leo703.blog.sohu.com

r1(0/0)---r2--(1/1)r3

GRE over IPSEC
先ipsec在gre
解决了ipsec无法传递多播流量问题，即可以在ipsec中跑路由协议，而且协议是通过加密的！！
R1:
crypto isakmp policy 10
 hash md5
 authent..

Ex3200开机指导
 
开机后：
login: root
Last login: Fri Jan 17 22:21:55 on ttyd0
--- JUNOS 7.2R3.3 built 2002-03-23 02:44:36 UTC
Terminal type? [vt100] <enter>
root@%
注意使用root用户登..

ipv6 隧道：
（1）6to4隧道：（用于两台交换或路由之间跨不支持ipv6的结构）

37A#sh run
System software version : RGNOS V4.11(2) Build Jul 15 2006 Release
Building configuration...
Current configuration : 391 bytes
!
version 1.0
!
hostname 37A
vlan 1
!
interface GigabitEthernet 0/12
 no switchport
 ip address 192.168.0.1 255.255.255.0
!
interface Vlan 1
 ipv6 address 2001::1/64
 ipv6 enable
 no ipv6 nd suppress-ra
!
!
interface Tunnel 0
 tunnel source 192.168.0.1
 tunnel destination 192.168.1.2
 ipv6 address 3fff::1/64
 ipv6 enable
!
!
ipv6 route ::/0 3fff::2
end
37A#   ping 2002::1
% Unrecognized host or address.                                              
37A#   ping ipv 2002::1
 
!!!!!
Ping statistics for 2002::1:
        Packets: Send=5, Receive=5, RcvBad=0, Lost=0,<0% loss>
*****************************************************************
37B#
37B#sh run
System software version : RGNOS V4.11(2) Build Jul 15 2006 Release
Building configuration...
Current configuration : 391 bytes
!
version 1.0
!
hostname 37B
vlan 1
!
interface GigabitEthernet 0/12
 no switchport
 ip address 192.168.1.2 255.255.255.0
!
interface Vlan 1
 ipv6 address 2002::1/64
 ipv6 enable
 no ipv6 nd suppress-ra
!
!
interface Tunnel 0
 tunnel source 192.168.1.2
 tunnel destination 192.168.0.1
 ipv6 address 3fff::2/64
 ipv6 enable
!
!
ipv6 route ::/0 3fff::1
end
37B#  ping ipv 3fff::1
 
!!!!!
Ping statistics for 3fff::1:
        Packets: Send=5, Receive=5, RcvBad=0, Lost=0,<0% loss>
37B#ping ipv 2001::1
 
!!!!!
Ping statistics for 2001::1:
        Packets: Send=5, Receive=5, RcvBad=0, Lost=0,<0% loss>
 
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
 
（2） ISATAP隧道（用于支持ipv6的设备与pc机的结构）

37A#sh run
System software version : RGNOS V4.11(2) Build Jul 15 2006 Release
Building configuration...
Current configuration : 211 bytes
!
version 1.0
!
hostname 37A
vlan 1
!
interface GigabitEthernet 0/12
 no switchport
 ip address 1.1.1.1 255.255.255.0
!
interface Vlan 1
 ip address 192.168.0.1 255.255.255.0
!
!
!
end
******************************************************

37B#sh run
System software version : RGNOS V4.11(2) Build Jul 15 2006 Release
Building configuration...
Current configuration : 529 bytes
!
version 1.0
!
hostname 37B
vlan 1
!
interface GigabitEthernet 0/12
 no switchport
 ip address 1.1.1.2 255.255.255.0
!
interface Vlan 1
 ipv6 address 2005::1/64
 ipv6 enable
 no ipv6 nd suppress-ra
!
interface Loopback 0
 ipv6 address 2002::1/64
 ipv6 enable
        
!
!
interface Tunnel 0
 tunnel mode ipv6ip isatap
 tunnel source GigabitEthernet 0/12
 ipv6 address 2001::/64 eui-64
 ipv6 enable
 no ipv6 nd suppress-ra
!
!
ip route 0.0.0.0 0.0.0.0 GigabitEthernet 0/12 1.1.1.1 1 enabled
end

*******************************************************
pc机端配置：
netsh interface ipv6 isatap set router name=1.1.1.2 ，该命令可以使主机将路由器请求报文封状在IPv4中发给ISATAP隧道以获得IPv6相关参数。

 [/img]..

用锐捷86做汇聚，采用双栈配置，上联一台华为设备，华为上联一台cisco路由器做出口，路由采用ospfv3
关键配置如下：（由于是在实际工程中配置故隐去具体ip）
86：
interface GigabitEthernet */47  ..

(Aruba800) #configure terminal
Enter Configuration commands, one per line. End with CNTL/Z
(Aruba800) (config) #interface loopback
(Aruba800) (config-loop)#ip address 1.1.1.1 
Switch IP Ad..

 
在一个客户那里发现所有电脑都不能登录工商网银，用的防火墙是juniper的，给了6个公网IP，在juniper上做的地址池(DIP)，并且做了带端口转换(PAT)的NAT，开始的时候一直认为是PAT的问题，因为工行网银用..