1 health-care client gateway in NE40 (S8016) on medicare VPN configuration method:First step: create health-care VPN examples, in configuration modeIP VPN – carry vpnJICYIBAOAre 64710 distinguisher 356001 (-) Question1:64710:356001 VPN – target export – extcommunity64710:356001 VPN – target import – …
1 health-care client gateway in NE40 (S8016) on medicare VPN configuration method:First step: create health-care VPN examples, in configuration modeIP VPN – carry vpnJICYIBAOAre 64710 distinguisher 356001 (-) Question1:64710:356001 VPN – target export – extcommunity64710:356001 VPN – target import – extcommunity[BGP and MPLS related configuration this part content understand can, configuration, need not match again:MPLS LSR id211.138.98.34 (Question2) -MPLS LDP (Question3)In s8016 and ne5000E interconnection of ports enable MPLSWith Vlanif4001Description SXJIC - TO - - RT001 PBUndo shutdownIP 211.142.60.10 255.255.255.252 afterOspf by the follies of 40MPLS LDP enable (enabled MPLS)With gi1/0 0Des To NE5000EDefault vlan 4001 portatThe 64710 BGP (power-ups BGP Question4) 'ts:Import - static (static) are introducedImport - are introduced direct (direct link)Undo synchronizationPeer 211.138.98.32 as - by 64710211.138.98.32 enable undo peerPeer 211.138.98.32 connect with LoopBack0. -#Ipv4 -'t VPN - carry vpnJICYIBAOImport - are staticImport - are directUndo synchronization#Ipv4 -'t vpnv4Peer 211.138.98.32 enable]Step 2: create health-care vlansVlan 1911atStep 3 bind VPN examples and create three layer addressWith Vlanif1911Description S3026 – To – YangCheng – vpnJICYIBAOUndo shutdownIP binding VPN – carry vpnJICYIBAOIP 10.0.3.1 255.255.255.240 afterFourth step, through preaching vlansWith GigabitEthernet1/1/0Port trunk both – pass vlan 1911atFifth step, verify the client (or server: 192.168.0.2) whether can ping tongPing – VPN – vpnJICYIBAO carry 10.0.3.9The PING 10.0.3.9:56 bytes, press the data to the CTRL_CIn Reply 10.0.3.9:56 Sequence bytes==1 TTL=64 a=3 msIn Reply 10.0.3.9:56 Sequence=2 bytes==64 a TTL=3 msIn Reply 10.0.3.9:56 Sequence bytes==3 TTL=64 a=3 msIn Reply 10.0.3.9:56 Sequence=4 bytes==64 a TTL=3 msReply 10.0.3.9: bytes=56 – Sequence=5 TTL=64 a=3 ms10.0.3.9 ping – statistics -5 packet (s) transmitted5 packet (s) to wait0.00% packet lossRound – trip min/avg/Max=3/3/3 msPing – VPN – vpnJICYIBAO carry 192.168.0.2The PING 192.168.0.2:56 bytes, press the data to the CTRL_CIn Reply 192.168.0.2:56 Sequence=1 bytes=a=4 TTL=125 msIn Reply 192.168.0.2:56 Sequence=2 bytes=a=4 TTL=125 msIn Reply 192.168.0.2:56 Sequence=3 bytes=a=4 TTL=125 msIn Reply 192.168.0.2:56 Sequence=4 bytes=a=3 TTL=125 msReply 192.168.0.2: bytes=56 – Sequence=5 TTL=a=4 ms 125192.168.0.2 ping – statistics -5 packet (s) transmitted5 packet (s) to wait0.00% packet lossRound – trip min/avg/Max=3/3/4 ms2 some medical insurance point downtown client in the configuration MA5200G gateway methodFirst step: create health-care VPN examples, in configuration modeIP VPN – carry vpnJICYIBAOAre 64710: distinguisher 356001. -64710:356001 VPN – target export – extcommunity64710:356001 VPN – target import – extcommunityat[and S8016 interconnection of addressWith GigabitEthernet1/0/1.1900Dot1q vid 1900 - type vlanUndo shutdownIP binding VPN - carry vpnJICYIBAOIP 10.0.15.254 255.255.255.252 after]Step 2: create address poolsIP yb1 local poolVPN – carry vpnJICYIBAO (binding VPN)10.0.11.1 255.255.255.240 gateway10.0.11.2 10.0.11.14 sections 0Other digits – IP – after 10.0.11.2 10.0.11.14 (meaning for statically allocated, not to the client DHCP distribution)atStep 3: set authentication methods of medical insurance VPNaaaYb1 domainAuthentication – none not scheme authenticationRules – scheme none will not be paidUser – car 1 (to quote speed limit)VPN – carry vpnJICYIBAO (binding VPN)IP – pool yb1 (to quote address pools)atatStep 3: creating health-care interfaceWith GigabitEthernet1/0/1.1904User – vlan 1901Description S3552 – To – ZB – vpnJICYIBAOUndo shutdownbasAccess – type layer2 – subscriber default – yb1 force authentication domainVPN – carry vpnJICYIBAOAuthentication – of bindFourth step: binding interfaces (static user must be binding)Static – user 10.0.11.2 10.0.11.14 VPN – GigabitEthernet1/vpnJICYIBAO carry with 0/1.1901 vlan 1901 domain – name yb1Step 5: configure static routingIP are – static VPN – 0.0.0.0 0.0.0.0 10.0.15.253 vpnJICYIBAO carry(this address for 8016 and 5200G interconnection of address)At the same time with a return S8016 routing, objective segment for 5200G address pools segment, the next-hop for address for 5200G and S8016 interconnection of addressIP are – static VPN – 10.0.11.0 255.255.255.240 10.0.15.254 vpnJICYIBAO carryCheck, or NE40 52, S8016 route tablePut the IP ccna VPN – vpnJICYIBAO carry 192.168.0.2 (server IP)Whether in 5200G on configuration or NE40/S8016 on configuration, sub-accounts switches are thoroughly preach vlan will do. …In cure VPN client can 10.0.0.1 (ping S8016-1 and health center the router Internet address)The Ping 192.168.0.2 (health-care center one of proxy server IP)
No comments:
Post a Comment