实验要求:
网络拓扑设计图:
根据实验要求我们从AR2路由器入手:将AR2的三个接口进行配置ip地址
在配置的过程中要注意三点要求:
R1和R2之间为HDLC封装
R2和R3之间为ppp封装,pap认证,R2为主认证方
R2和R4之间为ppp封装,cpap认证,R2为主认证方
PAP -- 明文认证
主认证方:服务器
[r2-aaa]local-user a password cipher 123456
[r2-aaa]local-user a service-type ppp
[r2]int s3/0/1
[r2-Serial3/0/1]ppp authentication-mode pap
被认证方:客户端
[r3]int s4/0/0
[r3-Serial4/0/0]ppp pap local-user a password cipher 123456
CHAP -- 挑战质询握手协议
主认证方
主认证方:服务器
[r2-aaa]local-user b
[r2-aaa]local-user b password cipher 654321
[r2-aaa]local-user qq service-type ppp
[r2]int s4/0/0
[r2-Serial4/0/0]pppauthentication-mode chap
被认证方:客户端
[r4]interfaceSerial 4/0/0
[r4-Serial4/0/0]ppp chap user b
[r4-Serial4/0/0]ppp chap password cipher 654321
AR2配置完成图:
我们将R3和R4配置好之后,首先要把R2到R3和R4的接口断开,再进行重新连接,使得Protocol处为down,这时R3和R4才能去进行认证并使得Protocol为up。
前四步完成之后,我们将R1-R4的缺省路由写好,都是到R2
实施第五步构建MGRE环境
AR1:
[r1]interface Tunnel 0/0/0
[r1-Tunnel0/0/0]ip address 192.168.4.1 24
[r1-Tunnel0/0/0]tunnel-protocol gre p2mp
[r1-Tunnel0/0/0]source 12.1.1.1
Jan 5 2023 17:59:45-08:00 r1 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
on the interface Tunnel0/0/0 has entered the UP state.
[r1-Tunnel0/0/0]nhrp entry multicast dynamic
[r1-Tunnel0/0/0]nhrp network-id 100
[r1-Tunnel0/0/0]q
AR3:
[r3]interface Tunnel 0/0/0
[r3-Tunnel0/0/0]ip address 192.168.4.3 24
[r3-Tunnel0/0/0]tunnel-protocol gre p2mp
[r3-Tunnel0/0/0]source Serial 4/0/0
Jan 5 2023 18:00:47-08:00 r3 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
on the interface Tunnel0/0/0 has entered the UP state.
[r3-Tunnel0/0/0]nhrp entry 192.168.4.1 12.1.1.1 register
[r3-Tunnel0/0/0]nhrp network-id 100
[r3-Tunnel0/0/0]q
AR4:
[r4]interface Tunnel 0/0/0
[r4-Tunnel0/0/0]ip address 192.168.4.3 24
[r4-Tunnel0/0/0]tunnel-protocol gre p2mp
[r4-Tunnel0/0/0]source Serial 4/0/0
Jan 5 2023 18:02:12-08:00 r4 %%01IFNET/4/LINK_STATE(l)[17]:The line protocol IP
on the interface Tunnel0/0/0 has entered the UP state.
[r4-Tunnel0/0/0]
[r4-Tunnel0/0/0]ip address 192.168.4.4 24
[r4-Tunnel0/0/0]source Serial 4/0/0
[r4-Tunnel0/0/0]nhrp
[r4-Tunnel0/0/0]nhrp entry 192.168.4.1 12.1.1.1 register
[r4-Tunnel0/0/0]nhrp network-id 100
[r4-Tunnel0/0/0]q
6.内网使用RIP获取路由
AR1:
AR3:
AR4:
最后一步:
取消均分
实验结果展示:(三台pc互相ping)