HCIP实验二

1.ip配置下如图，dhcp获取电脑ip

2.PAP\CHAP\HDLC认证配置

3.R123同一个虚拟环境，配置MGRE，R1中心站点，，，R14配置GRE

4.配置rip，全网可达，关闭站点的水平分割

5.配置缺省路由到R5环回

 配置命令

ip配置

[AR1]int g0/0/0
[AR1-GigabitEthernet0/0/0]ip add 11.1.1.1 24
[AR1]int s4/0/0
[AR1-Serial4/0/0]ip add 10.1.1.1 24
[AR1]dhcp enable 
[AR1]ip pool aa
[AR1-ip-pool-aa]network 11.1.1.0 mask 24
[AR1-ip-pool-aa]gateway-list 11.1.1.1
[AR1-ip-pool-aa]dns-list 114.114.114.114 8.8.8.8    
[AR1-GigabitEthernet0/0/0]dhcp select global

[AR2]int g0/0/0
[AR2-GigabitEthernet0/0/0]ip add 21.1.1.1 24
[AR2]int s4/0/0
[AR2-Serial4/0/0]ip add 20.1.1.1 24
[AR2]dhcp enable 
[AR2]ip pool aa
[AR2-ip-pool-aa]network 21.1.1.0 mask 24
[AR2-ip-pool-aa]gateway-list 21.1.1.1    
[AR2-ip-pool-aa]dns-list 114.114.114.114 8.8.8.8    
[AR2-GigabitEthernet0/0/0]dhcp select global

[AR3]int g0/0/0
[AR3-GigabitEthernet0/0/0]ip add 31.1.1.1 24
[AR3]int s4/0/0
[AR3-Serial4/0/0]ip add 30.1.1.1 24
[AR3]dhcp enable
[AR3]ip pool aa
[AR3-ip-pool-aa]network 31.1.1.0 mask 24
[AR3-ip-pool-aa]gateway-list 31.1.1.1
[AR3-ip-pool-aa]dns-list 114.114.114.114 8.8.8.8    
[AR3-GigabitEthernet0/0/0]dhcp select global 

[AR4]int g0/0/0
[AR4-GigabitEthernet0/0/0]ip add 41.1.1.1 24
[AR4]int g0/0/1
[AR4-GigabitEthernet0/0/1]ip add 40.1.1.1 24
[AR4]dhcp enable 
[AR4]ip pool aa
[AR4-ip-pool-aa]network 41.1.1.0 mask 24
[AR4-ip-pool-aa]gateway-list 41.1.1.1
[AR4-ip-pool-aa]dns-list 114.114.114.114 8.8.8.8    
[AR4-GigabitEthernet0/0/0]dhcp select global

[AR5]int g0/0/0
[AR5-GigabitEthernet0/0/0]ip add 40.1.1.2 24
[AR5-GigabitEthernet0/0/0]int s4/0/0
[AR5-Serial4/0/0]ip add 10.1.1.2 24
[AR5-Serial4/0/0]int s4/0/1
[AR5-Serial4/0/1]ip add 20.1.1.2 24
[AR5-Serial4/0/1]int s3/0/0
[AR5-Serial3/0/0]ip add 30.1.1.2 24
[AR5]int LoopBack 0
[AR5-LoopBack0]ip add 1.1.1.1 24

PPP/HDLC认证

[AR5]aaa    
[AR5-aaa]local-user aa password cipher 123456
[AR5-aaa]local-user aa service-type ppp
[AR5-aaa]int s4/0/0
[AR5-Serial4/0/0]link-protocol ppp    
[AR5-Serial4/0/0]ppp authentication-mode pap

[AR1]int s4/0/0
[AR1-Serial4/0/0]link-protocol ppp    
[AR1-Serial4/0/0]ppp pap local-user aa password cipher 123456

[AR5]aaa
[AR5-aaa]local-user bb password cipher 123456
[AR5-aaa]local-user bb service-type ppp
[AR5-aaa]int s4/0/1
[AR5-Serial4/0/1]link-protocol ppp    
[AR5-Serial4/0/1]ppp authentication-mode chap

[AR2]int s4/0/0
[AR2-Serial4/0/0]link-protocol ppp
[AR2-Serial4/0/0]ppp chap user bb    
[AR2-Serial4/0/0]ppp chap password cipher 123456
 

