Redian新闻
>
寻找在美国的有缘人,26岁征婚找朋友。
avatar
寻找在美国的有缘人,26岁征婚找朋友。# Computation - 科学计算
d*y
1
刷号刷来的,NSC 485 RD 5月1号全部这两天批了。 快啊!
avatar
T*m
2
千载人间寂寞,
三尺西窗寥廓。
谁伫望?绪无凭。
永夜之巅形魄。
姿绰,
犹若,
一半相思零落。
avatar
i*n
3
我无意中发现这个网页,在这个目录下,有很多珍贵的京剧资料可以很方便的下载,也
有一点昆曲的。他这个主要是比较好东西全,比较集中。仔细看,在底下的各个子目录
里有很多好东西。强烈推荐,链接如下:
http://iask.sina.com.cn/u/1441229524/ish?folderid=0
avatar
a*t
4
虞美人。归期
此生恨是多情种,无故悲凉涌。
为情困惑为情痴,却怨秋风惹我起相思。
秋林咄咄寒鸦叫,细数归期到。
沈郎一去杳无音,许是烟萝柳絮绕君心?
avatar
x*n
5
R1和R2,建立site to site VPN,
图一design,每一次customer要加新的private iP range,就要create IP accesslist。
现在我设计成图2.加了一个router,然后每一次加新的subnet,加到新的router上,然
后tunnel呢,仍然在原来的地方,只是每一个subnet都points to IPA 或者B上。
同事说这样不行,因为packet的source IP还是DEF。。。
我也不太确定,我觉得router A至少learn到了新的IP吧。
avatar
d*h
6
想在coreldraw里面画上类似坐标轴一类的直线,直线上标上分隔的小短线将直线等分
。但是不知道怎么搞。
我现在的笨办法是先画上直线,然后再画上几条垂直的小短线,然后调整这些短线的位
置到直线的等分位置。这个办法太笨太费时间了,不知道有没有更好的办法。
非常感谢!祝各位大牛周末愉快!
avatar
w*n
7
前两天想着系统好久没更新了,就运行了一下windows update,但有一个重要更新怎么
都装不上,.Net Framwork 4 Client Profile,错误代码为800B010B。网上搜了一圈,
都没找到解决办法,不知道版上有没有高人知道如何解决,万分感谢。我用的是Win7
Ultimate 64bit。
avatar
b*a
8
前几周面试一个position,transportation方向的,挂掉了。
但是感觉他们是需要人,我周五投的简历,周一就电面了。经验也不需要太多,
2 yr + ,觉得fresh master都可以试试看。
http://jobs-stantec.icims.com/jobs/6744/job
avatar
m*e
9
年龄不小啦 找个24~28岁的男士合适就结婚啦,父母催的要死
女生27岁,未婚,身高167cm, 平时喜欢美食和由于本人运动
当前婚姻状态(从没结过婚/离异/丧偶): 从未过结过婚
我的要求很简去单,相貌不要太张扬,过得去就行。赚钱多少
都无所谓,饿不着就行,关键是你有上进心,我们可以一起拼搏。
一定要对我好,责任心要强要是个顾家的人,希望你是个不吸烟
不喝酒的人,我各方面条件都OK,我的详细情况以及我的生活照
我都已经放在我的空间里
http://wodekongjian.diige.cn/ZnqvS
如果你觉得我们合适可以在我空间的日志里留个联系方式,我看

到信息会马上跟你联系,白天上班比较忙 一般都是晚上回家才能
回复你
avatar
f*g
10
好消息!
NSC继续加油啊
avatar
S*t
11
等包子和海参过来砍
好是好,似乎还未太用心。。。
avatar
l*u
12
次韵一首
离情别怨何生种,愁绪江河涌。
为谁惆怅为谁痴,无尽飘飞红叶引相思。
林烟漠漠霜蝉叫,鸿雁几时到。
梦回无计诉琴音, 且托清风传我月明心。

【在 a****t 的大作中提到】
: 虞美人。归期
: 此生恨是多情种,无故悲凉涌。
: 为情困惑为情痴,却怨秋风惹我起相思。
: 秋林咄咄寒鸦叫,细数归期到。
: 沈郎一去杳无音,许是烟萝柳絮绕君心?

avatar
s*g
13
Your colleague is right, to solve the problem you mentioned just use IPsec transport mode (aka, IPsec/GRE) instead of tunnel mode (aka, direct encapsulation).
avatar
H*J
14
画一条一端是箭头的直线,箭头类型是一条竖线,然后C&P。
或者直接从Origin之类的软件里把坐标贴过来。
avatar
n*e
15
TSC 加油啊!!!
avatar
h*t
16
好词啊。
不行。。。得等包子来庖丁解牛,俺顺风扔几个砖头
avatar
a*t
17
你的比我的更为波澜壮阔一些。。。

【在 l*******u 的大作中提到】
: 次韵一首
: 离情别怨何生种,愁绪江河涌。
: 为谁惆怅为谁痴,无尽飘飞红叶引相思。
: 林烟漠漠霜蝉叫,鸿雁几时到。
: 梦回无计诉琴音, 且托清风传我月明心。

avatar
m*t
18
your colleague is right, the IPsec SPD policies are triggered by the IP
ranges. unless on the router you added, you will perform source NAT.

