1、 Huawei AR100-S2%# ospf network-type p2mp ipsec profile profile1 nhrp authentication cipher %#e1an+fD*$JNJ4ubbMM$N1L1F2O6#O/u:-EkSJ%# nhrp shortcut nhrp registration interval 300 nhrp entry 10.2.1.1 1.1.1.10 register # interface Tunnel0/0/1 ip address 10.2.2.2 255.255.255.0 tunnel-protocol gre p2mp
2、source GigabitEthernet1/0/0 gre key cipher %#y0|R0B_=#l“D)42/nU!;A56Zx=oDj,7O7#:4.%# ospf network-type p2mp ipsec profile profile2 nhrp authentication cipher %#FosRT/(vKO0%# nhrp shortcut nhrp registration interval 300 nhrp entry 10.2.2.254 1.1.254.10 register # ospf 1 router-id 10.2.1.2 area 0.0.0.
3、0 network 10.1.1.0 0.0.0.255 network 10.2.1.0 0.0.0.255 network 10.2.2.0 0.0.0.255 # ospf 2 area 0.0.0.1 network 1.1.2.0 0.0.0.255 # return circle6 Spoke2的配置文件 # sysname Spoke2 # ipsec proposal pro1 transform ah-esp ah authentication-algorithm sha2-256 esp authentication-algorithm sha2-256 esp encry
4、ption-algorithm aes-192 # ike proposal 1 encryption-algorithm aes-cbc-256 dh group5 authentication-algorithm sha2-256 prf aes-xcbc-128 # ike peer spoke2 v2 pre-shared-key cipher %#yRiB!lV4gKvCG_LJA56Zx=oDj,7O7#:4.%# ospf network-type p2mp ipsec profile profile1 nhrp authentication cipher %#FosRT/(vK
5、O0%# nhrp shortcut nhrp registration interval 300 nhrp entry 10.2.1.1 1.1.1.10 register # interface Tunnel0/0/1 ip address 10.2.2.3 255.255.255.0 tunnel-protocol gre p2mp source GigabitEthernet1/0/0 gre key cipher %#y0|R0B_=#l“D)42/nU!;A56Zx=oDj,7O7#:4.%# ospf network-type p2mp ipsec profile profile
6、2 nhrp authentication cipher %#FosRT/(vKO0%# nhrp shortcut nhrp registration interval 300 nhrp entry 10.2.2.254 1.1.254.10 register # ospf 1 router-id 10.2.1.3 area 0.0.0.0 network 10.1.2.0 0.0.0.255 network 10.2.1.0 0.0.0.255 network 10.2.2.0 0.0.0.255 # ospf 2 area 0.0.0.1 network 1.1.3.0 0.0.0.255 # return 父主 题： 配置 举 例 华为专 有和保密信息 版 权所有 华为 技术有限公司
