一、实验拓扑
二、实验需求
1.R3环回3.3.3.0/24,不宣告此环回
2.其他网段基于192.168.1.0/24进行划分
3.R1与R2均存在两个环回
4.整个网络运行ripv2
5.全网可达,保证更新安全,减少路由条目
三、实验思路
1.划分所给IP,然后分配给不同设配及骨干线路,并配置相应的IP地址
2.配置除R3环回3.3.3.0/24外的RIP协议,宣告网段,并测试
3.在R3的路由下配置到达3.3.3.0/24的缺省路由,实现全网通
4.接口验证,确保更新安全
5.接口汇总,减少路由条目,并做防环设计,测试
四、实验步骤
1.配置IP地址
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip add 192.168.1.1 26
[R1]int l0
[R1-LoopBack0]ip address 192.168.1.129 27
[R1-LoopBack0]int l1
[R1-LoopBack1]ip address 192.168.1.161 27
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip add 192.168.1.2 26
[R2-GigabitEthernet0/0/0]int g0/0/1
[R2-GigabitEthernet0/0/1]ip add 192.168.1.65 26
[R2]int l0
[R2-LoopBack0]ip add 192.168.1.193 27
[R2-LoopBack0]int l1
[R2-LoopBack1]ip add 192.168.1.225 27
[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]ip add 192.168.1.66 26
[R3-GigabitEthernet0/0/0]int l0
[R3-LoopBack0]ip add 3.3.3.3 24
2.配置除R3环回3.3.3.0/24外的RIP协议,宣告网段
[R1]rip 1
[R1-rip-1]version 2
[R1-rip-1]undo summary
[R1-rip-1]network 192.168.1.0
[R2]rip 1
[R2-rip-1]version 2
[R2-rip-1]undo summary
[R2-rip-1]network 192.168.1.0
[R3]rip 1
[R3-rip-1]version 2
[R3-rip-1]undo summary
[R3-rip-1]network 192.168.1.0
3.在R3源头下配置缺省路由,实现全网通
[R3]rip 1
[R3-rip-1]default-route originate
测试:
4.配置接口认证模式
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]rip authentication-mode md5 usual cipher yz12345
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]rip authentication-mode md5 usual cipher yz12345
[R2-GigabitEthernet0/0/0]int g0/0/1
[R2-GigabitEthernet0/0/1]rip authentication-mode md5 usual cipher yz12345
[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]rip authentication-mode md5 usual cipher yz12345
5.接口汇总,并做防环设计
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]rip summary-address 192.168.1.128 255.255.255.192
[R1]ip route-static 192.168.1.128 26 null 0
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]rip summary-address 192.168.1.192 255.255.255.192
[R2-GigabitEthernet0/0/0]int g0/0/1
[R2-GigabitEthernet0/0/1]rip summary-address 192.168.1.192 255.255.255.192
[R2]ip route-static 192.168.1.192 26 null 0