学校网站建设意义最新疫情新闻100字
当主用网关活动的时候，就会在主用网关产生这条路由。重分布到内部动态路由协议以后，内部路由器就会学到这条路由。同理，如果备用网关为活动，内部路由器就学到这样一条路由。由于同一时间只会有一个活动网关，也就只会产生一条路由，内部服务器同时也就只能学到一条路由，因而并不存在同时从主备用网关学到路由的问题。
HUB
ip route 0.0.0.0 0.0.0.0 202.100.1.1
ip access-list extended VPN
permit ip 1.1.1.0 0.0.0.255 2.2.2.0 0.0.0.255
crypto isakmp policy 10
encr aes
authentication pre-share
group 2
crypto isakmp key MIMA address 0.0.0.0
crypto isakmp keepalive 10 periodic 配置dpd，10为生命周期
crypto ipsec transform-set YEWU esp-aes esp-sha-hmac
mode tunnel
crypto map CELUE 10 ipsec-isakmp
set peer 61.128.1.1 default 默认PEER
set peer 137.78.5.1
set security-association idle-time 600 闲置时间
set transform-set YEWU
match address VPN
interface Ethernet0/0
crypto map CELUE
GW1
ip route 0.0.0.0 0.0.0.0 61.128.1.2
ip access-list extended VPN
permit ip 2.2.2.0 0.0.0.255 1.1.1.0 0.0.0.255
crypto isakmp policy 10
encr aes
authentication pre-share
group 2
crypto isakmp key MIMA address 202.100.1.2
crypto isakmp keepalive 10 periodic
crypto ipsec transform-set YEWU esp-aes esp-sha-hmac
mode tunnel
crypto map CELUE 10 ipsec-isakmp
set peer 202.100.1.2
set security-association idle-time 600
set transform-set YEWU
set reverse-route tag 10 为RRI动态产生的路由打上tag10
match address VPN
reverse-route static 启动RRI技术
route-map S2OVPN permit 10
match tag 10 匹配tag 10
router ospf 110
redistribute static subnets route-map S2OVPN 重分布静态路由到ospf
interface Ethernet0/1
crypto map CELUE
GW2#
ip route 0.0.0.0 0.0.0.0 137.78.5.2
ip access-list extended VPN
permit ip 2.2.2.0 0.0.0.255 1.1.1.0 0.0.0.255
crypto isakmp policy 10
encr aes
authentication pre-share
group 2
crypto isakmp key MIMA address 202.100.1.2
crypto isakmp keepalive 10 periodic
crypto ipsec transform-set YEWU esp-aes esp-sha-hmac
mode tunnel
crypto map CELUE 10 ipsec-isakmp
set peer 202.100.1.2
set security-association idle-time 600
set transform-set YEWU
set reverse-route tag 10
match address VPN
reverse-route
route-map S2OVPN permit 10
match tag 10
router ospf 110
redistribute static subnets route-map S2OVPN
interface Ethernet0/2
crypto map CELUE