山石网科GRE over IPSec配置

> 拓扑图

![2022-08-26T14:41:47.png][1]

一、配置左侧设备
----

1. 配置设备接口IP及安全域
![2022-08-26T14:43:24.png][2]
![2022-08-26T14:44:24.png][3]
2. 配置设备安全策略（实验为了方便全放行）
![2022-08-26T14:45:45.png][4]
3. 配置p1提议
![2022-08-26T14:47:09.png][5]
4. 配置p2提议
![2022-08-26T14:48:07.png][6]
5. 配置VPN对端列表
![2022-08-26T14:49:15.png][7]
6. 配置IKE VPN列表
![2022-08-26T14:50:07.png][8]
7. 配置GRE 和 tunnel1 接口

tunnel gre shanghai
source 12.0.0.1
destination 12.0.0.2
interface ethernet0/3
next-tunnel ipsec 北京
exit


interface tunnel1
zone "trust"
ip address 10.0.0.1 255.255.255.0
manage ping
tunnel gre "shanghai" gw 10.0.0.2
exit

8. 配置OSPF
![2022-08-26T14:59:14.png][9]

二、配置右侧设备
----

1. 配置设备接口IP及安全域
![2022-08-26T15:02:38.png][10]
![2022-08-26T15:03:22.png][11]
2. 配置设备安全策略（实验为了方便全放行）
![2022-08-26T15:03:41.png][12]
3. 配置p1提议
![2022-08-26T14:47:09.png][13]
4. 配置p2提议
![2022-08-26T14:48:07.png][14]
5. 配置VPN对端列表
![2022-08-26T15:04:41.png][15]
6. 配置IKE VPN列表
![2022-08-26T15:05:16.png][16]
7. 配置GRE 和 tunnel1 接口

tunnel gre "beijing"
source 12.0.0.2
destination 12.0.0.1
interface ethernet0/3
next-tunnel ipsec 上海
exit

interface tunnel1
zone "trust"
ip address 10.0.0.2 255.255.255.0
manage ping
tunnel gre "beijing" gw 10.0.0.1
exit

8. 配置OSPF
![2022-08-26T15:07:58.png][17]

三、验证
----
1. show ipsec sa 或 网页查看
![2022-08-26T15:09:05.png][18]
![2022-08-26T15:13:51.png][19]
2. show isakmp sa 或 网页查看
![2022-08-26T15:09:41.png][20]
![2022-08-26T15:14:15.png][21]
3. show ip route
![2022-08-26T15:11:02.png][22]
4. 业务验证

![2022-08-26T15:12:23.png][23]

 

 

[1]: https://www.caoshaoqing.top/usr/uploads/2022/08/2438867564.png
[2]: https://www.caoshaoqing.top/usr/uploads/2022/08/1187927164.png
[3]: https://www.caoshaoqing.top/usr/uploads/2022/08/4155238065.png
[4]: https://www.caoshaoqing.top/usr/uploads/2022/08/146183073.png
[5]: https://www.caoshaoqing.top/usr/uploads/2022/08/547666883.png
[6]: https://www.caoshaoqing.top/usr/uploads/2022/08/1978154884.png
[7]: https://www.caoshaoqing.top/usr/uploads/2022/08/3856001910.png
[8]: https://www.caoshaoqing.top/usr/uploads/2022/08/1635936123.png
[9]: https://www.caoshaoqing.top/usr/uploads/2022/08/1534330148.png
[10]: https://www.caoshaoqing.top/usr/uploads/2022/08/3143640458.png
[11]: https://www.caoshaoqing.top/usr/uploads/2022/08/4058256604.png
[12]: https://www.caoshaoqing.top/usr/uploads/2022/08/2970468358.png
[13]: https://www.caoshaoqing.top/usr/uploads/2022/08/547666883.png
[14]: https://www.caoshaoqing.top/usr/uploads/2022/08/1978154884.png
[15]: https://www.caoshaoqing.top/usr/uploads/2022/08/771469191.png
[16]: https://www.caoshaoqing.top/usr/uploads/2022/08/424698694.png
[17]: https://www.caoshaoqing.top/usr/uploads/2022/08/1698346882.png
[18]: https://www.caoshaoqing.top/usr/uploads/2022/08/1096277.png
[19]: https://www.caoshaoqing.top/usr/uploads/2022/08/3656303438.png
[20]: https://www.caoshaoqing.top/usr/uploads/2022/08/3524302367.png
[21]: https://www.caoshaoqing.top/usr/uploads/2022/08/2509488913.png
[22]: https://www.caoshaoqing.top/usr/uploads/2022/08/724742663.png
[23]: https://www.caoshaoqing.top/usr/uploads/2022/08/1259609429.png
[24]: https://www.caoshaoqing.top/usr/uploads/2022/08/4245803051.png