| profile | crypto ipsec profile PROF + set transform-set |
|---|---|
| 隧道 | interface Tunnel0 + tunnel mode ipsec ipv4 |
| 保护 | tunnel protection ipsec profile PROF |
| 核对 | show interfaces Tunnel0 / show crypto ipsec sa |
配置示例
配置示例
crypto ipsec profile PROF
set transform-set TS-A
set pfs group14
!
interface Tunnel0
ip address 10.255.0.1 255.255.255.252
tunnel source GigabitEthernet0/0
tunnel destination 203.0.113.2
tunnel mode ipsec ipv4
tunnel protection ipsec profile PROF
!
show interfaces Tunnel0