一、拓扑图
二、FW1的配置
1.接口
![[简简单单]神州数码防火墙之策略IPSec](https://cache.yisu.com/upload/information/20200217/69/5464.jpg)
![[简简单单]神州数码防火墙之策略IPSec](https://cache.yisu.com/upload/information/20200217/69/5469.jpg)
2.新建默认路由
![[简简单单]神州数码防火墙之策略IPSec](https://cache.yisu.com/upload/information/20200217/69/5477.jpg)
3.新建对端ppp，密码：12345
![[简简单单]神州数码防火墙之策略IPSec](https://cache.yisu.com/upload/information/20200217/69/5479.jpg)
4.隧道步骤1，点击图中的导入按钮
![[简简单单]神州数码防火墙之策略IPSec](https://cache.yisu.com/upload/information/20200217/69/5483.jpg)
选择刚刚新建的对端ppp后如下图:
![[简简单单]神州数码防火墙之策略IPSec](https://cache.yisu.com/upload/information/20200217/69/5485.jpg)
5.隧道步骤2
![[简简单单]神州数码防火墙之策略IPSec](https://cache.yisu.com/upload/information/20200217/69/5486.jpg)
6.新建名为“10.135”的地址簿，新建策略时用
![[简简单单]神州数码防火墙之策略IPSec](https://cache.yisu.com/upload/information/20200217/69/5488.jpg)
7.新建策略
![[简简单单]神州数码防火墙之策略IPSec](https://cache.yisu.com/upload/information/20200217/69/5491.jpg)
建立好后如下图：
![[简简单单]神州数码防火墙之策略IPSec](https://cache.yisu.com/upload/information/20200217/69/5493.jpg)
三、FW2的配置
1.建好接口
![[简简单单]神州数码防火墙之策略IPSec](https://cache.yisu.com/upload/information/20200217/69/5496.jpg)
2.建默认路由
![[简简单单]神州数码防火墙之策略IPSec](https://cache.yisu.com/upload/information/20200217/69/5499.jpg)
3.新建对端ppp，密码：12345
![[简简单单]神州数码防火墙之策略IPSec](https://cache.yisu.com/upload/information/20200217/69/5504.jpg)
4.隧道步骤1，点击图中的导入按钮并选择刚刚新建的对端ppp
![[简简单单]神州数码防火墙之策略IPSec](https://cache.yisu.com/upload/information/20200217/69/5508.jpg)
5.隧道步骤2
![[简简单单]神州数码防火墙之策略IPSec](https://cache.yisu.com/upload/information/20200217/69/5511.jpg)
6.新建名为“192”的地址簿，新建策略时用
![[简简单单]神州数码防火墙之策略IPSec](https://cache.yisu.com/upload/information/20200217/69/5515.jpg)
7.新建策略
![[简简单单]神州数码防火墙之策略IPSec](https://cache.yisu.com/upload/information/20200217/69/5524.jpg)
建立好后如下图：
![[简简单单]神州数码防火墙之策略IPSec](https://cache.yisu.com/upload/information/20200217/69/5525.jpg)
四、在两端内网PC发起向对端内网PC的ping，触发隧道，连接成功如下：
![[简简单单]神州数码防火墙之策略IPSec](https://cache.yisu.com/upload/information/20200217/69/5526.jpg)
亿速云「云服务器」，即开即用、新一代英特尔至强铂金CPU、三副本存储NVMe SSD云盘，价格低至29元/月。点击查看>>
免责声明：本站发布的内容（图片、视频和文字）以原创、转载和分享为主，文章观点不代表本网站立场，如果涉及侵权请联系站长邮箱：is@yisu.com进行举报，并提供相关证据，一经查实，将立刻删除涉嫌侵权内容。
计算
安全
数据库
网络和加速
企业服务
