MGRE综合实验

• 

• 第一步，先进行ip地址的配置
• 对pc端进行ip地址的配置，接着对各接口进行ip配置
• [R1]int g0/0/0
  [R1-GigabitEthernet0/0/0]ip add 192.168.1.254 24
• [R1-GigabitEthernet0/0/0]int s4/0/0
  [R1-Serial4/0/0]ip add 15.1.1.1 24
  [R1-Serial4/0/0]quit
• R2]int g0/0/0
  [R2-GigabitEthernet0/0/0]ip add 192.168.2.254 24
• [R2-GigabitEthernet0/0/0]int s4/0/0
  [R2-Serial4/0/0]ip add 25.1.1.2 24
  
  [R3]int g0/0/0
  [R3-GigabitEthernet0/0/0]ip add 192.168.3.254 24
  [R3-GigabitEthernet0/0/0]int s4/0/0
  [R3-Serial4/0/0]ip add 35.1.1.3 24
• [R4]int g0/0/0
  [R4-GigabitEthernet0/0/0]ip add 192.168.4.254 24
• [R4-GigabitEthernet0/0/0]int g0/0/1
  [R4-GigabitEthernet0/0/1]ip add 45.1.1.4 24
• [R5]int g0/0/0
  [R5-GigabitEthernet0/0/0]ip add 45.1.1.5 24
• [R5-GigabitEthernet0/0/0]int s4/0/1
  [R5-Serial4/0/1]ip add 15.1.1.5 24
• [R5-Serial4/0/1]int s3/0/1
  [R5-Serial3/0/1]ip add 25.1.1.5 24
  [R5-Serial3/0/1]
• [R5-Serial3/0/1]int s4/0/0
  [R5-Serial4/0/0]ip add 35.1.1.5 24
  [R5-Serial4/0/0]
• 配置完成后，进行ppp认证配置
• [R5]aaa
  [R5-aaa]local-user wangdaye password cipher wdy12345
  Info: Add a new user.
  [R5-aaa]local-user wangdaye service-type ppp
  [R5-aaa]quit
  [R5]int s4/0/1
  [R5-Serial4/0/1]ppp authentication-mode pap
  [R5-Serial4/0/1]quit
• [R1]int s4/0/0
  [R1-Serial4/0/0]ppp pap local-user wangdaye password cipher wdy12345
  [R1-Serial4/0/0]shutdown
• [R1-Serial4/0/0]undo shutdown
• R1和R5配置成功
• [R5]int s3/0/1
  [R5-Serial3/0/1]ppp authentication-mode chap
• [R2]int s4/0/0
  [R2-Serial4/0/0]ppp chap user wangdaye
  [R2-Serial4/0/0]ppp chap password cipher wdy12345
  [R2-Serial4/0/0]shutdown
• [R2-Serial4/0/0]undo shutdown
• 此时，R2和R5联通
• [R3]int s4/0/0 
  [R3-Serial4/0/0]link-protocol hdlc 
• [R5]int s4/0/0
  [R5-Serial4/0/0]link-protocol hdlc
• 此时R3和R5联通
• 下一步，联通公网
• [R1]ip route-static 0.0.0.0 0 15.1.1.5
• [R2]ip route-static 0.0.0.0 0 25.1.1.5
• [R3]ip route-static 0.0.0.0 0 35.1.1.5
• [R4]ip route-static 0.0.0.0 0 45.1.1.5
• 此时已联通公网
• 
• 自己建立gre和mgre的隧道地址
• 10.1.1.0/24---MGRE
• 10.1.2.0/24---GRE
• [R1]int tunnel 0/0/0
• [R1-Tunnel0/0/0]ip add 10.1.1.1 24
  [R1-Tunnel0/0/0]tunnel-p    
  [R1-Tunnel0/0/0]tunnel-protocol gre p2mp
  [R1-Tunnel0/0/0]source 15.1.1.1
  [R1-Tunnel0/0/0]nhrp network-id 100
  [R1-Tunnel0/0/0]
• [R2]int tunnel 0/0/0
  [R2-Tunnel0/0/0]ip add 10.1.1.2 24
  [R2-Tunnel0/0/0]tunnel-protocol gre p2mp
  [R2-Tunnel0/0/0]source 25.1.1.2
  [R2-Tunnel0/0/0]
  [R2-Tunnel0/0/0]nhrp network-id 100
