带有 GRE over IPsec 隧道的 Cisco L2TP VPNd

网络工程 思科 隧道 l2tp
2022-02-24 09:07:43

我在路由器 1 和路由器 2 之间有一个 GRE over IPsec 隧道。

两台路由器之间的路由是 EIGRP。

我可以访问 CLI,并且可以 ping 所有子网。

我尝试创建 VPNd L2TP

我创建了它,并且从 CLI 我可以 ping 所有子网,但从我的 PC 我无法从 Tunnel2354 ping 任何 IP 地址。

hostname R1
!
boot-start-marker
boot-end-marker
!
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
aaa new-model
!
!
aaa authentication login telnet local
aaa authentication ppp default local
aaa authorization network default local
aaa session-id common
ip subnet-zero
ip cef
!
!
!
!
ip ips po max-events 100
vpdn enable
!
vpdn-group CDATA
! Default L2TP VPDN group
! Default PPTP VPDN group
accept-dialin
protocol any
virtual-template 6
no l2tp tunnel authentication
!
!
!
crypto isakmp policy 56
encr aes
authentication pre-share
crypto isakmp key rMVvTRvm2Hw7rUxCdIGQAOsiwfmXv1/i address xxx.xxx.xxx.xxx
no crypto isakmp ccm
!
!
crypto ipsec transform-set device1 esp-aes esp-sha-hmac
!
crypto ipsec profile deviceProfile1
set transform-set device1
!
!
!
!
!
interface Tunnel2354
ip address 10.54.65.1 255.255.255.0
tunnel source FastEthernet0/0
tunnel destination xxx.xxx.xxx.xxx
tunnel protection ipsec profile deviceProfile1
!
interface Loopback2
ip address 10.54.63.1 255.255.255.0
!
interface FastEthernet0/0
ip address xxx.xxx.xxx.xxx 255.255.255.252
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
ip address xxx.xxx.xxx.xxx 255.255.255.248 secondary
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface Virtual-Template6
ip unnumbered Tunnel2354
ip nat inside
ip virtual-reassembly
ip mroute-cache
peer default ip address pool vpn
no keepalive
ppp authentication ms-chap-v2
!
router eigrp 1
network 10.54.65.0 0.0.0.255
auto-summary
!
ip local pool vpn 10.14.0.109 10.14.0.120
ip classless
ip route 0.0.0.0 0.0.0.0 xxx.xxx.xxx.xxx
!
!
no ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/0 overload
!
access-list 1 permit 192.168.1.0 0.0.0.255
0个回答
没有发现任何回复~