一、配置
R1:
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip add 192.168.1.1 24
[r1-GigabitEthernet0/0/0]int s4/0/0
[r1-Serial4/0/0]ip add 15.1.1.1 24
R2:
[r2]int g0/0/0
[r2-GigabitEthernet0/0/0]ip add 192.168.2.1 24
[r2-GigabitEthernet0/0/0]int s4/0/0
[r2-Serial4/0/0]ip add 25.1.1.2 24
R3:
[r3]int g0/0/0
[r3-GigabitEthernet0/0/0]ip add 192.168.3.1 24
[r3-GigabitEthernet0/0/0]int s4/0/0
[r3-Serial4/0/0]ip add 35.1.1.3 24
R4:
[r4]int g0/0/0
[r4-GigabitEthernet0/0/0]ip add 45.1.1.4 24
[r4-GigabitEthernet0/0/0]int g0/0/1
[r4-GigabitEthernet0/0/1]ip add 192.168.4.1 24
ISP:
[ISP]int s4/0/0
[ISP-Serial4/0/0]ip add 15.1.1.5 24
[ISP-Serial4/0/0]int s4/0/1
[ISP-Serial4/0/1]ip add 25.1.1.5 24
[ISP-Serial4/0/1]int s3/0/0
[ISP-Serial3/0/0]ip add 35.1.1.5 24
[ISP-Serial3/0/0]int g0/0/0
[ISP-GigabitEthernet0/0/0]ip add 45.1.1.5 24
设备缺省分别指向ISP
R1:[r1]ip route-static 0.0.0.0 0 15.1.1.5
R2:[r2]ip route-static 0.0.0.0 0 25.1.1.5
R3:[r3]ip route-static 0.0.0.0 0 35.1.1.5
R4:[r4]ip route-static 0.0.0.0 0 45.1.1.5
二、R1与R5间使用PPP的PAP认证,R5为主认证方
R5:
[ISP]aaa
[ISP-aaa]local-user huawei password cipher huawei123
Info: Add a new user.
[ISP-aaa]local-user huawei service-type ppp
[ISP-aaa]int s4/0/0
[ISP-Serial4/0/0]link-protocol ppp
[ISP-Serial4/0/0]ppp authentication-mode pap
R1:
[r1]int s4/0/0
[r1-Serial4/0/0]link-protocol ppp
[r1-Serial4/0/0]ppp pap local-user huawei password cipher huawei123
R2与R5间使用PPP的CHAP认证R5为主认证方:
R5:
[ISP]aaa
[ISP-aaa]local-user huawei password cipher huawei123
[ISP-aaa]local-user huawei service-type ppp
[ISP-aaa]int s4/0/1
[ISP-Serial4/0/1]link-protocol ppp
[ISP-Serial4/0/1]ppp authentication-mode chap
R2:
[r2]int s4/0/0
[r2-Serial4/0/0]link-protocol ppp
[r2-Serial4/0/0]ppp chap user huawei
[r2-Serial4/0/0]ppp chap password cipher huawei123
三、R1R2R3构建MGRE环境,R1为中心站点
R1:
[r1] ip route-static 0.0.0.0 0 14.1.1.2
[r1-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[r1-serial0/0/0]nat outbound 2000
R2:
[r2]ip route-static 0.0.0.0 0 24.1.1.2
[r2-acl-basic-2000]rule permit source 192.168.2.0 0.0.0.255
[r2-serial0/0/0]nat outbound 2000
R3:
[r3]ip route-static 0.0.0.0 0 34.1.1.2
[r3-acl-basic-2000]rule permit source 192.168.3.0 0.0.0.255
[r3-serial0/0/0]nat outbound 2000
R4:
[r4]ip route-static 0.0.0.0 0 44.1.1.2
[r4-acl-basic-2000]rule permit source 192.168.4.0 0.0.0.255
[r4-serial0/0/0]nat outbound 2000