Bjr, suite à mon projet de stage je voudrai savoir si la config que j'ai rentré dans mon routeur fait bien les choses suivantes.
Protocole eigrp
Liaison VPN
voici le shéma :
http://img294.imageshack.us/my.php?image=rseauvpn4eg.jpg
je devai créer 2 liaisons VPN avec le protocole EIGRP pour basculement de lien au cas ou un lien tombe ...
voici la config des 2 routeurs
routeur 1
Current configuration : 1438 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname DIRECTION
!
boot-start-marker
boot-end-marker
!
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no aaa new-model
ip subnet-zero
ip cef
!
ip ips po max-events 100
no ftp-server write-enable
!
!
!
!
!
!
crypto isakmp policy 1
encr 3des
authentication pre-share
crypto isakmp key TEST address 200.200.200.1
!
!
crypto ipsec transform-set PassWord esp-des
!
crypto map ganesh 1 ipsec-isakmp
set peer 200.200.200.1
set transform-set PassWord
match address 101
!
interface FastEthernet0/0
ip address 200.200.200.2 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 111.111.111.112 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/0/0
switchport access vlan 3
no ip address
!
interface FastEthernet0/0/1
no ip address
shutdown
!
interface FastEthernet0/0/2
no ip address
shutdown
!
interface FastEthernet0/0/3
no ip address
shutdown
!
interface Vlan1
no ip address
!
interface Vlan3
ip address 172.30.250.1 255.255.255.0
!
router eigrp 101
network 111.111.111.0 0.0.0.255
network 172.30.250.0 0.0.0.255
network 200.200.200.0
auto-summary
!
ip classless
ip http server
no ip http secure-server
!
!
access-list 101 permit ip any any
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
login
!
end
Routeur 2
Current configuration : 1426 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname DISTANT
!
boot-start-marker
boot-end-marker
!
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip ips po max-events 100
no ftp-server write-enable
!
!
!
!
!
!
crypto isakmp policy 1
encr 3des
authentication pre-share
crypto isakmp key TEST address 200.200.200.2
!
!
crypto ipsec transform-set PassWord esp-des
!
crypto map ganesh 1 ipsec-isakmp
set peer 200.200.200.2
set transform-set PassWord
match address 101
!
!
interface FastEthernet0/0
ip address 200.200.200.1 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 111.111.111.111 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/0/0
switchport access vlan 2
no ip address
!
interface FastEthernet0/0/1
no ip address
shutdown
!
interface FastEthernet0/0/2
no ip address
shutdown
!
interface FastEthernet0/0/3
no ip address
shutdown
!
interface Vlan1
no ip address
!
interface Vlan2
ip address 192.168.24.1 255.255.255.0
!
router eigrp 101
network 111.111.111.0 0.0.0.255
network 192.168.24.0
network 200.200.200.0
auto-summary
!
ip classless
ip http server
no ip http secure-server
!
!
access-list 101 permit ip any any
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
login
!
end
s'il vous faut plus d'informations demandez je vous répondrai ...
Merci d'avance ...
Configuration: routeur cisco 1841