HCIP——实验

目录

设计需求

设计实现

IP规划

实验步骤

ENSP设置 

R1

R2

R3

R4

---

 

设计需求

1. R2为ISP,其上只能配置IP地址。
2. R1-R2之间为HDLC封装。
3. R2-R3之间为PPP封装，pap认证，R2为主认证方。
4. R2-R4之间为PPP封装，chap认证，R2为主认证方。
5. R1、 R2、R3构建MGRE环境，仅R1IP地址固定。
6. 内网使用RIP获取路由，所有PC可以互相访问，并且可访问R2的环回。
7. 实验图如下：

设计实现

IP规划

R1-GigabitEthernet0/0/0	192.168.1.1 24
R1-Serial4/0/0	12.1.1.1 24
R2-Serial3/0/0	12.1.1.2 24
R2-Serial4/0/0	23.1.1.1 24
R2-Serial4/0/1	24.1.1.1 24
R3-GigabitEthernet0/0/0	192.168.2.1 24
R3-Serial4/0/0	23.1.1.2 24
R4-Serial4/0/0	24.1.1.2 24
R4-GigabitEthernet0/0/1	ip add 192.168.3.1 24
R1-Tunnel0/0/0	10.1.1.1 24
R3-Tunnel0/0/0	10.1.1.2 24
R4-Tunnel0/0/0	10.1.1.3 24

 

实验步骤

1. 配置IP
2. 配置R1、R3、R4的缺省
3. 在R1、R3、R4上创建ACL
4. 做pap认证
5. 做chap认证
6. 做HDLC
7. 创建MGRE环境
8. 配置RIP

ENSP设置 

R1

[R1]int g 0/0/0

[R1-GigabitEthernet0/0/0]ip add 192.168.1.1 24

[R1-GigabitEthernet0/0/0]int s 4/0/0

[R1-Serial4/0/0]ip add 12.1.1.1 24

[R1]ip route-static 0.0.0.0 0 12.1.1.2

[R1]acl 2000 

[R1-acl-basic-2000]rule 1 permit source any

[R1-acl-basic-2000]int s 4/0/0

[R1-Serial4/0/0]nat outbound 2000

[R1-Serial4/0/0]link-protocol hdlc
Warning: The encapsulation protocol of the link will be changed. Continue? [Y/N]
:y

[R1-Serial4/0/0]q

[R1]int t 0/0/0

[R1-Tunnel0/0/0]ip add 10.1.1.1 24

[R1-Tunnel0/0/0]tunnel-protocol gre p2mp

[R1-Tunnel0/0/0]source 12.1.1.1

[R1-Tunnel0/0/0]nhrp network-id 100

[R1-Tunnel0/0/0]nhrp  entry multicast dynamic——开启伪广播

[R1-Tunnel0/0/0]undo rip split-horizon——关闭水平分割

[R1-Tunnel0/0/0]q

[R1-rip-1]version 2

[R1-rip-1]network 192.168.1.0

[R1-rip-1]network 10.0.0.0

R2

[R2]int s 3/0/0

[R2-Serial3/0/0]ip add 12.1.1.2 24

[R2-Serial3/0/0]int s 4/0/0

[R2-Serial4/0/0]ip add 23.1.1.1 24

[R2-Serial4/0/0]int s 4/0/1

[R2-Serial4/0/1]ip add 24.1.1.1 24

[R2]aaa

[R2-aaa]local-user huawei password cipher huawei

[R2-aaa]local-user huawei service-type ppp

[R2]int s 4/0/0

[R2-Serial4/0/0]ppp authentication-mode pap

[R2]aaa

[R2-aaa]local-user huawei password cipher 123456

[R2-aaa]local-user huawei service-type ppp

[R2-aaa]int s 4/0/1

[R2-Serial4/0/1]ppp authentication-mode chap

[R2-Serial4/0/0]int s 3/0/0

[R2-Serial3/0/0]link-protocol hdlc 
Warning: The encapsulation protocol of the link will be changed. Continue? [Y/N]
:y

R3

[R3]int g 0/0/0

[R3-GigabitEthernet0/0/0]ip add 192.168.2.1 24

[R3-GigabitEthernet0/0/0]int s 4/0/0

[R3-Serial4/0/0]ip add 23.1.1.2 24

[R3]ip route-static 0.0.0.0 0 23.1.1.1

[R3]acl 2000 

[R3-acl-basic-2000]rule 1 permit source any

[R3-acl-basic-2000]int s 4/0/0

[R3-Serial4/0/0]nat outbound 2000

[R3-Serial4/0/0]ppp pap local-user huawei password  cipher 123456

[R3-Serial4/0/0]int t 0/0/0

[R3-Tunnel0/0/0]ip add 10.1.1.2 24

[R3-Tunnel0/0/0]tunnel-protocol gre p2mp

[R3-Tunnel0/0/0]source s 4/0/0

[R3-Tunnel0/0/0]nhrp entry 10.1.1.1 12.1.1.1 register 

[R3-Tunnel0/0/0]nhrp network-id 100

[R3-Tunnel0/0/0]q

[R3]rip 1

[R3-rip-1]version 2

[R3-rip-1]network 192.168.2.0

[R3-rip-1]network 10.0.0.0

R4

[R4]int s 4/0/0

[R4-Serial4/0/0]ip add 24.1.1.2 24

[R4-Serial4/0/0]int g 0/0/1

[R4-GigabitEthernet0/0/1]ip add 192.168.3.1 24

[R4]ip route-static 0.0.0.0 0 24.1.1.1

[R4]acl 2000 

[R4-acl-basic-2000]rule 1 permit source any

[R4-acl-basic-2000]int s 4/0/0

[R4-Serial4/0/0]nat outbound 2000

[R4-Serial4/0/0]ppp chap password  cipher 123456

[R4-Serial4/0/0]int t 0/0/0

[R4-Tunnel0/0/0]ip add 10.1.1.3 24

[R4-Tunnel0/0/0]tunnel-protocol gre p2mp

[R4-Tunnel0/0/0]source s 4/0/0

[R4-Tunnel0/0/0]nhrp entry 10.1.1.1 12.1.1.1 register 

[R4-Tunnel0/0/0]nhrp network-id 100 

[R4-Tunnel0/0/0]q

[R4]rip 1

[R4-rip-1]version 2

[R4-rip-1]network 192.168.3.0

[R4-rip-1]network 10.0.0.0