{"id":130,"date":"2023-10-24T11:41:49","date_gmt":"2023-10-24T03:41:49","guid":{"rendered":"https:\/\/www.liaoxinghui.com\/?p=130"},"modified":"2023-10-24T11:51:36","modified_gmt":"2023-10-24T03:51:36","slug":"%e6%80%bb%e5%88%86%e4%bd%bf%e7%94%a8gre-over-ipsec%e9%85%8d%e7%bd%ae","status":"publish","type":"post","link":"https:\/\/www.liaoxinghui.com\/?p=130","title":{"rendered":"\u603b\u5206\u4f7f\u7528gre over ipsec\u914d\u7f6e"},"content":{"rendered":"

\u4eca\u5929\u95ee\u4e86\u4e0bGPT\u600e\u4e48\u5efa\u7acb\u5982\u4e0b\u7684\u7f51\u7edc\u7ed3\u6784\uff1a<\/p>\n

1.\u4e24\u8fb9\u7684\u8bbe\u5907\u90fd\u662fH3C\u7684\u9632\u706b\u5899 <\/p>\n

2.\u603b\u90e8\u6709\u4e24\u6761\u51fa\u53e3\u5206\u522b\u4e3aA\u548cB\uff0c\u5206\u522b\u7528\u4e24\u6761TUNNEL\u548c\u5206\u652f\u7684\u4e24\u6761tunnel\u5efa\u7acbgre\u96a7\u9053 <\/p>\n

3.ipsec\u4f7f\u7528\u4e3b\u6a21\u5f0f\uff0c\u603b\u90e8\u548c\u5206\u90e8\u5206\u522b\u5efa\u7acb\u4e24\u6761ike profile\u5bf9\u5e94\u4e0d\u540c\u7684\u603b\u90e8\u7684\u5730\u5740 <\/p>\n

4.\u603b\u90e8\u9700\u8981\u8ba9\u5206\u652f\u8bbf\u95ee\u7684\u7f51\u7edc\uff0c\u4e24\u8fb9\u7528ospf\u5ba3\u544a\u5404\u81ea\u5185\u7f51\u7f51\u6bb5 <\/p>\n

