2021-01-21

HCIP 网路类型综合实验

我们先整理题目 排好顺序再来配
配ip r1—r5 PAP认证 r2—r5 chap 认证 r3—r5 HDLC封装
r1 r2 r3 MGRE r1为中心站点 r1—r4 点到点的GRE
RIP

按图中的地址配好后
配置pap
[ISP]aaa 主认证方—服务端
[ISP-aaa]local-user huawei password cipher huawei123
[ISP-aaa]local-user huawei service-type ppp
[ISP]interface Serial 3/0/0 连接客户端的接口
[ISP-Serial3/0/0]link-protocol ppp
[ISP-Serial3/0/0]ppp authentication-mode pap

[r1]interface Serial 4/0/0 被认证方
[r1-Serial4/0/0]link-protocol ppp
[r1-Serial4/0/0]ppp pap local-user huawei password cipher huawei123

配置chap
[ISP]aaa
[ISP-aaa]local-user huawei password cipher huawei123
[ISP-aaa]local-user huawei service-type ppp
[ISP]interface Serial 2/0/0
[ISP-Serial2/0/0]link-protocol ppp
[ISP-Serial2/0/0]ppp authentication-mode chap

被认证方
[r2]interface Serial 4/0/0
[r2-Serial4/0/0]link-protocol ppp
[r2-Serial4/0/0]ppp chap user huawei
[r2-Serial4/0/0]ppp chap password cipher huawei123

配置HDLC

[ISP]int Serial 2/0/1
[ISP-Serial2/0/1]link-protocol hdlc
Warning: The encapsulation protocol of the link will be changed. Continue? [Y/N]
:y

[r3]int s4/0/0
[r3-Serial4/0/0]link-protocol hdlc
Warning: The encapsulation protocol of the link will be changed. Continue? [Y/N]
:y

配置 MGRE
主站点
interface Tunnel0/0/0 创建tunnel口
ip address 192.168.6.1 24 配置接口ip地址
tunnel-protocol gre p2mp 先修改接口模式为多点GRE
source 1.1.1.1 再定义公有的源IP地址
nhrp entry multicast dynamic 本地成为NHRP中心，同时可以进行伪广播
nhrp network-id 100 默认为0号，该网段内所有节点tunnel接口必须为相同域

分支站点：例如 r2
interface Tunnel0/0/0
ip address 192.168.6.2 24
tunnel-protocol gre p2mp
source GigabitEthernet0/0/2 假设分支站点ip地址不固定
nhrp network-id 100
nhrp entry 192.168.6.1 1.1.1.1 register 分支需要到中心站点注册

GRE
[r4]int t 0/0/1
[r4-Tunnel0/0/1]tunnel-protocol gre
[r4-Tunnel0/0/1]source 4.4.4.1
[r4-Tunnel0/0/1]description 1.1.1.1
[r4]ip route-static 0.0.0.0 0 4.4.4.2

rip 例如 r1
[r1]rip 2
[r1-rip-2]version 2
[r1-rip-2]undo summary
[r1-rip-2]network 192.168.1.0
[r1-rip-2]network 1.1.1.0

NAT 例如r1
[r1]acl 2000
[r1-acl-basic-2000]rule 0 permit source 192.168.1.0 0.0.0.255
[r1-acl-basic-2000]int s4/0/0
[r1-Serial4/0/0]nat outbound 2000