第三章GRE与VPN技术

1.思维导图

二，综合实验

1.配置IP

[r1-GigabitEthernet0/0/0]ip add 15.0.0.1 24

[r1-LoopBack0]ip address 192.168.1.1 24

[r2-GigabitEthernet0/0/0]ip address 25.0.0.2 24

[r2-LoopBack0]ip address 192.168.2.2 24

[r3-GigabitEthernet0/0/0]ip address 35.0.0.3 24

[r3-LoopBack0]ip address 192.168.3.3 24

[r4-GigabitEthernet0/0/0]ip add 45.0.0.4 24

[r4-LoopBack0]ip add 192.168.4.4 24

[r5-GigabitEthernet0/0/0]ip add 15.0.0.5 24

[r5-GigabitEthernet0/0/1]ip add 25.0.0.5 24

[r5-GigabitEthernet0/0/2]ip add 45.0.0.5 24

[r5-GigabitEthernet4/0/0]ip add 35.0.0.5 24

2，配置静态路由，全网可达

[r1]ip route-static 0.0.0.0 0 15.0.0.5

[r2]ip route-static 0.0.0.0 0 25.0.0.5

[r3]ip route-static 0.0.0.0 0 35.0.0.5

[r4]ip route-static 0.0.0.0 0 45.0.0.5

3，配置VPN

r1：

[r1]int Tunnel 0/0/0

[r1-Tunnel0/0/0]ip add 192.168.5.1 24

[r1-Tunnel0/0/0]tunnel-protocol gre p2mp

[r1-Tunnel0/0/0]source 15.0.0.1

r2：

[r2]int Tunnel 0/0/0

[r2-Tunnel0/0/0]ip add 192.168.5.2 24

[r2-Tunnel0/0/0]tunnel-protocol gre p2mp

[r2-Tunnel0/0/0]source 25.0.0.2

r3:

[r3]int Tunnel 0/0/0

[r3-Tunnel0/0/0]ip add 192.168.5.3 24

[r3-Tunnel0/0/0]tunnel-protocol gre p2mp

[r3-Tunnel0/0/0]source 35.0.0.3

r4:

[r4]int Tunnel 0/0/0

[r4-Tunnel0/0/0]ip address 192.168.5.4 24

[r4-Tunnel0/0/0]tunnel-protocol gre p2mp

[r4-Tunnel0/0/0]source 45.0.0.4

4,配置NHRP

[r1-Tunnel0/0/0]nhrp network-id 10

[r2-Tunnel0/0/0]nhrp network-id 100  

[r2-Tunnel0/0/0]nhrp entry 192.168.5.1 15.0.0.1 register

[r3-Tunnel0/0/0]nhrp network-id 100

[r3-Tunnel0/0/0]nhrp entry 192.168.5.1 15.0.0.1 register

[r4-Tunnel0/0/0]nhrp network-id 100

[r4-Tunnel0/0/0]nhrp entry 192.168.5.1 15.0.0.1 register

5.配置RIP

r1:

[r1]rip 1

[r1-rip-1]undo summary

[r1-rip-1]version 2

[r1-rip-1]network 192.168.1.0

[r1-rip-1]network 192.168.5.0

r2:

[r2]rip 1

[r2-rip-1]undo summary

[r2-rip-1]version 2

[r2-rip-1]network 192.168.2.0

[r2-rip-1]network 192.168.5.0

r3:

[r3]rip 1

[r3-rip-1]undo summary

[r3-rip-1]version 2

[r3-rip-1]network 192.168.3.0

[r3-rip-1]network 192.168.5.0

r4:

[r4]rip 1

[r4-rip-1]undo summary

[r4-rip-1]version 2

[r4-rip-1]network 192.168.4.0

[r4-rip-1]network 192.168.5.0

6，开启伪广播

[r1-Tunnel0/0/0]nhrp entry multicast dynamic

7，关闭RIP水平分割机制

[r1-Tunnel0/0/0]undo rip split-horizon

[r2-Tunnel0/0/0]undo rip split-horizon

[r3-Tunnel0/0/0]undo rip split-horizon

[r4-Tunnel0/0/0]undo rip split-horizon