HCIP 2

HCIP记录第二天
PPP认证以及MGRE实验
实验要求：
实验拓扑图
具体配置：
R1
sys
int co0
id 2000
int g 0/0/0
ip add 192.168.1.1 24
undo shu
int lo0
ip add 1.1.1.1 24
q
aaa
local-user kuangami password cipher kuangami123
local-user kuangami service-type ppp
int g 0/0/0
link-protocol ppp
ppp authentication-moode pap
ip address 101.1.1.1 30
q
int t 0/0/0
ip add 11.1.1.1 24
tunnel-pro gre p2mp
source 192.168.1.1
nhrp entry multicast dynamic
nhrp network-id 100
q
rip
ver 2
net 1.0.0.0
q
undo rip split-horizon

R2
sys
int co0
id 2000
int g 0/0/0
ip add 192.168.1.2 24
undo shu
int lo0
ip add 2.2.2.2 24
q
aaa
local-user kuangami password cipher kuangami123
local-user kuangami service-type ppp
int g 0/0/0
link-protocol ppp
ppp authentication-mode chap
q
int t 0/0/0
ip add 11.1.1.2 24
tunnel-protocol gre p2mp
source g0/0/0
nhrp network-id 100
nhrp entry 11.1.1.1 192.168.1.1 register
int t0/0/1
ip add 14.1.1.1 24
tunnel-protocol gre
source 192.168.1.1
destination 192.168.1.4
q
rip
ver 2
net 2.0.0.0
q
undo rip split-horizon

R3
sys
int co0
id 2000
int g 0/0/2
ip add 192.168.1.3 24
undo shu
int lo0
ip add 3.3.3.3 24
q
int t 0/0/0
ip add 11.1.1.3 24
tunnel-protocol gre p2mp
source g0/0/2
nhrp network-id 100
nhrp entry 11.1.1.1 192.168.1.1 register
q
rip
ver 2
net 3.0.0.0
q
undo rip split-horizon

R4
sys
int co0
id 2000
int g 0/0/1
ip add 192.168.1.4 24
undo shu
int lo0
ip add 4.4.4.4 24
q
int t0/0/1
ip add 14.1.1.4 24
tunnel-protocol gre
source 192.168.1.4
destination 192.168.1.1
q
rip
ver 2
net 4.0.0.0
q
undo rip split-horizon

R5
sys
int co0
id 2000
int g 0/0/0
ip add 192.168.1.5 24
undo shu
int g 4/0/0
ip add 192.168.1.6 24
undo shu
int g 0/0/2
ip add 192.168.1.7 24
undo shu
int g 0/0/1
ip add 192.168.1.8 24
undo shu
int lo0
ip add 5.5.5.5 24
q
int g 0/0/0
link-protocol ppp
ppp pap local-user kuangami password cipher kuangami123
ip address 101.1.1.2 30
q
int g 4/0/0
link-protocol ppp
ppp chap user kuangami
ppp chap password cipher kuangami123
q

另因需要使用私网地址访问公网IP因此需要在R1,R2,R3,R4上配置NAT
NAT配置如下：
nat static global ... inside 192.168.1.*
int g //*
natatatic enable