[AR5]int s3/0/0    
[AR5-Serial3/0/0]link-protocol hdlc 

[AR3]int s4/0/0    
[AR3-Serial4/0/0]link-protocol hdlc 
 

MGRE/GRE配置

[AR1]int t0/0/0
[AR1-Tunnel0/0/0]ip add 15.1.1.1 24    
[AR1-Tunnel0/0/0]tunnel-protocol gre p2mp 
[AR1-Tunnel0/0/0]source 10.1.1.1
[AR1-Tunnel0/0/0]nhrp entry multicast dynamic     
[AR1-Tunnel0/0/0]nhrp network-id 100

[AR2]int t0/0/0
[AR2-Tunnel0/0/0]ip add 15.1.1.2 24
[AR2-Tunnel0/0/0]tunnel-protocol gre p2mp     
[AR2-Tunnel0/0/0]source s4/0/0    
[AR2-Tunnel0/0/0]nhrp entry 15.1.1.1 10.1.1.1 register     
[AR2-Tunnel0/0/0]nhrp network-id 100

[AR3]int t0/0/0
[AR3-Tunnel0/0/0]ip add 15.1.1.3 24    
[AR3-Tunnel0/0/0]tunnel-protocol gre p2mp 
[AR3-Tunnel0/0/0]source s4/0/0    
[AR3-Tunnel0/0/0]nhrp network-id 100    
[AR3-Tunnel0/0/0]nhrp entry 15.1.1.1 10.1.1.1 register 
 

[AR1]int t0/0/1
[AR1-Tunnel0/0/1]ip add 25.1.1.1 24
[AR1-Tunnel0/0/1]tunnel-protocol gre 
[AR1-Tunnel0/0/1]source 10.1.1.1
[AR1-Tunnel0/0/1]description 40.1.1.1

[AR4]int t0/0/1
[AR4-Tunnel0/0/1]ip add 25.1.1.2 24    
[AR4-Tunnel0/0/1]tunnel-protocol gre     
[AR4-Tunnel0/0/1]source 40.1.1.1
[AR4-Tunnel0/0/1]description 10.1.1.1

rip配置

[AR1]rip 1
[AR1-rip-1]ver 2
[AR2-rip-2]undo summary 
[AR1-rip-1]network 15.0.0.0
[AR1-rip-1]network 11.0.0.0

[AR1]int t0/0/0    
[AR1-Tunnel0/0/0]undo rip split-horizon

[AR2]rip 1
[AR2-rip-1]ver 2
[AR2-rip-1]undo summary     
[AR2-rip-1]network 15.0.0.0    
[AR2-rip-1]network 21.0.0.0

[AR3]rip 1
[AR3-rip-1]ver 2    
[AR3-rip-1]undo summary     
[AR3-rip-1]network 15.0.0.0    
[AR3-rip-1]network 31.0.0.0

[AR4]rip 1
[AR4-rip-1]ver 2
[AR4-rip-1]undo summary     
[AR4-rip-1]network 15.0.0.0    
[AR4-rip-1]network 41.0.0.0

缺省路由

[AR1]ip route-static 0.0.0.0 0 10.1.1.2
[AR2]ip route-static 0.0.0.0 0 20.1.1.2
[AR3]ip route-static 0.0.0.0 0 30.1.1.2
[AR4]ip route-static 0.0.0.0 0 40.1.1.2
 

配置nat

[AR1]acl 2000    
[AR1-acl-basic-2000]rule permit source 11.1.1.0 0.0.0.255
[AR1]int s4/0/0    
[AR1-Serial4/0/0]nat outbound 2000

[AR2]acl 2000    
[AR2-acl-basic-2000]rule permit source 21.1.1.0 0.0.0.255
[AR2]int s4/0/0    
[AR2-Serial4/0/0]nat outbound 2000

[AR3]acl 2000    
[AR3-acl-basic-2000]rule permit source 31.1.1.0 0.0.0.255
[AR3]int s4/0/0    
[AR3-Serial4/0/0]nat outbound 2000

[AR4]acl 2000    
[AR4-acl-basic-2000]rule permit source 41.1.1.0 0.0.0.255
[AR4]int g0/0/1    
[AR4-GigabitEthernet0/0/1]nat outbound 2000

实验结果