网络安全实验八-虚拟专用网

实验8：虚拟专用网

组别 5 学号姓名请注明主笔工作量

20%

吴前斌20%

20%

20%

20%

【实验题目】

虚拟专用网

【实验目的与要求】

（1）理解虚拟专用网的工作原理；

（2）掌握基于GRE的VPN设计；

【实验需求】

两台电脑HA和HB通过GRE遂道的方式建立安全连接，实现互通。【实验环境】

实验环境如图1所示：

【实验步骤】

RA路由器的配置

第1步：进入系统视图，并更改路由器标识：RA

%Nov 22 11:27:56:211 2017 Quidway SHELL/5/LOGIN: Console login from con0

sys

System View: return to User View with Ctrl+Z.

[Quidway]sys RA

第2步：配置路由器的IP地址

[RA]interface Serial 1/0

[RA-Serial1/0]ip address 2.2.2.1 24

[RA-Serial1/0]q

[RA]interface Ethernet 0/0

[RA-Ethernet0/0]ip address 10.10.2.1 24

[RA-Ethernet0/0]q

第3步：配置遂道

[RA]interface Tunnel 0

[RA-Tunnel0]ip address 3.3.3.2 24

[RA-Tunnel0]tunnel-protocol gre

[RA-Tunnel0]source 2.2.2.1

[RA-Tunnel0]destination 2.2.2.2

[RA-Tunnel0]

%Nov 22 11:33:50:176 2017 RA IFNET/5/UPDOWN:Line protocol on the interface Tunne l0 is UP

第4步：配置静态路由

[RA]ip route-static 10.10.1.1 24 3.3.3.1

第5步：查看当前配置

[RA]display current-configuration

#

sysname RA

#

FTP server enable

#

l2tp domain suffix-separator @

#

radius scheme system

#

domain system

#

local-user admin

password

cipher .]@USE=B,53Q=^Q`MAF4<<"TX$_S#6.NM(0=0\)*5WWQ=^Q`MAF4<<"TX$_S#6. N

service-type telnet terminal

level 3

service-type ftp

#

interface Aux0

async mode flow

#

interface Ethernet0/0

ip address 10.10.2.1 255.255.255.0

#

interface Ethernet2/0

ip address dhcp-alloc

#

interface Serial0/0

clock DTECLK1

link-protocol ppp

ip address ppp-negotiate

#

interface Serial1/0

link-protocol ppp

ip address 2.2.2.1 255.255.255.0

#

interface Serial1/1

clock DTECLK1

link-protocol ppp

ip address ppp-negotiate

#

interface Tunnel0

ip address 3.3.3.2 255.255.255.0

source 2.2.2.1

destination 2.2.2.2

#

interface NULL0

#

ip route-static 10.10.1.0 255.255.255.0 3.3.3.1 preference 60

#

user-interface con 0

user-interface aux 0

user-interface vty 0 4

authentication-mode scheme

#

return

[RA]

第6步：测试

Ping对方的主机地址:10.10.1.20

RB路由器的配置

第1步：进入系统视图，并更改路由器名称

sys

System View: return to User View with Ctrl+Z. [Quidway]sysname RB

第2步：配置路由器IP地址

[RB]interface Serial 1/0

[RB-Serial1/0]ip address 2.2.2.2 255.255.255.0 [RB-Serial1/0]q

[RB]interface Ethernet 0/0

[RB-Ethernet0/0]ip address

[RB-Ethernet0/0]ip address 10.10.1.1 255.255.255.0 [RB-Ethernet0/0]q

第3步：配置隧道

[RB]interface Tunnel 0

[RB-Tunnel0]ip address 3.3.3.1 24

[RB-Tunnel0]source 2.2.2.2

[RB-Tunnel0]destination 2.2.2.1