OSPF实验

①R1、R2之间PPP的pap单向认证

[r1]int s4/0/0

[r1-Serial4/0/0]ip add 12.1.1.1 24

[r1]ospf 100

[r1-ospf-100]area 0

[r1-ospf-100-area-0.0.0.0]network 12.1.1.1 0.0.0.0

[r1]aaa

[r1-aaa]local-user ccie password cipher 123

[r1-aaa]local-user ccie service-type ppp

[r1]int s4/0/0

[r1-Serial4/0/0]ppp authentication-mode pap

[Huawei]sys r2

[r2]int s4/0/0

[r2-Serial4/0/0]ip add 12.1.1.2 24

[r2-Serial4/0/0]int s4/0/1

[r2-Serial4/0/1]ip add 23.1.1.1 24

[r2]ospf 100

[r2-ospf-100]area 0

[r2-ospf-100-area-0.0.0.0]network 12.1.1.0 0.0.0.0

[r2-ospf-100-area-0.0.0.0]network 23.1.1.0 0.0.0.0

[r2]int s4/0/0

[r2-Serial4/0/0]ppp pap local-user ccie password cipher 123

②R2、R3之间PPP的chap双向认证

[r2]aaa

[r2-aaa]local-user ccie password cipher 123456

[r2-aaa]local-user ccie service-type ppp

[r2-aaa]int s4/0/1

[r2-Serial4/0/1]ppp authentication-mode chap

[r2-Serial4/0/1]ip add 23.1.2.1 255.255.255.0

[r3-aaa]int s4/0/1

[r3-Serial4/0/1]link-protocol ppp

[r3-Serial4/0/1]ppp chap user ccie

[r3-Serial4/0/1]ppp chap password cipher 123456

[r3-Serial4/0/1]ip add 23.1.2.2 255.255.255.0

[r3]aaa

[r3-aaa]local-user ccie2 password cipher 123456

[r3-aaa]local-user ccie2 service-type ppp

[r3-aaa]int s4/0/1

[r3-Serial4/0/1]link-protocol ppp

[r3-Serial4/0/1]ppp authentication-mode chap

[r3-Serial4/0/1]ip add 23.1.3.1 255.255.255.0

[r2]int s4/0/1

[r2-Serial4/0/1]link-protocol ppp

[r2-Serial4/0/1]ppp chap user ccie2

[r2-Serial4/0/1]ppp chap password cipher 123456

[r2-Serial4/0/1]ip add 23.1.3.2 255.255.255.0

③R3-R5-R6间使用MGRE，R3为hub端，R5、R6为spoke端

[r3]int t 0/0/0

[r3-Tunnel0/0/0]ip add 100.1.1.1 255.255.255.0

[r3-Tunnel0/0/0]tunnel-protocol gre p2mp

[r3-Tunnel0/0/0]source 34.1.1.1

[r3-Tunnel0/0/0]nhrp entry multicast dynamic

[r3-Tunnel0/0/0]nhrp network-id 10

[r3]ip route-static 0.0.0.0 0 34.1.1.2

[r5]int t 0/0/0

[r5-Tunnel0/0/0]ip add 100.1.1.2 255.255.255.0

[r5-Tunnel0/0/0]tunnel-protocol gre p2mp

[r5-Tunnel0/0/0]source 45.1.1.2

[r5-Tunnel0/0/0]nhrp network-id 10

[r5-Tunnel0/0/0]nhrp entry 100.1.1.1 34.1.1.1 register

[r6]int t 0/0/0

[r6-Tunnel0/0/0]ip add 100.1.1.3 255.255.255.0

[r6-Tunnel0/0/0]tunnel-protocol gre p2mp

[r6-Tunnel0/0/0]source 46.1.1.2

[r6-Tunnel0/0/0]nhrp network-id 10

[r6-Tunnel0/0/0]nhrp entry 100.1.1.1 34.1.1.1 register