HCIP--MGRE实验

实验要求

自我编辑拓扑图

 

一、配置各个接口IP地址以及环回地址

---

[r1-Serial4/0/0]ip address 12.1.1.1 24
[r1-LoopBack0]ip address 1.1.1.1 24
 
[r2-Serial4/0/1]ip address 12.1.1.2 24
[r2-Serial4/0/0]ip address 23.1.1.1 24
[r2-LoopBack0]ip address 2.2.2.2 24
 
[r3-Serial4/0/1]ip address 23.1.1.2 24
[r3-GigabitEthernet0/0/0]ip address 34.1.1.1 24
[r3-LoopBack0]ip address 3.3.3.3 24
 
[r4-GigabitEthernet0/0/0]ip address 34.1.1.2 24    
[r4-GigabitEthernet0/0/1]ip address 45.1.1.1 24
[r4-GigabitEthernet0/0/2]ip address 46.1.1.1 24
 
[r5-GigabitEthernet0/0/0]ip address 45.1.1.2 24
[r5-LoopBack0]ip address 5.5.5.5 24
 
[r6-GigabitEthernet0/0/0]ip address 46.1.1.2 24
[r6-LoopBack0]ip address 6.6.6.6 24
 

 二、R1-R2之间ppp的pap单向认证。

[r1]aaa    
[r1-aaa]local-user hcia password cipher 123456    
[r1-aaa]local-user hcia service-type ppp
[r1-aaa]int s4/0/0    
[r1-Serial4/0/0]ppp authentication-mode pap

[r2-Serial4/0/0]link-protocol ppp
[r2-Serial4/0/0]ppp pap local-user hcia password cipher 123456

三、R2-R3之间做ppp的chap双向认证。

 [r2]aaa
[r2-aaa]local-user hcip password cipher 234567    
[r2-aaa]local-user hcip service-type ppp
[r2-Serial4/0/0]link-protocol ppp    
[r2-Serial4/0/0]ppp authentication-mode chap
 
[r3-Serial4/0/1]link-protocol ppp
[r3-Serial4/0/1]ppp chap user hcip
[r3-Serial4/0/1]ppp chap password cipher 234567
 
[r3]aaa
[r3-aaa]local-user hcie password cipher 345678    
[r3-aaa]local-user hcie service-type ppp
[r3-Serial4/0/1]link-protocol ppp    
[r3-Serial4/0/1]ppp authentication-mode chap
 
[r2-Serial4/0/0]link-protocol ppp
[r2-Serial4/0/0]ppp chap user hcie
[r2-Serial4/0/0]ppp chap password cipher 345678

四、建立MGRE通道，让R3成为HUB端。R5、R6为spoke端口，R5-R6向R3注册

[r3]interface t0/0/0
[r3-Tunnel0/0/0]ip address 10.1.1.1 24
[r3-Tunnel0/0/0]tunnel-protocol gre p2mp
[r3-Tunnel0/0/0]source 34.1.1.1
[r3-Tunnel0/0/0]nhrp network-id 100
[r3-Tunnel0/0/0]nhrp entry multicast dynamic
 
[r5]interface t0/0/0
[r5-Tunnel0/0/0]ip address 10.1.1.2 24
[r5-Tunnel0/0/0]tunnel-protocol gre p2mp
[r5-Tunnel0/0/0]source 45.1.1.2
[r5-Tunnel0/0/0]nhrp network-id 100
[r5-Tunnel0/0/0]nhrp entry 10.1.1.1 34.1.1.1 register
 
[r6]interface t0/0/0
[r6-Tunnel0/0/0]ip address 10.1.1.3 24
[r6-Tunnel0/0/0]tunnel-protocol gre p2mp
[r6-Tunnel0/0/0]source 46.1.1.2
[r6-Tunnel0/0/0]nhrp network-id 100
[r6-Tunnel0/0/0]nhrp entry 10.1.1.1 34.1.1.1 register

五、R3-R5-R6各写一条缺省让公网地址可以通信。

[r3]ip route-static 0.0.0.0 0 34.1.1.2
[r5]ip route-static 0.0.0.0 0 45.1.1.1
[r6]ip route-static 0.0.0.0 0 46.1.1.1

六、之后启用ospf协议，宣告。注意：R3-R5-R6宣告的是通道接口，而且要修改优先级让R5-R6不参与选举，顺带修改R3-R5-R6的通道接口类型为MBA

[r1]ospf 1 router-id 1.1.1.1
[r1-ospf-1]area 0
[r1-ospf-1-area-0.0.0.0]network 1.1.1.1 0.0.0.0
[r1-ospf-1-area-0.0.0.0]network 12.1.1.1 0.0.0.0
 
[r2]ospf 1 router-id 2.2.2.2
[r2-ospf-1]area 0
[r2-ospf-1-area-0.0.0.0]network 2.2.2.2 0.0.0.0
[r2-ospf-1-area-0.0.0.0]network 12.1.1.2 0.0.0.0
[r2-ospf-1-area-0.0.0.0]network 23.1.1.1 0.0.0.0
 
[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1]area 0
[r3-ospf-1-area-0.0.0.0]network 3.3.3.3 0.0.0.0
[r3-ospf-1-area-0.0.0.0]network 23.1.1.2 0.0.0.0
[r3-ospf-1-area-0.0.0.0]network 10.1.1.1 0.0.0.0
[r3-Tunnel0/0/0]ospf network-type broadcast
 
[r5]ospf 1 router-id 5.5.5.5
[r5-ospf-1]area 0
[r5-ospf-1-area-0.0.0.0]network 5.5.5.5 0.0.0.0
[r5-ospf-1-area-0.0.0.0]network 10.1.1.2 0.0.0.0
[r5-Tunnel0/0/0]ospf dr-priority 0
[r5-Tunnel0/0/0]ospf network-type broadcast
 
[r6]ospf 1 router-id 6.6.6.6
[r6-ospf-1]area 0
[r6-ospf-1-area-0.0.0.0]network 6.6.6.6 0.0.0.0
[r6-ospf-1-area-0.0.0.0]network 10.1.1.3 0.0.0.0
[r6-Tunnel0/0/0]ospf dr-priority 0
[r6-Tunnel0/0/0]ospf network-type broadcast

 查看R3路由表

 

 查看R3通道

查看R5和R6通道

 

 

R6到R5是从R3经过的 

 

 进行全网可达测试

 自此实验结束