OpenForum RSS: VPN Tunnel �� Cisco 878 � Juniper SRX

�� Cisco 2951 � SRX100h �� (��)

Wed, 06 Jul 2011 13:07:01 GMT

�� (http://www.marfitsin.ru/index.php/articles/11-vpn/12-ciscojunipervpn) - �ӣ ��.

� �� ? (armanman)

Thu, 10 Feb 2011 08:09:26 GMT

��
��

INternet#sh crypto isakmp sa
IPv4 Crypto ISAKMP SA
dst src state conn-id status
10.0.0.2 10.0.0.1 QM_IDLE 1014 ACTIVE

� �� Tunnel72

��

%CRYPTO-4-RECVD_PKT_MAC_ERR: decrypt: mac verify failed for connection id=2061 local=10.0.0.1 remote=10.0.0.2 spi=64EC2E41 seqno=000000F2

�� ?

� �� ? (armanman)

Tue, 08 Feb 2011 13:21:17 GMT

��

ISAKMP (0): received packet from 10.0.0.2 dport 500 sport 500 Global (N) NEW SA
ISAKMP: Created a peer struct for 10.0.0.2, peer port 500
ISAKMP: New peer created peer = 0x30D2B87C peer_handle = 0x80000160
ISAKMP: Locking peer struct 0x30D2B87C, refcount 1 for crypto_isakmp_process_block
ISAKMP: local port 500, remote port 500
ISAKMP:(0):insert sa successfully sa = 311DF510
ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
ISAKMP:(0):Old State = IKE_READY New State = IKE_R_MM1

INternet#ping
ISAKMP:(0): processing SA payload. message ID = 0
ISAKMP:(0): processing vendor id payload
ISAKMP:(0): vendor ID is DPD
ISAKMP:(0): processing vendor id payload
ISAKMP:(0): vendor ID seems Unity/DPD but major 201 mismatch
ISAKMP:(0): processing vendor id payload
ISAKMP:(0): vendor ID seems Unity/DPD but major 192 mismatch
ISAKMP:(0): processing vendor id payload
ISAKMP:(0): vendor ID seems Unity/DPD but major 174 mismatch
ISAKMP:(0): processing vendor id payload
ISAKMP:(0): ven

� �� ? (armanman)

Tue, 08 Feb 2011 12:22:05 GMT

��

� �� ? (armanman)

Tue, 08 Feb 2011 12:08:47 GMT

> �� ?

�� , �� ....

� �� ? (rijiy)

Tue, 08 Feb 2011 11:17:52 GMT

�� ?

�� - �� ISAKMP (armanman)

Tue, 08 Feb 2011 11:12:16 GMT

� ��

crypto isakmp policy 10
encr 3des
hash md5
authentication pre-share
group 2
!
crypto isakmp policy 100
encr aes 256
authentication pre-share
group 5
!
crypto isakmp policy 110
encr aes
authentication pre-share
!
crypto isakmp policy 210
encr aes
authentication pre-share
!
crypto isakmp policy 1000
authentication pre-share
crypto isakmp key password address 10.0.0.2
!
!
crypto ipsec transform-set 2juniper esp-aes esp-sha-hmac
!
crypto ipsec profile 2juniper
set transform-set 2juniper
set pfs group2
!
!
!
!
!
!
interface Tunnel72
bandwidth 10000
ip address 172.16.0.205 255.255.255.252
ip flow ingress
ip flow egress
ip tcp adjust-mss 1280
ip ospf authentication
ip ospf cost 400
ip ospf mtu-ignore
delay 400
keepalive 10 3
tunnel source GigabitEthernet0/0
tunnel mode ipsec ipv4
tunnel destination 10.0.0.2
tunnel path-mtu-discovery
tunnel protection ipsec profile 2juniper
!
!
interface GigabitEthernet0/0

�� - �� ISAKMP (armanman)

Tue, 08 Feb 2011 11:03:58 GMT

��

interfaces {
ge-0/0/0 {
description Internet;
unit 0 {
family inet {
address 10.0.0.2/29;
}
}
}
ge-0/0/1 {
description "DMZ INTERNET";
unit 0 {
family inet {
address 192.168.103.26/24;
}
}
}
fxp0 {
description "MANAGEMENT Interface";
unit 0 {
family inet {
address 172.20.100.170/24;
}
}
}
lo0 {
unit 0 {
family inet {
address 192.168.55.1/32;
}
}
}
st0 {
unit 0 {
description "VPN Tunnel";
family inet {
mtu 1500;
address 172.16.0.206/30;
}
}
}
}
security {
ike {
proposal IKE_AES {
authentication-method pre-shared-keys;
dh-group group2;
aut

�� - �� ISAKMP (rijiy)

Tue, 08 Feb 2011 10:02:10 GMT

��, ��, �� - �� .
��

OpenForum RSS: VPN Tunnel ����� Cisco 878 � Juniper SRX

����� Cisco 2951 � SRX100h �������� (�������)

� ����� ����� ����������? (armanman)

� ����� ����� ����������? (armanman)

� ����� ����� ����������? (armanman)

� ����� ����� ����������? (armanman)

� ����� ����� ����������? (rijiy)

��� ���������� - �� ����� ����� ����� �������� ��� ISAKMP (armanman)

��� ���������� - �� ����� ����� ����� �������� ��� ISAKMP (armanman)

��� ���������� - �� ����� ����� ����� �������� ��� ISAKMP (rijiy)

OpenForum RSS: VPN Tunnel �� Cisco 878 � Juniper SRX

�� Cisco 2951 � SRX100h �� (��)

� �� ? (armanman)

� �� ? (armanman)

� �� ? (armanman)

� �� ? (armanman)

� �� ? (rijiy)

�� - �� ISAKMP (armanman)

�� - �� ISAKMP (armanman)

�� - �� ISAKMP (rijiy)