双网守互出PSTN
实验目标及需求:
1. 区域内通过网守互通(如:2002与2001 互通)。
2. 区域内通过网守到PSTN。(如:2002 能通过FBX打通88)
3. 区域间模拟公网,通过不同区域的网守互相交互实现互通。(如:1001打通2001,2002 )
4. 区域间模拟公网,通过对方出口上PSTN网络(如:2002 能通过另一区域8 线打通88)
实验拓朴:
实验配置:
两个区域配置基本一样,所以只解释一个区域。
Gk+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
interface Ethernet0/0
ip address 192.168.2.3 255.255.255.0
half-duplex
interface Serial0/0
no ip address
shutdown
!
no ip http server
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 192.168.2.1
!
!
control-plane!
!
gatekeeper
zone local gk cisco.com 192.168.2.3 // 设置本地网守的名字 域名 和对应的地址
zone remote gk1 bluefox.com 192.168.1.1 1719 //设置远程网守的名字 域名 和对应的地址
zone prefix gk1 1... // 对方的区域前缀
gw-type-prefix 9* gw ipaddr 192.168.2.1 1720 // 区域内注册到网守gk上的技术前缀号码和对应的网关的IP地址
gw-type-prefix 8* hopoff gk1 //区域间把不匹配的技术前缀交给网守gk1
lrq forward-queries //开通lrp转发
no shutdown
r8====================================================================
crypto isakmp policy 10
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key cisco address 172.0.129.2
!
!
crypto ipsec transform-set cisco esp-3des esp-md5-hmac
!
crypto map cisco 10 ipsec-isakmp
set peer 172.0.129.2
set transform-set cisco
match address 101
!
!
!
!
interface Ethernet0/0
no ip address
shutdown
half-duplex
!
interface Serial0/0
no ip address
shutdown
!
interface Ethernet2/0
ip address dhcp
half-duplex
crypto map cisco
!
interface Ethernet2/1
no ip address
shutdown
half-duplex
!
interface Ethernet2/2
ip address 192.168.2.1 255.255.255.0
half-duplex
h323-gateway voip interface
h323-gateway voip id gk ipaddr 192.168.2.3 1719
h323-gateway voip h323-id gw8
h323-gateway voip bind srcaddr 192.168.2.1
!
interface Ethernet2/3
no ip address
shutdown
half-duplex
!
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 172.0.128.1
!
!
!
access-list 101 permit ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255
!
!
!
control-plane
!
!
!
voice-port 1/0/0
caller-id enable
!
voice-port 1/0/1
!
voice-port 1/1/0
!
voice-port 1/1/1
!
!
!
!
!
!
dial-peer voice 1 pots
destination-pattern 2001
port 1/0/0
!
dial-peer voice 2 voip
destination-pattern 1...
session target ras
!
dial-peer voice 3 voip
destination-pattern 2...
session target ras
!
dial-peer voice 4 pots
destination-pattern 9
port 1/1/0
!
dial-peer voice 5 voip
destination-pattern 8
session target ras
!
dial-peer voice 8 voip
destination-pattern 9
session target ras
!
gateway
timer receive-rtp 1200
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
!
!
end
r 10 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
interface Ethernet0/0
no ip address
shutdown
half-duplex
!
interface Serial0/0
no ip address
shutdown
!
interface Ethernet2/0
no ip address
shutdown
half-duplex
!
interface Ethernet2/1
no ip address
shutdown
half-duplex
!
interface Ethernet2/2
ip address 192.168.2.2 255.255.255.0
half-duplex
h323-gateway voip interface
h323-gateway voip id gk ipaddr 192.168.2.3 1719
h323-gateway voip h323-id gw10
h323-gateway voip bind srcaddr 192.168.2.2
!
interface Ethernet2/3
no ip address
shutdown
half-duplex
!
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 192.168.2.1
!
!
!
!
!
!
control-plane
!
!
!
voice-port 1/0/0
caller-id enable
!
voice-port 1/0/1
!
!
!
!
!
!
dial-peer voice 1 pots
destination-pattern 2002
port 1/0/0
!
dial-peer voice 2 voip
destination-pattern 1...
session target ras
!
dial-peer voice 3 voip
destination-pattern 2...
session target ras
!
dial-peer voice 9 voip
destination-pattern 9
session target ras
!
dial-peer voice 8 voip
destination-pattern 8
session target ras
!
gateway
timer receive-rtp 1200
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
!
!
end |