HCIP第二次

 

 

首先根据题目配置ip地址，然后实现PC可通公网，路由器之间可以相互通讯，最后根据再按要求配置相关内容。

 

 

首先给R1,R3,R4配置静态路由，使得路由器之间可通讯，pc可达公网。

R1:

 

R3:

 

R4:

 

实验步骤
1、R2为ISP,其上只能配置IP地址（且有一个环回地址代表互联网）

 

 2、R1与R2之间为HDLC封装

R1：

[r1]interface s4/0/0
[r1-Serial4/0/0]link-protocol hdlc

R2:

[r2-LoopBack0]int s4/0/0
[r2-Serial4/0/0]link-protocol hdlc 

3、R2与R3为PPP封装，pap认证，R2为主认证方

R2:

[r2-Serial4/0/1]aaa
[r2-aaa]local-user xzl privilege level 15 password cipher 123456
Info: Add a new user.
[r2-aaa]local-user xzl service-type ppp
[r2-aaa]int s4/0/1
[r2-Serial4/0/1]ppp authentication-mode pap

R3:

[r3]int s4/0/0
[r3-Serial4/0/0]ppp pap local-user xzl password cipher 123456

4、R2与R4为PPP封装，chap认证，R2为主认证方

R2：

[r2]aaa
[r2-aaa]local-user qq privilege level 15 password cipher 123456

[r2-aaa]local-user qq service-type ppp

[r2]int s3/0/0
[r2-Serial3/0/0]ppp au
[r2-Serial3/0/0]ppp authentication-mode chap

R4:

[r4]int s4/0/0
[r4-Serial4/0/0]ppp chap password cipher 123456
[r4-Serial4/0/0]ppp chap user qq

5、R1、R3、R4构建MGRE环境，仅R1 IP固定

R1:(中心站点)

[r1]int t0/0/0
[r1-Tunnel0/0/0]ip address 10.1.1.1 24
[r1-Tunnel0/0/0]tunnel-protocol gre p2mp
[r1-Tunnel0/0/0]source 12.1.1.1
[r1-Tunnel0/0/0]nhrp entry multicast dynamic 
[r1-Tunnel0/0/0]nhrp network-id 100
[r1-Tunnel0/0/0]undo rip split-horizon

R3:（分支占点）

[r3]int t0/0/0
[r3-Tunnel0/0/0]ip address 10.1.1.2 24
[r3-Tunnel0/0/0]tunnel-protocol gre p2mp
[r3-Tunnel0/0/0]source s4/0/0
[r3-Tunnel0/0/0]nhrp network-id 100
[r3-Tunnel0/0/0]nhrp entry 10.1.1.1 12.1.1.1 register

R4:(分支站点)

[r4]int t0/0/0
[r4-Tunnel0/0/0]ip address 10.1.1.3 24
[r4-Tunnel0/0/0]tunnel-protocol gre p2mp
[r4-Tunnel0/0/0]source s4/0/0
[r4-Tunnel0/0/0]nhrp network-id 100
[r4-Tunnel0/0/0]nhrp entry 10.1.1.1 12.1.1.1

6、内网使用RIP获取路由，所有PC可以互相访问，并且可访问R2的环回地址

R1:

[r1]ripi        
[r1-rip-1]version 2
[r1-rip-1]network 192.168.1.0
[r1-rip-1]network 10.0.0.0

关闭水平分割：

[r1-Tunnel0/0/0]undo rip split-horizon

R3:

[r3]rip
[r3-rip-1]version 2
[r3-rip-1]network 192.168.2.0
[r3-rip-1]network 10.0.0.0

R4:

[r4]rip
[r4-rip-1]version 2
[r4-rip-1]network 192.168.3.0
[r4-rip-1]network 10.0.0.0

实验结果
PC1pingPC2，PC1ping公网地址

 

实验成功