  [R2-Tunnel0/0/0]nhrp entry 10.1.1.1 15.1.1.1 register
• [R3]int tunnel 0/0/0
  [R3-Tunnel0/0/0]tunnel-pro    
• [R3-Tunnel0/0/0]ip add 10.1.1.3 24
  [R3-Tunnel0/0/0]tunnel-protocol gre p2mp
  [R3-Tunnel0/0/0]source 35.1.1.3 
  [R3-Tunnel0/0/0]nhrp network-id 100
  [R3-Tunnel0/0/0]nhrp entry 10.1.1.1 15.1.1.1 register
  [R3-Tunnel0/0/0]quit
• 此时，MGRE环境已配好
• [R1]int tunnel 0/0/1
  [R1-Tunnel0/0/1]ip add 10.1.2.1 24
  [R1-Tunnel0/0/1]tunnel-pro    
  [R1-Tunnel0/0/1]tunnel-protocol gre
  [R1-Tunnel0/0/1]source 15.1.1.1
  [R1-Tunnel0/0/1]destination 45.1.1.4
  [R1-Tunnel0/0/1]
• [R4]int tunnel 0/0/1
  [R4-Tunnel0/0/1]ip add 10.1.2.4 24
  [R4-Tunnel0/0/1]tunnel-pro    
  [R4-Tunnel0/0/1]tunnel-protocol gre
  [R4-Tunnel0/0/1]source 45.1.1.4
  [R4-Tunnel0/0/1]destination 15.1.1.1
• 此时GRE环境已配好
• 此时需要接通私网，配置rip协议
• [R1]rip 1
  [R1-rip-1]v    
  [R1-rip-1]verify-source
  [R1-rip-1]version 2
  [R1-rip-1]network 192.168.1.0
  [R1-rip-1]network 10.0.0.0
  [R1-rip-1]
• [R2]rip 1
  [R2-rip-1]version 2
  [R2-rip-1]undo summary
  [R2-rip-1]network 192.168.2.0
  [R2-rip-1]network 10.0.0.0
• [R3]rip 1
  [R3-rip-1]v    
  [R3-rip-1]verify-source
  [R3-rip-1]version 2
  [R3-rip-1]undo summary
  [R3-rip-1]network 192.168.3.0
  [R3-rip-1]network 10.0.0.0
• [R4]rip 1
  [R4-rip-1]version 2
  [R4-rip-1]undo summary
  [R4-rip-1]network 192.168.1.0
  [R4-rip-1]network 10.0.0.0
  [R4-rip-1]undo network 192.168.1.0
  [R4-rip-1]network 192.168.4.0
  [R4-rip-1]network 10.0.0.0
• 由于mgre接受不了所有的rip信息，需要通过R1发送伪广播，再取消水平分割
• [R1]int tunnel 0/0/0
  [R1-Tunnel0/0/0]nhrp entry multicast dynamic
  [R1-Tunnel0/0/0]undo rip split-horizon
• [R2-Tunnel0/0/0]undo rip split-horizon
• [R3-Tunnel0/0/0]undo rip split-horizon
• 

• 此时私网已全部ping通
• [R1]acl 2000
  [R1-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
  [R1-acl-basic-2000]quit
  [R1]int s4/0/0
  [R1-Serial4/0/0]nat outbound 2000
  [R1-Serial4/0/0]
• [R2]acl 2000
  [R2-acl-basic-2000]rule permit source 192.168.2.0 0.0.0.255
  [R2-acl-basic-2000]quit
  [R2]int s4/0/0
  [R2-Serial4/0/0]nat outbound 2000
  [R2-Serial4/0/0]
• [R3]acl 2000
  [R3-acl-basic-2000]rule permit source 192.168.3.0 0.0.0.255
  [R3-acl-basic-2000]int s4/0/0
  [R3-Serial4/0/0]nat outbound 2000
  [R3-Serial4/0/0]quit
• [R4]acl 2000
  [R4-acl-basic-2000]rule permit source 192.168.4.0 0.0.0.255
  [R4-acl-basic-2000]int g0/0/1
  [R4-GigabitEthernet0/0/1]nat outbound 2000
• 【R5】int l0
• 【R5】IP add 5.5.5.5 24
• 再在pc上pingR5环回，成功
•