Lab 1.2 VPN Site to Site DayTek 2920 vs DrayTek 2820 - PPTP vs ASA 5520

Discussion in 'Draytek' started by thanhdc, Aug 27, 2014.

  1. thanhdc

    thanhdc Super Moderator

    Joined:
    Aug 10, 2014
    Messages:
    139
    Likes Received:
    2
    Trophy Points:
    18
    I. Mô hình:


    [​IMG]


    II. Cấu hình:


    2.1 Cấu hình trên ASA:
    Code:
    ASA5520# [B]show int ip brief[/B]
        Interface                  IP-Address      OK? Method Status                Protocol
        GigabitEthernet0           [B]10.1.1.11[/B]       YES manual [B]up                    up[/B]
        GigabitEthernet1           [B]10.1.11.1[/B]       YES manual [B]up                    up[/B]
        GigabitEthernet2           [B]10.1.12.1[/B]       YES manual [B]up                    up[/B]
    
    
    ASA5520# [B]show route[/B]
        Gateway of last resort is 10.1.1.1 to network 0.0.0.0
        C    10.1.11.0 255.255.255.0 is directly connected, inside
        C    10.1.12.0 255.255.255.0 is directly connected, dmz
        C    10.1.1.0 255.255.255.0 is directly connected, outside
       [B] S*   0.0.0.0 0.0.0.0 [1/0] via 10.1.1.1, outside[/B]
    
    
    ASA5520# show running-config [B]access-list[/B]
        access-list Outside_In extended permit icmp any any
    
    
    ASA5520# show running-config [B]access-group[/B]
        access-group Outside_In in interface outside
    
    
    ASA5520# show running-config [B]interface[/B]
        !
        interface GigabitEthernet0
         nameif [B]outside[/B]
         security-level [B]0[/B]
         ip address [B]10.1.1.11 255.255.255.0[/B]
        !
        interface GigabitEthernet1
         nameif [B]inside[/B]
         security-level [B]100[/B]
         ip address [B]10.1.11.1 255.255.255.0[/B]
        !
        interface GigabitEthernet2
         nameif [B]dmz[/B]
         security-level [B]70[/B]
         ip address [B]10.1.12.1 255.255.255.0[/B]
    
    
    
    
    ASA5520# show running-config route
        route outside 0.0.0.0 0.0.0.0 10.1.1.1 1
    
    
    ASA5520# show running-config object
    …
    


    2.2 Cấu hình trên DrayTeck:

    2.2.1. Cấu hình static route:

    [​IMG]


    [​IMG]



    2.2.2. Cấu hình lại Remote Network IP

    [​IMG]


    Trên con DrayTek Vigor 2920, bạn vẫn giữ nguyên cấu hình như trước, vì mạng của site bên kia ko thay đổi…

    [​IMG]


    [​IMG]


    Trên con DrayTek Vigor 2820 bạn sửa Subnet 10.1.1.0 255.25.255.0 thành 10.1.0.0 255.255.0.0 đ
    ể gộp luôn cả các subnet 10.1.1.11.0 /24, 10.1.1.11.0 /24 10.1.12/0

    [​IMG]


    III. Kết quả đạt được:

    [​IMG]


    [​IMG]


    [​IMG]
     
    Last edited: Aug 31, 2014

Share This Page