56Sequence1ttl254time30Replyfrom:bytes56Sequence2ttl254time30Replyfrom:bytes56Sequence3ttl254time30Replyfrom:bytes56Sequence4ttl254time30Replyfrom10..23.3:bytes56Sequence5ttl254time3010.0.23 5packet(s5packet(s)0.00%packetroundtrip 30/30/30 澝?Ф????? HCDPIENP?аㄐ?????? ??????????????????')2

[FW1]acl[FW1acladv3000]rulepermitipsource55[FW2]acl[FW2acladv3000]rulepermitipsource55????????????[FW1]iproutestatic24[FW2]iproutestatic24????,=?,=???/69KI???????????

??????96?????О*+9澝????9???.'[FW1ipsecproposaltran1]encapsulationmodetunnel[FW1ipsecproposaltran1]transformesp[FW1ipsecproposaltran1]espauthenticationalgorithmsha1[FW1ipsecproposaltran1]espencryptionalgorithmdes[FW2ipsecproposaltran1]encapsulationmodetunnel[FW2ipsecproposaltran1]transformesp[FW2ipsecproposaltran1]espauthenticationalgorithmsha1[FW2ipsecproposaltran1]espencryptionalgorithmdes??,=?,=1??

?[FW1]ikeproposal[FW1ikeproposal10]authenticationalgorithmsha1[FW1ikeproposal10]encryptionalgorithmdes[FW2]ikeproposal[FW2ikeproposal10]authenticationalgorithmHCDPIENP?аㄐ?????? [FW2ikeproposal10]encryptionalgorithm??/1+???/1+??????/1+?????/6?????ц?[FW1]ikepeer[FW1ikepeerfw12]ikeproposal[FW1ikepeerfw12]remoteaddress[FW1ikepeerfw12]presharedkeyabcde[FW2]ikepeer[FW2ikepeerfw21]ikeproposal[FW2ikepeerfw21]remoteaddress[FW2ikepeerfw21]presharedkeyabcde????,=?,=??????? ??[FW1]ipsecpolicymap110[FW1ipsecpolicyisakmpmap110]securityacl3000[FW1ipsecpolicyisakmpmap110]proposaltran1[FW1ipsecpolicyisakmpmap110]ikepeerfw12[FW2]ipsecpolicymap110[FW2ipsecpolicyisakmpmap110]securityacl3000[FW2ipsecpolicyisakmpmap110]proposaltran1[FW2ipsecpolicyisakmpmap110]ikepeerfw21????,=?,=??????[FW1]interface[FW2]interface?????????????????/69KI?? a10.0200.1:56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl255time50Replyfrom:bytes56Sequence2ttl255time50Replyfrom:bytes56Sequence3ttl255time60Replyfrom:bytes56Sequence4ttl255time50 HCDPIENP?аㄐ??????Replyfrom:bytes56Sequence5ttl255time505packet(s)5packet(s)0.00%packetroundtripmin/avg/max 50/52/60ms[FW1]displayikesacurrentikesanumber:connv2:21v2:1flagRDREADY STSTAYALIVERLREPLACED FDFADINGTOTIMEOUTTDDELETINGNEGNEGOTIATINGDDPDpathMTU:1500IPsecpolicyname:"map1"sequencenumber:10mode:isakmp:connectionid:rulenumber:5encapsulationmode:tunnelholdingtime:0d0h1mtunnellocal: tunnelremote: sourc:550655350flowdestination:55065535[inboundESPspi:103447906:publicsaid:0cpuid:0x0000proposal:ESPENCRYPTDESESPAUTHSHA1saremainingkeyduration(bytes/sec):1887436464/3524maxreceivedsequencenumber:4udpencapsulationusedfornattraversal:HCDPIENP?аㄐ?????? [outboundESPspi:92831779vpn:publicsaid:1cpuid:0x0000proposal:ESPENCRYPTDESESPAUTHSHA1saremainingkeyduration(bytes/sec):1887436464/3524maxsentsequencenumber:5udpencapsulationusedfornattraversal:??????????????л ????????/69KI <??????????????')2[R3]acl[FW2]acl[FW2acladv3001]rulepermitipsource55????????????????[R3]iproutestatic10.0.200024[FW2]iproutestatic100.3.024?8???/69KI?????????????????????+96??????????????О*+9澝??????9???.'澞[R3ipsecproposaltran1]encapsulationmodetunnel[R3ipsecproposaltran1]transformesp[R3ipsecproposaltran1]espauthenticationalgorithmsha1[R3ipsecproposaltran1]espencryptionalgorithmdes?,=?8???/1+???? HCDPIENP?аㄐ??????? ??[R3]ikeproposal[R3ikeproposal10]authenticationalgorithmsha1[R3ikeproposal10]encryptionalgorithmdes??