정신차려 이 각박한 터널 속에서!!

이 문제는 gre터널링을 설정하면 되는 문제이다.

Router0과 Router1 사이에는 gre over ipsec(암호화가 추가된 gre)로

Router1과 Router9 사이에는 gre로 설정하면 된다.

---

Router0 gre 설정

Router(config)#interface tunnel 0
Router(config-if)#ip address 100.100.100.1 255.255.255.0
Router(config-if)#tunnel source s0/1/0
Router(config-if)#tunnel destination 11.11.11.1

---

Router1 gre 설정

Router(config)#interface tunnel 0
Router(config-if)#ip address 100.100.100.2 255.255.255.0
Router(config-if)#tunnel source s0/1/0
Router(config-if)#tunnel destination 10.10.10.1

Router(config)#interface tunnel 1
Router(config-if)#ip address 101.101.101.1 255.2555.255.0
Router(config-if)#tunnel source s0/1/0
Router(config-if)#tuunel destination 18.18.18.2

---

Router9 gre 설정

Router(config)#interface tunnel 1
Router(config-if)#ip address 101.101.101.2 255.255.255.0
Router(config-if)#tunnel source s0/1/1
Router(config-if)#tunnel destination 11.11.11.1

---

IPsec을 설정하려면 crypto 명령어를 사용하면 된다.

Router0 crypto 설정

Router(config)#crypto isakmp policy 10
Router(config-isakmp)#encryption aes
Router(config-isakmp)#hash md5
Router(config-isakmp)#authentication pre-share
Router(config-isakmp)#lifetime 86400

---

Router1 crypto 설정

Router(config)#crypto isakmp policy 10
Router(config-isakmp)#encryption aes
Router(config-isakmp)#hash md5
Router(config-isakmp)#authentication pre-share
Router(config-isakmp)#lifetime 86400

---

다음으로는 transform-set을 설정해야 한다.

Router0 ipsec transform-set 설정

Router(config)#crypto ipsec transform-set transform esp-aes esp-md5-hmac

---

Router1 ipsec transform-set 설정

Router(config)#crypto ipsec transform-set transform esp-aes esp-md5-hmac

---

다음으로 crypto map을 설정해야 한다.

Router0 crypto map 설정

Router(config)#access-list 100 permit gre host 11.11.11.1 host 10.10.10.1
Router(config)#crypto map mymap 10 ipsec-isakmp
Router(config-crypto-map)#set peer 11.11.11.1
Router(config-crypto-map)#set transform-set transform
Router(config-crypto-map)#match address 100
Router(config)#interface s0/1/0
Router(config-if)#crypto map mymap

---

Router1 crypto map 설정

Router(config)#crypto map mymap 10 ipsec-isakmp
Router(config-crypto-map)#set peer 10.10.10.1
Router(config-crypto-map)#set transform-set transform
Router(config-crypto-map)#match address 100
Router(config)#interface s0/1/0
Router(config-if)#crypto map mymap

---

이후에 ACL관련해서 계속 했지만... %는 전혀 오르지 않았다.