R2:
key chain ccie key 1 key-string cisco int tunnel 0 ip add 23.1.1.2 255.255.255.0 tunnel source 12.1.1.2 tunnel destination 13.1.1.3 tunnel mode gre ip oer border master 1.1.1.1 key-chain ccie local lo0 logging
R3: key chain ccie key 1 key-string cisco int tunnel 0 ip add 23.1.1.3 255.255.255.0 tunnel source 13.1.1.3 tunnel destination 12.1.1.2 tunnel mode gre ip oer border master 1.1.1.1 key-chain ccie local lo0 logging
R1: key chain ccie key 1 key-string cisco ip access-list extended cs2 permit ip host 14.1.1.4 host 57.1.1.7 dscp cs4 ip access-list extended cs4 permit ip host 14.1.1.4 host 67.1.1.7 dscp cs2 oer-map a 10 match traffic-class access-list cs2 oer-map a 20 match traffic-class access-list cs4 oer master policy-rules a border 2.2.2.2 key-chain ccie int s1/1 internal int tunnel 0 internal int s1/0 external link-group cs2 border 3.3.3.3 key-chain ccie int s1/2 internal int tunnel 0 internal int s1/0 external link-group cs4
有大佬帮俺看一下我这配置哪部有问题吗,我这个策略不能成功应用。用的是GNS3,路由器是C7200
|