[BSCI] IPSec LAB_01 : IPSec Basic configuration

과제 : R1의 10.10.10.0/24 네트워크 사용자와 R2의 20.20.20.20.0/24 사용자간에 통신시 IPSec을 구성하라. Static Route를 이용하여 설정하시오.
아래의 조건을 이용하여 구성하시오.
Peer Authentication=pre-share
Encryption=3DES, Hash=md5
Diffie-Hellman=group 1(768bit 방식으로 키분배)
lifetime=3600
[transform-set[ESP(DES) AH(MD5) 사용하시오.], crypto map, name은 적절히 사용하시오.]

R1
en
conf t
host R1
!
crypto isakmp policy 10
hash md5
authentication pre-share
group 1
encryption 3des
lifetime 3600
!
crypto isakmp key cisco address 10.1.12.2
!
crypto ipsec transform-set TEST esp-des ah-md5-hmac
!
crypto map R1_R2 10 ipsec-isakmp
set peer 10.1.12.2
set transform-set TEST
match address 100
!
interface lo 1
ip address 10.10.10.1 255.255.255.0
exit
!
interface s1/0
ip address 10.1.12.1 255.255.255.0
crypto map R1_R2
no sh
exit
!
ip route 20.20.20.0 255.255.255.0 s1/0
!
access-list 100 permit ip 10.10.10.0 0.0.0.255 20.20.20.0 0.0.0.255
!
------------------------------------------------------------------------------------------------------------
R2
en
conf t
host R2
!
crypto isakmp policy 10
hash md5
authentication pre-share
group 1
encryption 3des
lifetime 3600
crypto isakmp key cisco address 10.1.12.1
!
crypto ipsec transform-set TEST esp-des ah-md5-hmac
!
crypto map R1_R2 10 ipsec-isakmp
set peer 10.1.12.1
set transform-set TEST
match address 100
!
interface lo 1
ip address 20.20.20.1 255.255.255.0
exit
!
interface s1/0
ip address 10.1.12.2 255.255.255.0
crypto map R1_R2
no shut
exit
!
ip route 10.10.10.0 255.255.255.0 s1/0
!
access-list 100 permit ip 20.20.20.0 0.0.0.255 10.10.10.0 0.0.0.255
!