[办公软件] 【×××系列十】关于如何处理混合环境下PPTP-×××流量的思考与处置

<tr>
      <td style="word-wrap: break-word" bgcolor="#fdfddf"><font color="#ff0000"> 
      <span style="color: #000000"><strong>pptp.server#show vpdn</strong></span>
      <span style="color: #000000">%No active L2TP tunnels</span>
      <span style="color: #000000">PPTP Tunnel and Session Information Total tunnels 1 sessions 1</span>
      <span style="color: #000000">LocID Remote Name   State  Remote Address  Port  Sessions VPDN Group<br />
      21945         estabd   172.18.101.3  50131 1    1</span>
      <span style="color: #000000">LocID RemID TunID Intf  Username    State   Last Chg Uniq ID<br />
      3399  64527 21945 Vi2.1   xuchen     estabd  00:00:16 3<br />
      </span>
      </font><span style="color: #000000"><br />
      </span></td>
    </tr>
  </tbody>

<tr>
      <td style="word-wrap: break-word" bgcolor="#fdfddf"><font color="#ff0000"> 
       <span style="color: #000000"><strong>spoke.router#show ip nat translations<br />
      </strong>Pro Inside global    Inside local     Outside local    Outside global<br />
      gre 200.0.30.2:21210   172.18.101.3:21210 200.0.10.2:21210   200.0.10.2:21210<br />
      gre 200.0.30.2:26907   172.18.101.3:26907 200.0.10.2:26907   200.0.10.2:26907<br />
      tcp 200.0.30.2:50134   172.18.101.3:50134 200.0.10.2:1723  200.0.10.2:1723<br />
      udp 200.0.30.2:55197   172.18.101.3:55197 221.228.255.1:53   221.228.255.1:53<br />
      </span>
      </font><span style="color: #000000"><br />
      </span></td>
    </tr>
  </tbody>

<tr>
      <td style="word-wrap: break-word" bgcolor="#fdfddf"><span style="color: #000000"> ip access-list extended pptp<br />
       permit gre any any<br />
       permit tcp any any eq 1723<br />
      </span></td>
    </tr>
  </tbody>

<tr>
      <td style="word-wrap: break-word" bgcolor="#fdfddf"><span style="color: #000000"> class-map type inspect match-any in.out.class<br />
        match protocol icmp<br />
       match access-group name pptp.gre<br />
       match protocol tcp<br />
       match protocol udp<br />
      class-map type inspect match-all out.in.class<br />
       match access-group name pptp<br />
      </span></td>
    </tr>
  </tbody>

<tr>
      <td style="word-wrap: break-word" bgcolor="#fdfddf"><span style="color: #000000"> policy-map type inspect in.out.po<br />
       class type inspect in.out.class<br />
        pass<br />
       class class-default<br />
        drop<br />
      policy-map type inspect out.in.po<br />
       class type inspect out.in.class<br />
        pass<br />
       class class-default<br />
        drop<br />
      </span></td>
    </tr>
  </tbody>

<tr>
      <td style="word-wrap: break-word" bgcolor="#fdfddf">
      <font color="#ff0000"> </font><span style="color: #000000">center.router#show policy-map ty inspect zone-pair se</span>
      <span style="color: #000000">policy exists on zp out.in.pair<br />
       Zone-pair: out.in.pair</span>
      <span style="color: #000000">  Service-policy inspect : out.in.po</span>
      <span style="color: #000000">  Class-map: all.traffic.class (match-any)<br />
          Match: protocol icmp<br />
          0 packets, 0 bytes<br />
          30 second rate 0 bps<br />
          Match: protocol tcp<br />
          1 packets, 32 bytes<br />
          30 second rate 0 bps<br />
          Match: protocol udp<br />
          0 packets, 0 bytes<br />
          30 second rate 0 bps</span>
      <span style="color: #000000">   Inspect</span>
      <span style="color: #000000">    Number of Established Sessions = 1<br />
          Established Sessions<br />
          Session 68A43F20 (200.0.30.2:50352)=&gt;(172.18.10.1:1723) tcp SIS_OPEN/TCP_ESTAB<br />
            Created 00:02:09, Last heard 00:00:08<br />
            Bytes sent (initiator:responder) [408:224]</span>
      <span style="color: #000000">
      <br />
        Class-map: pptp.class (match-all)<br />
          Match: access-group name pptp<br />
          Pass<br />
          176 packets, 13735 bytes
      </span><font color="#ff0000">
       
      <span style="color: #000000">  Class-map: class-default (match-any)<br />
          Match: any<br />
          Drop<br />
          0 packets, 0 bytes</span>
      <span style="color: #000000">policy exists on zp in.out.pair<br />
       Zone-pair: in.out.pair</span>
      <span style="color: #000000">  Service-policy inspect : in.out.po</span>
      <span style="color: #000000">  Class-map: all.traffic.class (match-any)<br />
          Match: protocol icmp<br />
          0 packets, 0 bytes<br />
          30 second rate 0 bps<br />
          Match: protocol tcp<br />
          3 packets, 600 bytes<br />
          30 second rate 0 bps<br />
          Match: protocol udp<br />
          0 packets, 0 bytes<br />
          30 second rate 0 bps</span>
      <span style="color: #000000">   Inspect</span>
      <span style="color: #000000">  Class-map: pptp.class (match-all)<br />
          Match: access-group name pptp<br />
          Pass<br />
          37 packets, 1977 bytes</span>
      <span style="color: #000000">  Class-map: class-default (match-any)<br />
          Match: any<br />
          Drop<br />
          0 packets, 0 bytes</span>
      <span style="color: #000000">policy exists on zp out.self.pair<br />
       Zone-pair: out.self.pair</span>
      <span style="color: #000000">  Service-policy inspect : out.self.po</span>
      <span style="color: #000000">  Class-map: out.access.class (match-all)<br />
          Match: access-group name out.access<br />
          Pass<br />
          72 packets, 1592 bytes</span>
      <span style="color: #000000">  Class-map: pptp.class (match-all)<br />
          Match: access-group name pptp<br />
          Pass<br />
          0 packets, 0 bytes</span>
       
      </font><span style="color: #000000">  Class-map: class-default (match-any)<br />
          Match: any<br />
          Drop<br />
          5 packets, 400 bytes<br />
      </span></td>
    </tr>
  </tbody>