提交网络类型的实验报告

提交网络类型的实验报告

私有网段AR1-4对应内网的不冲突设计

R1与R5间使用PPP的PAP认证，R5为主认证方：
[AR1]int serial 4/0/0
ip add 15.1.1.1 24

[AR5]aaa
local-user lxl passwd cipher 123456
local-user lxl service-type ppp
[AR5]int serial 3/0/0
ppp authentication-mode pap
ip add 15.1.1.2 24
shutdown
undo shutdown

[AR1]ppp pap passwd cipher 123456

R1与R5间使用PPP的CHAP认证，R5为主认证方：
[AR2]int serial 4/0/0
ip add 25.1.1.1 24

[AR5]aaa
local-user lxl passwd cipher 123456
local-user lxl service-type ppp
[AR5]int serial 3/0/1
ppp authentication-mode chap
ip add 25.1.1.2 24
shutdown
undo shutdown

[AR2]ppp chap passwd cipher 123456

R3与R5间使用HDLC认证：
[AR2]int serial 4/0/0
ip add 35.1.1.1 24
link-protocol hdlc

[AR5]aaa
local-user lxl passwd cipher 123456
local-user lxl service-type ppp
[AR5]int serial 4/0/0
link-protocol hdlc
ppp authentication-mode chap
ip add 35.1.1.2 24

[ar1]ip route-static 0.0.0.0 0 15.1.1.2
[ar2]ip route-static 0.0.0.0 0 25.1.1.2
[ar3]ip route-static 0.0.0.0 0 35.1.1.2
[ar4]ip route-static 0.0.0.0 0 45.1.1.2

AR1/4点到点GRE：
[AR1]int tunnel 0/0/0
ip add 10.1.1.1 24
tunnel-protocol gre
source 15.1.1.1
destination 45.1.1.1

[AR4]int tunnel 0/0/0
ip add 10.1.1.2 24
tunnel-protocol gre
source 45.1.1.1
destination 15.1.1.1

AR1/2/3构建一个MGRE，AR1为中心站点：
[AR1]int tunnel 0/0/1
ip add 10.1.2.1 24
tunnel-protocol gre p2mp
source 15.1.1.1
nhrp entry multicast dynamic
nhrp network-id 100

[AR2]int tunnel 0/0/0
ip add 10.1.2.2 24
tunnel-protocol gre p2mp
source serial 4/0/0
nhrp entry 10.1.2.1 15.1.1.1 register
nhrp network-id 100

[AR3]int tunnel 0/0/0
ip add 10.1.2.3 24
tunnel-protocol gre p2mp
source serial 4/0/0
nhrp entry 10.1.2.1 15.1.1.1 register
nhrp network-id 100

整个私网基于RIP全网可达：
rip 1
ver 2
un summary
network 192.168.1.0
network 10.0.0.0
只能通过关闭水平分割来实现路由的全网正常收敛；
[r1-Tunnel0/0/0]undo rip split-horizon

所有的PC都基于环回私有地址为源ip时，可以正常访问AR5环回：
[AR1]acl 2000
ruler permit source 192.168.1.0 0.0.0.255
int s4/0/0
nat outbound 2000