本帖最后由 kioipp 于 2017-9-12 16:39 编辑
交换机内部分配置
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
!
crypto isakmp policy 11
encr aes 256
authentication pre-share
group 2
crypto isakmp key ******* address 13.75.116.40
crypto ipsec transform-set azure esp-aes 256 esp-sha-hmac
mode tunnel
crypto map azure_map 11 ipsec-isakmp
set peer 13.75.116.40
set transform-set azure
match address azure_list
interface GigabitEthernet0/0
description ** To_Internet **
ip address 58.251.65.2 255.255.255.0
ip nat outside
ip virtual-reassembly in
ip tcp adjust-mss 1350
duplex auto
speed auto
media-type rj45
no negotiation auto
crypto map azure_map
!
附件是相关的 Debug信息,请哪位大侠帮忙看看。