Sophos 2 cisco router: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
Thomas (Diskussion | Beiträge) |
|||
| (13 dazwischenliegende Versionen von 2 Benutzern werden nicht angezeigt) | |||
| Zeile 1: | Zeile 1: | ||
| − | !IKE | + | =Cisco Site= |
| + | !IKE Phase 1 | ||
<pre> | <pre> | ||
crypto isakmp policy 10 | crypto isakmp policy 10 | ||
| Zeile 5: | Zeile 6: | ||
authentication pre-share | authentication pre-share | ||
group 5 | group 5 | ||
| − | <pre> | + | exit |
| + | </pre> | ||
!ACL | !ACL | ||
ip access-list extended vpn-cisco-sophos-net | ip access-list extended vpn-cisco-sophos-net | ||
| − | permit ip 10.20.30.0 0.0.0.255 | + | permit ip 10.20.30.0 0.0.0.255 10.20.0.0 0.0.255.255 |
| + | exit | ||
| + | !PSK zum VPN-GW ordnen | ||
| + | crypto isakmp key 0 sehr-geheim address 192.168.244.130 | ||
| + | !IKE Phase 2 | ||
| + | crypto ipsec transform-set AES-256-MD5 esp-aes 256 esp-md5-hmac | ||
| + | exit | ||
| + | !Zusammenfassen von Phase 1 und Phase 2 | ||
| + | crypto map cisco-sophos 10 ipsec-isakmp | ||
| + | set peer 192.168.244.130 | ||
| + | set transform-set AES-256-MD5 | ||
| + | match address vpn-cisco-sophos-net | ||
| + | set pfs group5 | ||
| + | exit | ||
| + | !Anwenden der Crypto Map auf die Schnittstelle | ||
| + | interface fastEthernet 0/0 | ||
| + | |||
| + | =Sophos site= | ||
| + | ==New Remote Gateway== | ||
| + | [[Datei:cisco-sophos1.png]] | ||
| + | |||
| + | =New Ipsec Connection= | ||
| + | |||
| + | [[Datei:cisco-sophos2.png]] | ||
Aktuelle Version vom 27. Mai 2021, 21:54 Uhr
Cisco Site
!IKE Phase 1
crypto isakmp policy 10 encr aes 256 authentication pre-share group 5 exit
!ACL
ip access-list extended vpn-cisco-sophos-net permit ip 10.20.30.0 0.0.0.255 10.20.0.0 0.0.255.255 exit
!PSK zum VPN-GW ordnen
crypto isakmp key 0 sehr-geheim address 192.168.244.130
!IKE Phase 2
crypto ipsec transform-set AES-256-MD5 esp-aes 256 esp-md5-hmac exit
!Zusammenfassen von Phase 1 und Phase 2
crypto map cisco-sophos 10 ipsec-isakmp set peer 192.168.244.130 set transform-set AES-256-MD5 match address vpn-cisco-sophos-net set pfs group5 exit
!Anwenden der Crypto Map auf die Schnittstelle
interface fastEthernet 0/0
Sophos site
New Remote Gateway
New Ipsec Connection
