CISCO IOS 与 USG6KV IPSEC ×××

CISCO ############################CONFIG##########

Ipsec *** test
!
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp key cisco@123 address 202.1.1.1
!
crypto ipsec transform-set set esp-3des esp-sha-hmac
mode transport
!
crypto map s 1 ipsec-isakmp
set peer 202.1.1.1
set transform-set set
match address 100
!
!
interface Loopback0
ip address 2.2.2.2 255.255.255.255
!
interface Loopback1
ip address 192.168.2.1 255.255.255.255
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface FastEthernet1/0
ip address 23.1.1.2 255.255.255.0
duplex half
crypto map s
!
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet1/0
no ip http server
no ip http secure-server
!
access-list 100 permit ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255 log

##########

HUAWEI##

CISCO IOS 与 USG6KV IPSEC ×××

原文：http://blog.51cto.com/miller0intarnet/2133449