一.实验要求
二.实验过程
1.给路由器各接口配置IP
[R1]int g 0/0/0
[R1-GigabitEthernet0/0/0]ip address 192.168.1.1 24
[R1-GigabitEthernet0/0/0]int s 4/0/0
[R1-Serial4/0/0]ip address 15.0.0.1 8
[R2]int g 0/0/0
[R2-GigabitEthernet0/0/0]ip address 192.168.2.1 24
[R2-GigabitEthernet0/0/0]int s 4/0/0
[R2-Serial4/0/0]ip address 25.0.0.1 8
[R3]int g 0/0/0
[R3-GigabitEthernet0/0/0]ip address 192.168.3.1 24
[R3]interface s 4/0/0
[R3-Serial4/0/0]ip address 35.0.0.1 8
[R4]int g 0/0/0
[R4-GigabitEthernet0/0/0]ip address 192.168.4.1 24
[R4-GigabitEthernet0/0/0]int g 0/0/1
[R4-GigabitEthernet0/0/1]ip address 45.0.0.1 8
[ISP]int s 3/0/0
[ISP-Serial3/0/0]ip address 15.0.0.2 8
[ISP-Serial3/0/0]int s 3/0/1
[ISP-Serial4/0/0]ip address 25.0.0.2 8
[ISP-Serial4/0/0]int s 4/0/0
[ISP-Serial4/0/1]ip address 35.0.0.2 8
[ISP-Serial4/0/1]int g 0/0/0
[ISP-Serial4/0/1]ip address 45.0.0.2 8
[ISP]interface LoopBack 0
[ISP-LoopBack0]ip address 5.5.5.1 24
2.配置缺省路由
[R1]ip route-static 0.0.0.0 0 15.0.0.2
[R2]ip route-static 0.0.0.0 0 25.0.0.2
[R3]ip route-static 0.0.0.0 0 35.0.0.2
[R4]ip route-static 0.0.0.0 0 45.0.0.2
3.R1和R5之间使用PAP认证,R5为主认证方
(1)在R5上:
(2)在R1上 :
(3)检验R1与R5之间的PAP认证是否建立成功 :
4.R2和R5之间使用CHAP认证,R5为主认证方
(1)在R5上:
(2)在R1上 :
(3)检验R2与R5之间的CHAP认证是否建立成功 :
5.R3与R5之间使用HDLC封装
(1)在R3上:
(2)在R5上:
(3)检验R3与R5之间的HDLC是否封装成功:
双up状态,说明R3与R5之间的HDLC封装成功
6. R1/R2/R3构建一个MGRE环境,R1为中心站点
(1)在R1上:
(2)在R2上:
[r2]interface Tunnel 0/0/0
[r2-Tunnel0/0/0]ip address 192.168.5.2 24
[r2-Tunnel0/0/0]tunnel-protocol gre p2mp
[r2-Tunnel0/0/0]source s 4/0/0
[r2-Tunnel0/0/0]nhrp network-id 6
[r2-Tunnel0/0/0]nhrp entry 192.168.5.1 15.0.0.1 register
(3)在R3上:
7.R1和R4之间为点到点的GRE
(1)在R1上:
(2)在R4上:
8.整个私有网络基于RIP全网可达
(1)在R1上:
(2)在R2上:
[r2]rip
[r2-rip-1]version 2
[r2-rip-1]network 192.168.5.0
[r2-rip-1]network 192.168.2.0
(3)在R3上:
(4)在R4上:
9.在R1,R2,R3上做NAT
(1)在R1上:
(2)在R2上:
[R2]acl 2000
[R2-acl-basic-2000]rule permit source 192.168.2.0 0.0.0.255
[R2]int s 4/0/0
[R2-Serial4/0/0]nat out
[R2-Serial4/0/0]nat outbound 2000
(3)在R3上:
(4)在R4上:
10.检验实验是否成功:
完成所有实验需求