HCIP第二次作业

第一题图中已配好

 

第二题 

1.r1与r5使用ppp的pap认证，r5为主认证方

r5

[r5]aaa
[r5-aaa]local-user huazhu password cipher 123456
[r5-aaa]local-user huazhu service-type ppp

[r5]interface Serial 3/0/0
[r5]ppp authentication-mode pap
[r5]shutdown
[r5]undo shutdown

r1

[r1]interface Serial 4/0/0
[r1-Serial4/0/0]ppp pap local-user aaa password cipher 123456
[r1-Serial4/0/0]shutdown
[r1-Serial4/0/0]undo shutdown

2.r2与r5使用ppp的chip认证，r5为主认证方

r5

[r5]interface Serial 3/0/1
[r5]ppp authentication-mode chap
[r5]shutdown
[r5]undo shutdown

r2

[r2]interface Serial 4/0/0
[r2-Serial4/0/0]ppp chap user aaa 
[r2-Serial4/0/0]ppp chap assword cipher 123456
[r2-Serial4/0/0]shutdown
[r2-Serial4/0/0]undo shutdown

3.r3和r5用hdlc封装

r5

[r5]interface Serial 4/0/0
[r5]link-protocol hdlc

r3

[r3]interface Serial 4/0/0
[r3]link-protocol hdlc

 

 

第三题

1.r1，r2，r3构建mgre。

先给所有分支路由器配置到达运营商的缺省路由

r1为例

[r1]ip route-static 0.0.0.0 0 15.0.0.2

接下来配置vpn网络

r1

[r1]interface Tunnel 0/0/0
[r1-Tunnel0/0/0]ip address 192.168.5.1 24
[r1-Tunnel0/0/0]tunnel-protocol gre p2mp
[r1-Tunnel0/0/0]source 15.0.0.1
[r1-Tunnel0/0/0]nhrp network-id 1

r2

[r2]interface Tunnel 0/0/0
[r2-Tunnel0/0/0]ip address 192.168.5.2 24
[r2-Tunnel0/0/0]tunnel-protocol gre p2mp
[r2-Tunnel0/0/0]source Serial 4/0/0
[r2-Tunnel0/0/0]nhrp network-id 1
[r1-Tunnel0/0/0]nhrp entry 192.168.5.1 15.0.0.1

r3和r2相同

2.r1和r4建立点到点的gre

隧道接口使用6.0网段

r1

[r1]interface Tunnel 0/0/1
[r1-Tunnel0/0/1]ip address 192.168.6.1 24
[r1-Tunnel0/0/1]tunnel-protocol gre 
[r1-Tunnel0/0/1]source 15.0.0.1
[r1-Tunnel0/0/1]description 45.0.0.1

r4

[r4]interface Tunnel 0/0/0
[r4-Tunnel0/0/0]ip address 192.168.6.4 24
[r4-Tunnel0/0/0]tunnel-protocol gre 
[r4-Tunnel0/0/0]source 45.0.0.1
[r4-Tunnel0/0/0]description 15.0.0.1

 

第四题

基于rip全网可达

考虑安全问题不能宣告公网网段

r1为例进行宣告

[r1]rip
[r1-rip-1]version 2
[r1-rip-1]network 192.168.1.0
[r1-rip-1]network 192.168.5.0
[r1-rip-1]network 192.168.6.0

因为构建的是点到点的通路所以r2和r3无法获取r1发送的路由信息

所以要给r1开启伪广播模式,并且关闭水平分割

[r1-Tunnel0/0/0]nhrp entry multicast
[r1-Tunnel0/0/0]undo rip split-horizon

 

 

 

第五题

在r5上配置环回接口

[r5]interface LoopBack 0
[r5-LoopBack0]ip address 10.10.10.10 24

给每个pc手工配置地址r1为例

配置easy ip

r1为例，r2.r3.r4相同

[r1]acl 2000
[r1-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[r1]interface Serial 4/0/0
[r1-Serial4/0/0]nat outbound 2000