VPN IPSEC mỗi đầu 1 kiểu có UP được không

Trên R1:

crypto isakmp policy 1

 encr 3des

 hash md5

 authentication pre-share

 group 2

crypto isakmp key 123456 address 10.2.3.3      

!

!

crypto ipsec transform-set TS esp-3des esp-sha-hmac

 mode tunnel

!

!

crypto map CM 10 ipsec-isakmp

 set peer 10.2.3.3

 set transform-set TS

 match address 100

!

ip route 0.0.0.0 0.0.0.0 10.1.2.2

ip route 192.168.2.0 255.255.255.0 10.2.3.3

access-list 100 permit ip any any (Lưu ý phải để any any thì mới match được đầu kia là dùng vpn route-based)

crypto isakmp policy 10

 encr 3des

 hash md5

 authentication pre-share

 group 2

 lifetime 28800

crypto isakmp key 123456 address 10.1.2.1      

crypto ipsec transform-set TS esp-3des esp-sha-hmac

 mode tunnel

!

crypto ipsec profile HAI_PS

 set transform-set TS

!

interface Tunnel0

 ip address 172.16.1.1 255.255.255.0

 tunnel source 10.2.3.3

 tunnel mode ipsec ipv4

 tunnel destination 10.1.2.1

 tunnel protection ipsec profile HAI_PS

!

ip route 0.0.0.0 0.0.0.0 10.2.3.2

ip route 192.168.1.0 255.255.255.0 Tunnel0