accesslist。

【在 x*********n 的大作中提到】
: R1和R2,建立site to site VPN,
: 图一design,每一次customer要加新的private iP range,就要create IP accesslist。
: 现在我设计成图2.加了一个router,然后每一次加新的subnet,加到新的router上,然
: 后tunnel呢,仍然在原来的地方,只是每一个subnet都points to IPA 或者B上。
: 同事说这样不行,因为packet的source IP还是DEF。。。
: 我也不太确定,我觉得router A至少learn到了新的IP吧。

avatar
b*e
19
应该有5月底的。

【在 d****y 的大作中提到】
: 刷号刷来的,NSC 485 RD 5月1号全部这两天批了。 快啊!
avatar
h*i
20
pretty good one
may need some further modification for a couple of words
avatar
l*u
21
见笑了, , ,
只好矫情了,还是你的有感而发.
赞一下半夜写了这许多.

【在 a****t 的大作中提到】
: 你的比我的更为波澜壮阔一些。。。
avatar
x*n
22
我要消化一下楼上大侠的话,多谢指点。
avatar
z*y
23
tnnd的,TSC不作为,消极批准,给关门算了
avatar
T*m
24
哎呀,都是一手拿蛋糕,一手拿大棒的呀。:)
avatar
a*t
25
你怎么知道是半夜写的?

【在 l*******u 的大作中提到】
: 见笑了, , ,
: 只好矫情了,还是你的有感而发.
: 赞一下半夜写了这许多.

avatar
t*r
26
赛王真是个好人...........哥搞IPSEC VPN是N年前的事儿了.
N>=6
avatar
b*m
27
5月10号的RD急等……
avatar
h*t
28
.......................................
avatar
l*u
29
好几首都有 "半夜" "秋夜" "月"的字样.
已经先入为主了. 呵呵.

【在 a****t 的大作中提到】
: 你怎么知道是半夜写的?
avatar
p*x
30
even with ipsec/gre, why can't be done in tunnel mode?

transport mode (aka, IPsec/GRE) instead of tunnel mode (aka, direct
encapsulation).

【在 s*****g 的大作中提到】
: Your colleague is right, to solve the problem you mentioned just use IPsec transport mode (aka, IPsec/GRE) instead of tunnel mode (aka, direct encapsulation).
avatar
j*f
31
5/9急等,bless
avatar
S*t
32
对于高手那就得高标准严要求啊。

【在 T**m 的大作中提到】
: 哎呀,都是一手拿蛋糕,一手拿大棒的呀。:)
avatar
s*g
33
You can, but what does that buy you? to have 20 bytes extra overhead?
avatar
h*i
34
谁伫望?绪无凭。
永夜之巅形魄。
这两句突兀了点,特别是永夜那句,有点凑韵的嫌疑
另外,犹若看看是否有更好的选择

【在 T**m 的大作中提到】
: 哎呀,都是一手拿蛋糕,一手拿大棒的呀。:)
avatar
p*x
35
maybe more secure and NAT friendly?;)
interesting that you mentioned IPsec/GRE, I suppose you meant gre over ipsec
since you picked transport mode. with that setup, it is also extra overhead
to provide encryption to routing protocol...i would probably do ipsec over
gre tunnels, so the gre takes care any multicast or broadcast stuff while
the encrypted traffic rides inside the tunnel. it's easier on cpu and memory
too.
avatar
T*m
36
谢谢。直接写月亮确实不容易呀。

【在 h******i 的大作中提到】
: 谁伫望?绪无凭。
: 永夜之巅形魄。
: 这两句突兀了点,特别是永夜那句,有点凑韵的嫌疑
: 另外,犹若看看是否有更好的选择

avatar
s*g
37
I meant to say GRE/IPsec (GRE packet is encapsulated inside IP/ESP packet) to be exact ... with GRE/IPsec in tunnel mode you need 20 bytes more than in transport mode.
Can you explain how IPsec/GRE (which means ESP is encapsulated inside GRE) is configured in a typical Cisco box? and in this case how can multicast/broadcast traffic can be encrypted by IPsec before encaped by GRE? or how do you define IPsec "interesting" traffic?

ipsec
overhead
over
memory

【在 p**x 的大作中提到】
: maybe more secure and NAT friendly?;)
: interesting that you mentioned IPsec/GRE, I suppose you meant gre over ipsec
: since you picked transport mode. with that setup, it is also extra overhead
: to provide encryption to routing protocol...i would probably do ipsec over
: gre tunnels, so the gre takes care any multicast or broadcast stuff while
: the encrypted traffic rides inside the tunnel. it's easier on cpu and memory
: too.

avatar
T*m
38
含泪打到小兔子。

【在 S*******t 的大作中提到】
: 对于高手那就得高标准严要求啊。
avatar
p*x
39
It's actually pretty much the same, only that you don't encrypt the entire
GRE tunnel in crypto acl, GRE only used as a carrier for IPsec traffic.
Configure ipsec security protocol, define esp or ah or both. Define
interesting traffic in crypto acl. Create gre tunnel, allow routing protocol
or static pass through between ipsec peers.
however, mcast/bcast along with routing protocols are only wrapped by gre,
and interesting(protected) traffic are wrapped by esp and gre.
avatar
S*t
40
你应该骄傲!

