浅析增强银行网络数据传输安全性(2)

        rule normal deny ip source any destination any
        ipsec proposal vvv                    
        // 定义提议vvv
        ipsec policy p1 10 isakmp                
        // 定义策略p1
        security acl 3080                     
        // 应用访问表
        proposal vvv                       
        // 引用提议vvv
        tunnel remote 192.96.19.5  
        // 定义对端设备接入网络的接口地址
        interface Serial0
        link-protocol fr
        ip address 192.96.36.78 255.255.255.252
        rip version 2 multicast
        ipsec policy p1              
        // 在端口上应用策略p1
        fr lmi type ansi
        fr map ip 192.96.36.77 dlci 112 broadcast
        interface Dialer0
        ip address 192.96.129.1 255.255.255.252
        rip
        undo summary
        network 192.0.0.0
        3.2cisco2600的配置
        crypto isakmp policy 1    
        // IKE的配置 认证方式pre-share预共享密钥 vvv
        authentication pre-share
        crypto isakmp key vvv address 192.96.36.78
        crypto ipsec transform-set vvv esp-des esp-md5-hmac 
        // IPSec提议的配置!
        crypto map ccc 10 ipsec-isakmp     
        // 加密图ccc的配置
        set peer 192.96.36.78
        set transform-set vvv