/1+VKKX澞/1+???/1+\??? ???/1+??? ?/6?????ц[FW2]ikepeer[FW2ikepeerfw23]ikeproposal[FW2ikepeerfw23]remoteaddress[FW2ikepeerfw23]presharedkeyabcde[R3]ikepeerr32[R3ikepeerr32]ikeproposal[R3ikepeerr32]remoteaddress[R3ikepeerr32]presharedkeyabcde?,=?8???????? ??[FW2]ipsecpolicymap111[FW2ipsecpolicyisakmpmap111]securityacl3001[FW2ipsecpolicyisakmpmap111]proposaltran1[FW2ipsecpolicyisakmpmap111]ikepeerfw23[R3]ipsecpolicymap110[R3ipsecpolicyisakmpmap210]securityacl3000[R3ipsecpolicyisakmpmap210]proposaltran1[R3ipsecpolicyisakmpmap210]ikepeerr32?,=?8???????[FW2]interface[R3]interface????????????????/69KI????????/19'???????И?? aHCDPIENP?аㄐ?????? :56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl255time50Replyfrom:bytes56Sequence2ttl255time48Replyfrom:bytes56Sequence3ttl255time48Replyfrom:bytes56Sequence4ttl255time48Replyfrom:bytes56Sequence5ttl255time485packet(s)5packet(s)0.00%packetroundtripmin/avg/max 48/48/50ms[R3]displayikesav2ConnID 202101FlagRDREADYSTSTAYALIVERLREPLACEDFDFADINGTOTIMEOUTHRTHEARTBEATLKGLASTKNOWNGOODSEQNO.BCKBACKEDUP[R3]displayipsecPathMTU:1500IPSecpolicyname:"map1"Sequencenumber:10 :ISAKMPConnectionID :2Encapsulationmode:TunnelTunnellocal :Tunnelremote :[OutboundESPAs]SPI:247406703Proposal:ESPENCRYPTDES64ESPAUTHSAremainingkeyduration(bytes/sec):1887436380/3534Maxsentsequencenumber:5UDPencapsulationusedforNATtraversal:N[InboundESPSAs]SPI:155207494Proposal:ESPENCRYPTDES64ESPAUTHSAremainingkeyduration(bytes/sec):版權(quán)歸原作者所有本資料只供試讀更多資源請訪問攻城獅論壇 HCDPIENP?аㄐ??????Maxreceivedsequencenumber:UDPencapsulationusedforNATtraversal:?????8???????? ???????????-8+U\KX/69KI????И???????????д?З???????????????????????????????????Ф??л???????????/69KI????????-8+ 5KXI???Ф?????,=-8+???:[TTKR?????,=?TX[??[FW1Tunnel1]tunnelprotocolgre[FW1Tunnel1]ipaddress24[FW1Tunnel1]firewallzone[FW1zoneuntrust]addinterfaceTunnel,=-8+???:[TTKR?????,=?TX[??[FW2Tunnel1]tunnelprotocolgre[FW2Tunnel1]ipaddress24[FW2Tunnel1]firewallzone[FW2zoneuntrust]addinterfaceTunnelФ??????澞8/6?????HCDPIENP?аㄐ?????? proutestatic24[FW1rip1]version[FW1rip1]network[FW1rip1]network proutestatic24[FW2rip1]version[FW2rip1]network[FW2rip1]network??')2?-8+?Ф????О???/69KI????????????????')2[FW1]acl[FW1acladv3001]rulepermitgresource0destination0[FW1acladv3001]quit[FW1]ipsecpolicymap110[FW1ipsecpolicyisakmpmap110]securityacl[FW2]acl[FW2acladv3002]rulepermitgresource0destination0[FW2acladv3002]quit[FW2]ipsecpolicymap110[FW2ipsecpolicyisakmpmap110]securityacl???????????????????????/69KI??[FW1]a:56databytes,pressCTRLCtoReplyfrom:bytes56Sequence1ttl255time50Replyfrom:bytes56Sequence2ttl255time50Replyfrom:bytes56Sequence3ttl255time60Replyfrom100.200.1:bytes56Sequence4ttl255time50Replyfrom:bytes56Sequence5ttl255time50 5packet(s)5packet(s)000%packetroundtripmin/avg/max 50/52/60ms[FW1]displayipsecsa HCDPIENP?аㄐ??????pathMTU:1500IPsecpolicyname:"map1"sequencenumber:10mode:isakmpvpn:connectionid:rulenumber:5encapsulationmode:tunnelholdingtime:0d0h5mtunnellocal: tunnelremote: source:550655350flowdestination:550655350[inboundESPSAs]spi:240396810vpn:0 said:34cpuid:0x0000proposal:ESPENCRYPTDESESPAUTHSHA1saremainingkeyduration(bytes/sec)1887436044/3279maxreceivedsequencenumber:9udpencapsulationusedfornattraversal:N[outboundESPSAs]spi:208723708vpn:0 said:35cpuid:0x0000proposal:ESPENCRYPTDESESPAUTHSHA1saremainingkeyduration(bytes/sec):1887436044/3279maxsentsequencenumber:10udpencapsulationusedfornattraversal:????????????,=?,=????