返回列表 发帖

[主题格式] [原创] VOIP之——双网守互出PSTN

  • 信息来源: 十六进制信息安全讨论组
  • 作者: 奕天
  • 原始出处: 十六进制论坛
  • 双网守互出PSTN
    实验目标及需求:
    1.        区域内通过网守互通(如:2002与2001 互通)。
    2.        区域内通过网守到PSTN。(如:2002 能通过FBX打通88)
    3.        区域间模拟公网,通过不同区域的网守互相交互实现互通。(如:1001打通2001,2002 )
    4.        区域间模拟公网,通过对方出口上PSTN网络(如:2002 能通过另一区域8 线打通88)
    实验拓朴:


    实验配置:
    两个区域配置基本一样,所以只解释一个区域。
    Gk+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
    interface Ethernet0/0
    ip address 192.168.2.3 255.255.255.0           
    half-duplex

    interface Serial0/0
    no ip address
    shutdown
    !         
    no ip http server
    ip forward-protocol nd
    ip route 0.0.0.0 0.0.0.0 192.168.2.1
    !
    !
    control-plane!
    !
    gatekeeper
    zone local gk cisco.com 192.168.2.3          // 设置本地网守的名字 域名 和对应的地址
    zone remote gk1 bluefox.com 192.168.1.1 1719  //设置远程网守的名字 域名 和对应的地址
    zone prefix gk1 1...                               // 对方的区域前缀
    gw-type-prefix 9* gw ipaddr 192.168.2.1 1720   // 区域内注册到网守gk上的技术前缀号码和对应的网关的IP地址
    gw-type-prefix 8* hopoff gk1  //区域间把不匹配的技术前缀交给网守gk1
    lrq forward-queries    //开通lrp转发
    no shutdown

    r8====================================================================
    crypto isakmp policy 10
    encr 3des
    hash md5
    authentication pre-share
    group 2
    crypto isakmp key cisco address 172.0.129.2
    !         
    !
    crypto ipsec transform-set cisco esp-3des esp-md5-hmac
    !
    crypto map cisco 10 ipsec-isakmp
    set peer 172.0.129.2
    set transform-set cisco
    match address 101
    !
    !
    !
    !
    interface Ethernet0/0
    no ip address
    shutdown
    half-duplex
    !
    interface Serial0/0
    no ip address
    shutdown
    !
    interface Ethernet2/0
    ip address dhcp
    half-duplex
    crypto map cisco
    !
    interface Ethernet2/1
    no ip address
    shutdown
    half-duplex
    !
    interface Ethernet2/2
    ip address 192.168.2.1 255.255.255.0
    half-duplex
    h323-gateway voip interface
    h323-gateway voip id gk ipaddr 192.168.2.3 1719
    h323-gateway voip h323-id gw8
    h323-gateway voip bind srcaddr 192.168.2.1
    !
    interface Ethernet2/3
    no ip address
    shutdown
    half-duplex
    !
    no ip http server
    no ip http secure-server
    ip route 0.0.0.0 0.0.0.0 172.0.128.1
    !
    !
    !
    access-list 101 permit ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255
    !
    !
    !
    control-plane
    !
    !
    !
    voice-port 1/0/0
    caller-id enable
    !
    voice-port 1/0/1
    !
    voice-port 1/1/0
    !
    voice-port 1/1/1
    !
    !
    !
    !         
    !
    !
    dial-peer voice 1 pots
    destination-pattern 2001
    port 1/0/0
    !
    dial-peer voice 2 voip
    destination-pattern 1...
    session target ras
    !
    dial-peer voice 3 voip
    destination-pattern 2...
    session target ras
    !
    dial-peer voice 4 pots
    destination-pattern 9
    port 1/1/0
    !
    dial-peer voice 5 voip
    destination-pattern 8
    session target ras
    !
    dial-peer voice 8 voip
    destination-pattern 9
    session target ras
    !
    gateway
    timer receive-rtp 1200
    !
    !
    !
    line con 0
    exec-timeout 0 0
    logging synchronous
    line aux 0
    line vty 0 4
    !
    !
    end


    r 10 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::



    interface Ethernet0/0
    no ip address
    shutdown
    half-duplex
    !
    interface Serial0/0
    no ip address
    shutdown
    !
    interface Ethernet2/0
    no ip address
    shutdown
    half-duplex
    !
    interface Ethernet2/1
    no ip address
    shutdown
    half-duplex
    !
    interface Ethernet2/2
    ip address 192.168.2.2 255.255.255.0
    half-duplex
    h323-gateway voip interface
    h323-gateway voip id gk ipaddr 192.168.2.3 1719
    h323-gateway voip h323-id gw10
    h323-gateway voip bind srcaddr 192.168.2.2
    !
    interface Ethernet2/3
    no ip address
    shutdown
    half-duplex
    !
    no ip http server
    no ip http secure-server
    ip route 0.0.0.0 0.0.0.0 192.168.2.1
    !
    !
    !
    !
    !
    !
    control-plane
    !
    !
    !
    voice-port 1/0/0
    caller-id enable
    !
    voice-port 1/0/1
    !
    !
    !
    !
    !
    !
    dial-peer voice 1 pots
    destination-pattern 2002
    port 1/0/0
    !
    dial-peer voice 2 voip
    destination-pattern 1...
    session target ras
    !
    dial-peer voice 3 voip
    destination-pattern 2...
    session target ras
    !
    dial-peer voice 9 voip
    destination-pattern 9
    session target ras
    !
    dial-peer voice 8 voip
    destination-pattern 8
    session target ras
    !
    gateway
    timer receive-rtp 1200
    !
    !
    !
    line con 0
    exec-timeout 0 0
    logging synchronous
    line aux 0
    line vty 0 4
    !
    !
    end
    附件: 您需要登录才可以下载或查看附件。没有帐号?注册

    返回列表