MGRE实验报告

Rinleren

已于 2024-01-26 16:19:14 修改

阅读量762

点赞数 23

文章标签：网络

于 2024-01-26 16:17:04 首次发布

本文链接：https://blog.csdn.net/Rinleren/article/details/135868910

版权

实验要求：

预览配置图：

实验分析：

1、对R5只进行IP配置操作，使用公网

2.1、在被认证方配置用户名和密码，在认证方创建用户名和密码，同时修改服务类型，最后进入接口修改接口认证方式。

2.2、在被认证方的接口配置协议和用户名及密码，在认证方配置用户名和密码，同时修改类型为PPP，最后在接口处修改协议类型。

2.3、在接口修改链路协议类型为HDLC。

3、在R1、R2、R3间配置多点通用路由封装，在R1-R4间配置点到点通用路由封装

4、对底下的用户网段和隧道网段使用RIP进行宣告

5、对R5配置环回接口，同时对R1、R2、R3、R4的出接口配置NAT。

实验过程：

配置IP

R1：

[r1]interface GigabitEthernet 0/0/0

[r1-GigabitEthernet0/0/0]ip address 192.168.1.1 24

[r1]interface Serial 4/0/0

[r1-Serial4/0/0]ip address 15.0.0.1 24

[r1]ip route-static 0.0.0.0 0 15.0.0.2

查看配置：

[r1]display ip interface brief

Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 192.168.1.1/24 up up
GigabitEthernet0/0/1 unassigned down down
GigabitEthernet0/0/2 unassigned down down
NULL0 unassigned up up(s)
Serial4/0/0 15.0.0.1/24 up up
Serial4/0/1 unassigned down down

R2:

[r2]interface GigabitEthernet 0/0/0

[r2-GigabitEthernet0/0/0]ip address 192.168.2.1 24

[r2]interface Serial 4/0/0

[r2-Serial4/0/0]ip address 25.0.0.1 24

[r2]ip route-static 0.0.0.0 0 25.0.0.2

查看配置：

[r2]display ip interface brief

Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 192.168.2.1/24 up up
GigabitEthernet0/0/1 unassigned down down
GigabitEthernet0/0/2 unassigned down down
NULL0 unassigned up up(s)
Serial4/0/0 25.0.0.1/24 up up
Serial4/0/1 unassigned down down

R3:

[r3]interface GigabitEthernet 0/0/0

[r3-GigabitEthernet0/0/0]ip address 192.168.3.1 24

[r3]interface Serial 4/0/0

[r3-Serial4/0/0]ip address 35.0.0.1 24

[r3]ip route-static 0.0.0.0 0 35.0.0.2

查看配置：

[r3]display ip interface brief

Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 192.168.3.1/24 up up
GigabitEthernet0/0/1 unassigned down down
GigabitEthernet0/0/2 unassigned down down
NULL0 unassigned up up(s)
Serial4/0/0 35.0.0.1/24 up up
Serial4/0/1 unassigned down down

R4:

[r4]interface GigabitEthernet 0/0/0

[r4-GigabitEthernet0/0/0]ip address 45.0.0.1 24

[r4]interface GigabitEthernet 0/0/1

[r4-GigabitEthernet0/0/1]ip address 192.168.4.1 24

[r4]ip route-static 0.0.0.0 0 45.0.0.2

查看配置：

[r4]display ip interface brief

Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 45.0.0.1/24 up up
GigabitEthernet0/0/1 192.168.4.1/24 up up
GigabitEthernet0/0/2 unassigned down down
NULL0 unassigned up up(s)

R5:

[r5]interface GigabitEthernet 0/0/0

[r5-GigabitEthernet0/0/0]ip address 45.0.0.2 24

[r5]interface Serial 4/0/0

[r5-Serial4/0/0]ip address 35.0.0.2 24

[r5]interface Serial 3/0/1

[r5-Serial3/0/1]ip address 25.0.0.2 24

[r5]interface Serial 3/0/0

[r5-Serial3/0/0]ip address 15.0.0.2 24

[r5]interface LoopBack 0

[r5-LoopBack0]ip address 5.5.5.1 24

查看配置：

Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 45.0.0.2/24 up up
GigabitEthernet0/0/1 unassigned down down
GigabitEthernet0/0/2 unassigned down down
LoopBack0 5.5.5.1/24 up up(s)
NULL0 unassigned up up(s)
Serial3/0/0 15.0.0.2/24 up up
Serial3/0/1 25.0.0.2/24 up up
Serial4/0/0 35.0.0.2/24 up up
Serial4/0/1 unassigned down down

