Исходное сообщение
"резервирование IPSec" Отправлено zigli, 11-Апр-10 10:19
Вот что получилось в итоге... Схема резервирования работает, проверено на GNS3. crypto isakmp policy 10 encr aes 256 hash md5 authentication pre-share group 2 ! ! crypto ipsec transform-set AES256-MD5 esp-aes 256 esp-md5-hmac ! ! crypto ipsec profile TUN-AES256 set transform-set AES256-MD5 ! crypto isakmp key TUN1_adasdsdgdjhgjdhfjdhj address 11.11.11.11 crypto isakmp key TUN2_adasdsdgdjhgjdhfjdhj address 22.22.22.22 ! ! interface FastEthernet0/0 descr LAN ip address 192.168.100.1 255.255.255.0 ! interface vlan1 descr ISP1 ip address 1.1.1.1 255.255.255.0 ! interface vlan2 descr ISP2 ip address 2.2.2.2 255.255.255.0 ! interface tunnel1 ip address 10.0.1.1 255.255.255.252 tunnel source 1.1.1.1 tunnel dest 11.11.11.11 tunnel mode ipsec ipv4 tunnel protection ipsec profile TUN-AES256 ! interface tunnel2 ip address 10.0.2.1 255.255.255.252 tunnel source 2.2.2.2 tunnel dest 22.22.22.22 tunnel mode ipsec ipv4 tunnel protection ipsec profile TUN-AES256 ! ip route 2.2.2.2 255.255.255.255 vlan1 ip route 22.22.22.22 255.255.255.255 vlan2 ! router eigrp 1 passive-interface default no auto-summary network 10.0.0.0 network 192.168.100.0 0.0.0.255 no passive-interface tun1 no passive-interface tun2 ! с другой стороны так же со своими LAN, WAN адресами и маршрутами. Спасибо еще раз ShyLion!