R2
crypto isakmp policy 10
authentication pre-share
crypto isakmp key cisco address 12.12.12.1
crypto ipsec transform-set myset esp-des esp-md5-hmac
mode transport
crypto ipsec profile mysecfile
set transform-set myset
interface Loopback0
ip address 20.1.1.1 255.255.255.0
interface Tunnel0
ip address 21.21.21.2 255.255.255.0
tunnel source FastEthernet0/0
tunnel destination 12.12.12.1
tunnel protection ipsec profile mysecfile
interface FastEthernet0/0
ip address 12.12.12.2 255.255.255.0
router ospf 1
log-adjacency-changes
network 20.1.1.1 0.0.0.0 area 0
network 21.21.21.2 0.0.0.0 area 0
验证:show crypto engine connections active
责任编辑:虫虫