【无标题】

实验要求：

实验步骤：

1.基础配置

1.1 IP的配置：

R1:

R2:

 R3:

 R4:

ISP:

1.2 配置路由：

[R1]ip route-static 0.0.0.0 0 15.0.0.2

[R2]ip route-static 0.0.0.0 0 25.0.0.2 

[R3]ip route-static 0.0.0.0 0 35.0.0.2

[R4]ip route-static 0.0.0.0 0 45.0.0.2

1.3 PPP的设置

根据题目分析，R1与R5之间需要使用PPP协议中的PAP，R2与R5之间则需要使用PPP协议中的chap，R3和R5使用HDLC，ISP上需要部署aaa认证使用PPP：

[ISP]aaa

[ISP-aaa]local-user DZ password cipher 123456

[ISP-aaa]local-user DZ service-type ppp

[ISP-aaa]q

[ISP]interface s3/0/0

[ISP-Serial3/0/0]ppp authentication-mode pap 

R1上启用PPP:

 [R1]interface s4/0/0

[R1-Serial4/0/0]ppp pap local-user DZ password cipher 123456

在ISP上部署chap：

 [ISP-Serial3/0/1]ppp authentication-mode chap

在R2上开启PPP:

 [R2-Serial4/0/0]ppp chap user DZ

[R2-Serial4/0/0]PPP chap password cipher 123456

在R3上使用HDLC协议，同时在ISP上也进行协议更改保证互通：

[R3-Serial4/0/0]link-protocol hdlc  

[ISP-Serial4/0/0]link-protocol hdlc

2. 搭建MGRE环境

R1:

[R1]int t0/0/0

[R1-Tunnel0/0/0]ip address 192.168.5.1 24

[R1-Tunnel0/0/0]tunnel-protocol gre p2mp 

[R1-Tunnel0/0/0]source 15.0.0.1

[R1-Tunnel0/0/0]nhrp entry multicast dynamic      【开启伪广播，用于稍后的RIP】

R2: 

[R2]INT t0/0/0

[R2-Tunnel0/0/0]ip address 192.168.5.2 24

[R2-Tunnel0/0/0]tunnel-protocol  gre p2mp 

[R2-Tunnel0/0/0]source s4/0/0

[R2-Tunnel0/0/0]nhrp entry 192.168.5.1 15.0.0.1 register 

R3: 

[R3-Tunnel0/0/0]ip address 192.168.5.3 24

[R3-Tunnel0/0/0]tunnel-protocol gre p2mp 

[R3-Tunnel0/0/0]source s4/0/0

[R3-Tunnel0/0/0]nhrp entry 192.168.5.1 15.0.0.0 register 

R1与R4之间点到点GRE ：

[R1-Tunnel0/0/1]ip address 192.168.6.1 24

[R1-Tunnel0/0/1]tunnel-protocol gre 

[R1-Tunnel0/0/1]source 15.0.0.1

[R1-Tunnel0/0/1]destination 45.0.0.1

[R4-Tunnel0/0/0]ip address 192.168.6.2 24

[R4-Tunnel0/0/0]tunnel-protocol gre 

[R4-Tunnel0/0/0]source 45.0.0.1

[R4-Tunnel0/0/0]destination 15.0.0.1

3.RIP的配置： 

R1:

[R1]rip

[R1-rip-1]v 2

[R1-rip-1]network 192.168.1.0

[R1-rip-1]network 192.168.5.0

[R1-rip-1]network 192.168.6.0

R2:

 [R2]rip

[R2-rip-1]v 2

[R2-rip-1]network 192.168.2.0

[R2-rip-1]network 192.168.5.0

R3: 

[R3]rip

[R3-rip-1]v 2

[R3-rip-1]network 192.168.3.0

[R3-rip-1]network 192.168.5.0

R4:

 [R4]RIP

[R4-rip-1]V 2

[R4-rip-1]network 192.168.4.0

[R4-rip-1]network 192.168.6.0

由于RIP的水平分割问题，导致R2和R3的路由条目不全，关闭水平分割即非shortcu，来解决问题。建议通过汇总来使用shortcut 

[R1]int t0/0/0

[R1-Tunnel0/0/0]rip summary-address 192.168.0.0 255.255.248.0

最后将PC设置私有IP为源IP，可以访问R5环回 

 

4. 配置NAT

[R1]acl 2000

[R1-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255

[R1-Serial4/0/0]nat outbound 2000

[R2]acl 2000

[R2-acl-basic-2000]rule permit source 192.168.2.0 0.0.0.255

[R2]int s4/0/0

[R2-Serial4/0/0]nat outbound 2000

[R3]acl 2000

[R3-acl-basic-2000]rule permit source 192.168.3.0 0.0.0.255

[R3-Serial4/0/0]nat outbound 2000

 [R4]acl 2000

[R4-acl-basic-2000]rule permit source 192.168.4.0 0.0.0.255

[R4]int g0/0/0

[R4-GigabitEthernet0/0/0]nat outbound 2000