-8+U\KX/69KI<64??澞?????????? ????????????-8U\KX69KI,=-8+???:[TTKR?????,=?TX[??HCDPIENP?аㄐ?????? [FW2Tunnel2]tunnelprotocolgre[FW2Tunnel2]ipaddress24[FW2zoneuntrust]addinterfaceTunnel ??:[TTKR??????-8+??[R3Tunnel0/0/1]tunnelprotocolgre[R3Tunnel0/0/1]ipaddress24[R3Tunnel0/0/1]destination?Ф???8/6?/6??? proutestatic24[FW2rip1]version[FW2rip1]network proutestatic24[R3rip1]version[R3rip1]network[R3rip1]network??')2?-8+?Ф????О???/69KI?????[R3]acl[R3acladv3001]rulepermitgresource0destination0[R3acladv3001]quit[R3]ipsecpolicymap120[R3ipsecpolicyisakmpmap110]securityacl3001[R3ipsecpolicyisakmpmap120]proposaltran1[R3ipsecpolicyisakmpmap120]ikepeerr32[FW2]acl[FW2acladv3003]rulepermitgresource0destination0[FW2acladv3003]quit[FW2]ipsecpolicymap120 HCDPIENP?аㄐ??????5653545454[FW25653545454???????????????????

?/69KI??[R3]a:56databytes,pressCTRLCtobreakReplyfrom:bytes56Sequence1ttl255Replyfrom:bytes56Sequence2ttl255Replyfrom:bytes56Sequence3ttl255Replyfrom:bytes56Sequence4ttl255Replyfrom:bytes56Sequence5ttl255 5packet(s)5packet(s)0.00%packetroundtripmin/avg/max 53/54/56ms[R3]displayipsecsaPathMTU:1500IPSecpolicyname:"map1"Sequencenumber:10 :ISAKMPConnectionID :2Encapsulationmode:TunnelTunnellocal :Tunnel :[OutboundESPSPI:145201056Proposal:ESPENCRYPTDES64ESPAUTHSAremainingkeyduration(bytes/sec):1887436380/2849Maxsentsequencenumber:5UDPencapsulationusedforNATtraversal:N[InboundESPSAs]HCDPIENP?аㄐ?????? SPI:1040062082Proposal:ESPENCRYPTDES64ESPAUTHSAremainingkeyduration(bytes/sec):1887436380/2849Maxreceivedsequencenumber:5UDPencapsulationusedforNATtraversal:IPSecpolicyname:"map1"Sequencenumber:20 :ISAKMPConnectionID :5Encapsulationmode:TunnelTunnellocal :Tunnel :[OutboundESPSPI:97199512Proposal:ESPENCRYPTDES64ESPAUTHSAremainingkeyduration(bytes/sec):1887436200/3506Maxsentsequencenumber:6UDPencapsulationusedforNATtraversal:[InboundESPSPI:2570078602Proposal:ESPENCRYPTDES64ESPAUTHSAremainingkeyduration(bytes/sec):1887436176/3506Maxreceivedsequencenumber:5UDPencapsulationusedforNATtraversal:???????????????????????? ?,=????/1+ HCDPIENP?аㄐ??????#sysnameFW1aclnumber0aclnumber0rule5permitgresource0destinationikeproposal10ikepeerpresharedkeyabcdeikeproposal10remoteaddressipsecproposalespauthenticationalgorithmsha1ipsecpolicymap110isakmpsecurityacl3001ikepeerfw12proposaltran1interfaceipaddressinterfaceipaddress255255.255.0ipsecpolicymap1#interfaceipaddresstunnelprotocolgresourcedestination100.20.2firewallzonelocalsetpriority100#firwallzonetrustsetpriority85addinterfaceHCDPIENP?аㄐ?????? #firewallzoneuntrustsetpriority5addinterfaceTunnel1#ospfarea#ripversionnetworksysnameFW2aclnumberaclnumberrule5permitipsource55destination55aclnumberrule5permitgresource0destination0aclnumberrule5permitgresource0destination0ikeproposal10ikepeerpresharedkeyabcdeikeproposal10remoteaddressikepeerpresharedkeyabcdeikeproposal10 HCDPIENP?аㄐ??????remoteaddressipsecproposalespauthenticationalgorithmsha1ipsecpolicymap110isakmpsecurityacl3002ikepeerfw21proposaltran1ipsecpolicymap111isakmpsecurityacl3001ikepeercproposaltran1ipsecpolicymap120isakmpsecurityacl3003ikepeerfw23proposaltran1interfaceipaddressinterfaceipaddressipsecpolicymap1interfaceipaddresstu