HCIP实验-MGRE

实验拓扑：

实验要求：

1.R2为ISP，其上只能配置IP地址

2.R1-R2之间为HDLC封装

3.R2-R3之间为PPP封装，pap认证，R2为主认证方

4.R2-R4之间为PPP分装，chap认证，R2为主认证方

5.R1、R3、R4构建MGRE环境，仅R1IP地址固定

6.内网使用RIP获取路由，所有PC可以相互访问，并且可访问R2的环回

实验过程：

1.IP地址划分

由于未作要求，且私网地址已经给定，所以只需随机给定公网地址即可；详细规划见下图：

2.基础配置，并实现公网全通

R1:

[Huawei]interface g0/0/0

[Huawei-GigabitEthernet0/0/0]ip address 192.168.1.1 24

[Huawei-GigabitEthernet0/0/0]quit

[Huawei]interface s4/0/0

[Huawei-Serial4/0/0]ip address 14.1.1.1 24

[Huawei]quit

[Huawei]ip route-static 0.0.0.0 0.0.0.0 14.1.1.2

R2:

[Huawei]interface s3/0/0

[Huawei-Serial3/0/0]ip address 14.1.1.2 24

[Huawei-Serial3/0/0]quit

[Huawei]interface s3/0/1

[Huawei-Serial3/0/1]ip address 24.1.1.1 24

[Huawei-Serial3/0/1]quit

[Huawei]interface s4/0/0

[Huawei-Serial4/0/0]ip address 34.1.1.1 24

[Huawei-Serial4/0/0]quit

[Huawei]interface loopback 0

[Huawei-LoopBack0]ip address 4.4.4.1 24

[Huawei-LoopBack0]quit

R3:

[Huawei]interface g0/0/0

[Huawei-GigabitEthernet0/0/0]ip address 192.168.2.1 24

[Huawei-GigabitEthernet0/0/0]quit

[Huawei]interface s4/0/0

[Huawei-Serial4/0/0]ip address 24.1.1.2 24

[Huawei-Serial4/0/0]quit

[Huawei]ip route-static 0.0.0.0 0.0.0.0 24.1.1.1

R4:

[Huawei]interface g0/0/0

[Huawei-GigabitEthernet0/0/0]ip address 192.168.3.1 24

[Huawei-GigabitEthernet0/0/0]quit

[Huawei]interface s4/0/0

[Huawei-Serial4/0/0]ip address 34.1.1.2 24

[Huawei-Serial4/0/0]quit

[Huawei]ip route-static 0.0.0.0 0.0.0.0 34.1.1.1

此时，公网全通，如下图：

3.设置R1-R2之间为HDLC封装

R1:

[Huawei]interface s4/0/0

[Huawei-Serial4/0/0]link-protocol hdlc

Warning: The encapsulation protocol of the link will be changed. Continue? [Y/N]:y

R2:

[Huawei]interface s3/0/0

[Huawei-Serial3/0/0]link-protocol hdlc

Warning: The encapsulation protocol of the link will be changed. Continue? [Y/N]:y

4.设置R2-R3之间为PPP封装，pap认证，R2为主认证方

R2:

[Huawei]aaa

[Huawei-aaa]local-user litong password cipher 123

[Huawei-aaa]local-user litong service-type ppp

[Huawei-aaa]q

[Huawei]interface s3/0/1

[Huawei-Serial3/0/1]ppp authentication-mode pap

R3:

[Huawei]interface s4/0/0

[Huawei-Serial4/0/0]ppp pap local-user litong password cipher 123

5.设置R2-R4之间为PPP分装，chap认证，R2为主认证方

R3:

[Huawei]interface s4/0/0

[Huawei-Serial4/0/0]ppp authentication-mode chap

R4:

[Huawei]interface s4/0/0

[Huawei-Serial4/0/0]ppp chap user litong

[Huawei-Serial4/0/0]ppp chap password cipher 123

6.R1、R3、R4构建MGRE环境，R1IP地址固定

R1:

[Huawei]interface Tunnel 0/0/0

[Huawei-Tunnel0/0/0]ip address 192.168.4.1 24

[Huawei-Tunnel0/0/0]tunnel-protocol gre p2mp

[Huawei-Tunnel0/0/0]source 14.1.1.1

[Huawei-Tunnel0/0/0]nhrp entry multicast dynamic

[Huawei-Tunnel0/0/0]nhrp network-id 100

R3:

Huawei]interface Tunnel 0/0/0

[Huawei-Tunnel0/0/0]ip address 192.168.4.2 24

[Huawei-Tunnel0/0/0]tunnel-protocol gre p2mp

[Huawei-Tunnel0/0/0]source s4/0/0

[Huawei-Tunnel0/0/0]nhrp entry 192.168.4.1 14.1.1.1 register

[Huawei-Tunnel0/0/0]nhrp network-id 100

R4:

[Huawei]interface Tunnel 0/0/0

[Huawei-Tunnel0/0/0]ip address 192.168.4.3 24

[Huawei-Tunnel0/0/0]tunnel-protocol gre p2mp

[Huawei-Tunnel0/0/0]source s4/0/0

[Huawei-Tunnel0/0/0]nhrp entry 192.168.4.1 14.1.1.1 register

[Huawei-Tunnel0/0/0]nhrp network-id 100

7.内网使用RIP获取路由，所有PC可以相互访问，并且可访问R2的环回

R1:

[Huawei]rip

[Huawei-rip-1]version 2

[Huawei-rip-1]network 192.168.4.0

[Huawei-rip-1]network 192.168.1.0

[Huawei-rip-1]q

[Huawei]interface Tunnel 0/0/0

[Huawei-Tunnel0/0/0]undo rip split-horizon

[Huawei-rip-1]q

[Huawei]acl 2000

[Huawei-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255

[Huawei-acl-basic-2000]q

[Huawei]interface s4/0/0

[Huawei-Serial4/0/0]nat outbound 2000

R3:

[Huawei]rip

[Huawei-rip-1]version 2

[Huawei-rip-1]network 192.168.4.0

[Huawei-rip-1]network 192.168.2.0

[Huawei-rip-1]q

[Huawei]acl 2000

[Huawei-acl-basic-2000]rule permit source 192.168.2.0 0.0.0.255

[Huawei-acl-basic-2000]q

[Huawei]interface s4/0/0

[Huawei-Serial4/0/0]nat outbound 2000

R4:

[Huawei]rip

[Huawei-rip-1]version 2

[Huawei-rip-1]network 192.168.4.0

[Huawei-rip-1]network 192.168.3.0

[Huawei-rip-1]q

[Huawei]acl 2000

[Huawei-acl-basic-2000]rule permit source 192.168.3.0 0.0.0.255

[Huawei-acl-basic-2000]q

[Huawei]interface s4/0/0

[Huawei-Serial4/0/0]nat outbound 2000

如图，实验要求完成