配置完成图：

在边界路由配置NAT：

R1：

[r1]acl 2000

[r1-acl-basic-2000]rule permit source 192.168.0.0 0.0.255.255

[r1]interface Serial 4/0/0

[r1-Serial4/0/0]nat outbound 2000

R2:

[r2]acl 2000

[r2-acl-basic-2000]rule permit source 192.168.0.0 0.0.255.255

[r2]interface Serial 4/0/0

[r2-Serial4/0/0]nat outbound 2000

R3：

[r3]acl 2000

[r3-acl-basic-2000]rule permit source 192.168.0.0 0.0.255.255

[r3]interface Serial 4/0/0

[r3-Serial4/0/0]nat outbound 2000

R4:

[r4]acl 2000

[r4-acl-basic-2000]rule permit source 192.168.0.0 0.0.255.255

[r4]interface GigabitEthernet 0/0/0

[r4-GigabitEthernet0/0/0]nat outbound 2000

在R1、R2、R3搭建MGER环境：

在三台路由器上分别创建隧道接口，IP地址使用192.168.5.0/24网段，以R1为服务端，R2、R3为客户端

R1：

[r1]interface Tunnel 0/0/0

[r1-Tunnel0/0/0]ip address 192.168.5.11 24

[r1-Tunnel0/0/0]tunnel-protocol gre p2mp

[r1-Tunnel0/0/0]source 15.0.0.1

RIP：

[r1]rip 1

[r1-rip-1]version 2

[r1-rip-1]network 192.168.5.0
[r1-rip-1]network 192.168.1.0

[r1-Tunnel0/0/0]nhrp entry multicast dynamic

[r1-Tunnel0/0/0]undo rip split-horizon

R2:

[r2]interface Tunnel 0/0/0

[r2-Tunnel0/0/0]ip address 192.168.5.22 24

[r2-Tunnel0/0/0]tunnel-protocol gre p2mp

[r2-Tunnel0/0/0]source Serial 4/0/0

[r2-Tunnel0/0/0]nhrp entry 192.168.5.11 15.0.0.1 register

RIP：

[r2]rip 1

[r2-rip-1]version 2

[r2-rip-1]network 192.168.5.0
[r2-rip-1]network 192.168.2.0

R3：

[r3]interface Tunnel 0/0/0

[r3-Tunnel0/0/0]ip address 192.168.5.33 24

[r3-Tunnel0/0/0]tunnel-protocol gre p2mp

[r3-Tunnel0/0/0]source Serial 4/0/0

[r3-Tunnel0/0/0]nhrp entry 192.168.5.11 15.0.0.1 register

RIP:

[r3]rip 1
[r3-rip-1]version 2
[r3-rip-1]network 192.168.5.0
[r3-rip-1]network 192.168.3.0

建立R1-R4的的点到点GRE：

R1:

[r1]interface Tunnel 0/0/1

[r1-Tunnel0/0/1]ip address 192.168.6.11 24

[r1-Tunnel0/0/1]tunnel-protocol gre

[r1-Tunnel0/0/1]source 15.0.0.1

[r1-Tunnel0/0/1]destination 45.0.0.1

RIP：

[r1]rip 1
[r1-rip-1]version 2
[r1-rip-1]network 192.168.6.0

R4:

[r4]interface Tunnel 0/0/1
[r4-Tunnel0/0/1]ip address 192.168.6.44 24
[r4-Tunnel0/0/1]tunnel-protocol gre
[r4-Tunnel0/0/1]source 45.0.0.1
[r4-Tunnel0/0/1]destination 15.0.0.1

RIP：

[r4]rip 1

[r4-rip-1]version 2

[r4-rip-1]network 192.168.4.0
[r4-rip-1]network 192.168.6.0

R1-R5使用PPP的PAP认证：（R5为主认证）

R1：

[r1]interface Serial 4/0/0

[r1-Serial4/0/0]ppp pap local-user huawei password cipher 123456

R5：

[r5]aaa

[r5-aaa]local-user huawei password cipher 123456

[r5-aaa]local-user huawei service-type ppp

[r5]interface Serial 3/0/0

[r5-Serial3/0/0]ppp authentication-mode pap

R2-R5使用PPP的chap认证：（R5为主认证方）

R2：

[r2]interface Serial 4/0/0

[r2-Serial4/0/0]ppp chap user admin

[r2-Serial4/0/0]ppp chap password cipher 654321

R5：

[r5]aaa
[r5-aaa]local-user admin password cipher 654321
[r5-aaa]local-user admin service-type ppp
[r5]interface Serial 3/0/1
[r5-Serial3/0/1]ppp authentication-mode chap