【在 T**m 的大作中提到】
: 含泪打到小兔子。
avatar
s*g
41
Hmm, never tried this configuration before, so let's try to think in router's mind:
In GRE/IPsec case, when a packet comes in, router does ip lookup, next hop is GRE tunnel, so router encap's original packet with IP-GRE header, which subsequently triggers IPsec before the packet is placed on wire, the sequence makes perfect sense to me.
Now with IPsec/GRE case, when a packet comes in, it does route lookup, next hop has to be a tunnel interface in order to solve LZ's original problem, but then router will trigger IPsec first? how does your cryto ACL look like?

protocol

【在 p**x 的大作中提到】
: It's actually pretty much the same, only that you don't encrypt the entire
: GRE tunnel in crypto acl, GRE only used as a carrier for IPsec traffic.
: Configure ipsec security protocol, define esp or ah or both. Define
: interesting traffic in crypto acl. Create gre tunnel, allow routing protocol
: or static pass through between ipsec peers.
: however, mcast/bcast along with routing protocols are only wrapped by gre,
: and interesting(protected) traffic are wrapped by esp and gre.

avatar
h*t
42
Trim 妹妹真才情,佩服佩服。
avatar
a*n
43
crypto map is old fashion, new way in Cisco is Virtual Tunnel Interface.
http://www.cisco.com/en/US/docs/ios/12_3t/12_3t14/feature/guide
So basically, there are IPSec VPN, SSL VPN, Easy VPN, DMVPN, GET VPN, and
MPLS VPN(L2 or L3) in terms of VPN world.
Almost all of these VPNs could be integrated with VRF to further separate
traffic.
Now days, most firewall features are VRF aware too.

router's mind:
is GRE tunnel, so router encap's original packet with IP-GRE header, which
subsequently triggers IPsec before the packet is placed on wire, the
sequence makes perfect sense to me.
next hop has to be a tunnel interface in order to solve LZ's original
problem, but then router will trigger IPsec first? how does your cryto ACL
look like?

【在 s*****g 的大作中提到】
: Hmm, never tried this configuration before, so let's try to think in router's mind:
: In GRE/IPsec case, when a packet comes in, router does ip lookup, next hop is GRE tunnel, so router encap's original packet with IP-GRE header, which subsequently triggers IPsec before the packet is placed on wire, the sequence makes perfect sense to me.
: Now with IPsec/GRE case, when a packet comes in, it does route lookup, next hop has to be a tunnel interface in order to solve LZ's original problem, but then router will trigger IPsec first? how does your cryto ACL look like?
:
: protocol

avatar
j*y
44
双子好
avatar
s*g
45
VTI just makes configuration easier for the users, but the underline
technology/principle does not change.

which

【在 a***n 的大作中提到】
: crypto map is old fashion, new way in Cisco is Virtual Tunnel Interface.
: http://www.cisco.com/en/US/docs/ios/12_3t/12_3t14/feature/guide
: So basically, there are IPSec VPN, SSL VPN, Easy VPN, DMVPN, GET VPN, and
: MPLS VPN(L2 or L3) in terms of VPN world.
: Almost all of these VPNs could be integrated with VRF to further separate
: traffic.
: Now days, most firewall features are VRF aware too.
:
: router's mind:
: is GRE tunnel, so router encap's original packet with IP-GRE header, which

avatar
j*y
46
倒塌~ 再戒买卖提一个月,此志~~
55555,包子,你狠~

【在 h******i 的大作中提到】
: 谁伫望?绪无凭。
: 永夜之巅形魄。
: 这两句突兀了点,特别是永夜那句,有点凑韵的嫌疑
: 另外,犹若看看是否有更好的选择

avatar
T*m
47
双子?

【在 j******y 的大作中提到】
: 双子好
avatar
T*m
48
你那“高手”把我吓死了,不是呀。

【在 S*******t 的大作中提到】
: 你应该骄傲!
avatar
S*t
49
别啊,好歹先给诗社交了作业再走。。。

【在 j******y 的大作中提到】
: 倒塌~ 再戒买卖提一个月,此志~~
: 55555,包子,你狠~

avatar
S*t
50
双子是谁?

【在 T**m 的大作中提到】
: 双子?
avatar
S*t
51
这个你说了不算

【在 T**m 的大作中提到】
: 你那“高手”把我吓死了,不是呀。
相关阅读
logo
联系我们隐私协议©2024 redian.news
Redian新闻
Redian.news刊载任何文章,不代表同意其说法或描述,仅为提供更多信息,也不构成任何建议。文章信息的合法性及真实性由其作者负责,与Redian.news及其运营公司无关。欢迎投稿,如发现稿件侵权,或作者不愿在本网发表文章,请版权拥有者通知本网处理。