5.\u5206\u652f\u53ea\u6709\u4e00\u4e2a\u51fa\u53e3<\/p>\n

\u5b83\u7684\u56de\u7b54\uff1a<\/p>\n

\u4ee5\u4e0b\u662f\u4e00\u4e2aH3C\u9632\u706b\u5899\u4e0a\u8bbe\u7f6eGRE over IPSec\u94fe\u63a5\u7684\u6559\u7a0b\uff1a\n\n1. \u9996\u5148\uff0c\u6211\u4eec\u9700\u8981\u914d\u7f6e\u4e24\u8fb9\u7684\u9632\u706b\u5899\u63a5\u53e3\u3002\u5728\u603b\u90e8\u9632\u706b\u5899\u4e0a\uff0c\u6211\u4eec\u914d\u7f6e\u4e24\u4e2a\u63a5\u53e3\u5206\u522b\u8fde\u63a5\u5230\u51fa\u53e3A\u548cB\u3002\u5728\u5206\u652f\u9632\u706b\u5899\u4e0a\uff0c\u6211\u4eec\u914d\u7f6e\u4e00\u4e2a\u63a5\u53e3\u8fde\u63a5\u5230\u603b\u90e8\u3002\n\n```bash\n#\u603b\u90e8\u9632\u706b\u5899\nsystem-view\ninterface GigabitEthernet0\/0\/1\nip address 192.168.1.1 24 #\u51fa\u53e3A\u7684IP\u5730\u5740\ninterface GigabitEthernet0\/0\/2\nip address 192.168.2.1 24 #\u51fa\u53e3B\u7684IP\u5730\u5740\n\n#\u5206\u652f\u9632\u706b\u5899\nsystem-view\ninterface GigabitEthernet0\/0\/1\nip address 192.168.3.1 24 #\u8fde\u63a5\u5230\u603b\u90e8\u7684\u63a5\u53e3\u7684IP\u5730\u5740\n```\n\n2. \u7136\u540e\uff0c\u6211\u4eec\u5728\u4e24\u8fb9\u7684\u9632\u706b\u5899\u4e0a\u521b\u5efaGRE\u96a7\u9053\u3002\u5728\u603b\u90e8\u9632\u706b\u5899\u4e0a\uff0c\u6211\u4eec\u521b\u5efa\u4e24\u4e2a\u96a7\u9053\u5206\u522b\u8fde\u63a5\u5230\u5206\u652f\u7684\u63a5\u53e3\u3002\u5728\u5206\u652f\u9632\u706b\u5899\u4e0a\uff0c\u6211\u4eec\u4e5f\u521b\u5efa\u4e24\u4e2a\u96a7\u9053\u8fde\u63a5\u5230\u603b\u90e8\u7684\u4e24\u4e2a\u63a5\u53e3\u3002\n\n```bash\n#\u603b\u90e8\u9632\u706b\u5899\nsystem-view\ninterface Tunnel0\/0\/0\nsource 192.168.1.1 destination 192.168.3.1\ntunnel-protocol gre\ninterface Tunnel0\/0\/1\nsource 192.168.2.1 destination 192.168.3.1\ntunnel-protocol gre\n\n#\u5206\u652f\u9632\u706b\u5899\nsystem-view\ninterface Tunnel0\/0\/0\nsource 192.168.3.1 destination 192.168.1.1\ntunnel-protocol gre\ninterface Tunnel0\/0\/1\nsource 192.168.3.1 destination 192.168.2.1\ntunnel-protocol gre\n```\n\n3. \u63a5\u4e0b\u6765\uff0c\u6211\u4eec\u9700\u8981\u5728\u4e24\u8fb9\u7684\u9632\u706b\u5899\u4e0a\u914d\u7f6eIPSec\u3002\u6211\u4eec\u4f7f\u7528\u4e3b\u6a21\u5f0f\uff0c\u5e76\u5728\u603b\u90e8\u548c\u5206\u90e8\u5206\u522b\u5efa\u7acb\u4e24\u6761ike profile\u5bf9\u5e94\u4e0d\u540c\u7684\u603b\u90e8\u7684\u5730\u5740\u3002\n\n```bash\n#\u603b\u90e8\u9632\u706b\u5899\nsystem-view\nike peer Peer1 v1\nexchange-mode main\npre-shared-key simple 123456\nremote-address 192.168.3.1\nike proposal 1\nencryption-algorithm aes\nauthentication-algorithm sha1\nike peer Peer2 v1\nexchange-mode main\npre-shared-key simple 123456\nremote-address 192.168.3.1\nike proposal 2\nencryption-algorithm aes\nauthentication-algorithm sha1\n\n#\u5206\u652f\u9632\u706b\u5899\nsystem-view\nike peer Peer1 v1\nexchange-mode main\npre-shared-key simple 123456\nremote-address 192.168.1.1\nike proposal 1\nencryption-algorithm aes\nauthentication-algorithm sha1\nike peer Peer2 v1\nexchange-mode main\npre-shared-key simple 123456\nremote-address 192.168.2.1\nike proposal 2\nencryption-algorithm aes\nauthentication-algorithm sha1\n```\n\n4. \u6700\u540e\uff0c\u6211\u4eec\u9700\u8981\u5728\u4e24\u8fb9\u7684\u9632\u706b\u5899\u4e0a\u914d\u7f6eOSPF\uff0c\u4ee5\u5ba3\u544a\u5404\u81ea\u7684\u5185\u7f51\u7f51\u6bb5\u3002\n\n```bash\n#\u603b\u90e8\u9632\u706b\u5899\nsystem-view\nospf 1\narea 0\nnetwork 192.168.1.0 0.0.0.255\nnetwork<\/code><\/pre>\n
GPT\u7684\u4ee3\u7801\u662f\u5f3a\uff0c\u4f46\u662f\u6570\u901a\u8fd8\u662f\u5dee\u70b9\u610f\u601d\uff0c\u54c8\u54c8<\/p>","protected":false},"excerpt":{"rendered":"
\u4eca\u5929\u95ee\u4e86\u4e0bGPT\u600e\u4e48\u5efa\u7acb\u5982\u4e0b\u7684\u7f51\u7edc\u7ed3\u6784\uff1a 1.\u4e24\u8fb9\u7684\u8bbe\u5907\u90fd\u662fH3C\u7684\u9632\u706b\u5899 2.\u603b\u90e8\u6709\u4e24\u6761\u51fa\u53e3\u5206\u522b\u4e3aA\u548cB\uff0c\u5206\u522b\u7528\u4e24\u6761TUNNEL\u548c\u5206\u652f\u7684 …<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[22],"class_list":["post-130","post","type-post","status-publish","format-standard","hentry","category-8","tag-gre-over-ipsec"],"views":551,"_links":{"self":[{"href":"https:\/\/www.liaoxinghui.com\/index.php?rest_route=\/wp\/v2\/posts\/130","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.liaoxinghui.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.liaoxinghui.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.liaoxinghui.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.liaoxinghui.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=130"}],"version-history":[{"count":2,"href":"https:\/\/www.liaoxinghui.com\/index.php?rest_route=\/wp\/v2\/posts\/130\/revisions"}],"predecessor-version":[{"id":132,"href":"https:\/\/www.liaoxinghui.com\/index.php?rest_route=\/wp\/v2\/posts\/130\/revisions\/132"}],"wp:attachment":[{"href":"https:\/\/www.liaoxinghui.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=130"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.liaoxinghui.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=130"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.liaoxinghui.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=130"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}