HCIP-RIP综合实验

实验需求：
1-R2-R3-R4-R5运行RIPV2，R6-R7运行RIPV11,使用合理IP地址规划网络，各自创建环回接口
2, R1创建环回172.16.1.1/24 172.16.2.1/24 172.16.3.1/24
3,要求R3使用R2访问R1环回
4,减少路由条目数量，增加路由传递安全性
5, R5创建一个环回模拟运营商,不能宣告
6, R1 telnet R2环回实际teInet到R7上
7, R6-R7路由器不能学习到达R1环回路由
8，全网可达

实验报告
第一步进行IP划分，环回划分，以及r1三个环回汇总
IP：192.168.1.0~192.168.6.0
各自环回：1.1.1.1~7.7.7.7
r1汇总：1720.16.0.0/22(255.255.252.0)
第二步r1~r5配置RIPV2，R6-R7配置RIPV1
第三步r1配置环回汇总
第四步r6上添加ripv2使用0/0/0接口使得ripv1和ripv2互通
第五步在r3上做入接口抓取并且进行修改开销值
第六步r1做一个手工认证增加路由传递安全性
第七步r1做一个空接口路由,防止路由环路
第八步由于r5不能进行宣告环回,配个缺省
第九步在r6上进行过滤，让r6-r7不能学习到r1环回
第十步r7开启telnat,r2做端口映射
一,分配IP
r1
[r1]int g 0/0/0
[r1-GigabitEthernet0/0/0]ip add 192.168.1.1 24
[r1-GigabitEthernet0/0/0]int g 0/0/1
[r1-GigabitEthernet0/0/1]ip add 192.168.4.1 24
[r1-GigabitEthernet0/0/1]int l0
[r1-LoopBack0]ip add 1.1.1.1 24
[r1-LoopBack0]int l1
[r1-LoopBack1]ip add 172.16.1.1 24
[r1-LoopBack1]int l2
[r1-LoopBack2]ip add 172.16.2.1 24
[r1-LoopBack2]int l3
[r1-LoopBack3]ip add 172.16.3.1 24

r2
int g 0/0/0
[r2-GigabitEthernet0/0/0]ip add 192.168.1.2 24
[r2-GigabitEthernet0/0/0]int g 0/0/1
[r2-GigabitEthernet0/0/1]ip add 192.168.2.1 24
[r2-GigabitEthernet0/0/1]int l0
[r2-LoopBack0]ip add 2.2.2.2 24

r3
[r3]int g 0/0/0
[r3-GigabitEthernet0/0/0]ip add 192.168.2.2 24
[r3-GigabitEthernet0/0/0]int g 0/0/1
[r3-GigabitEthernet0/0/1]ip add 192.168.3.2 24
[r3-GigabitEthernet0/0/1]int l0
[r3-LoopBack0]ip add 3.3.3.3 24

r4
[r4]int g 0/0/0
[r4-GigabitEthernet0/0/0]ip add 192.168.4.2 24
[r4-GigabitEthernet0/0/0]int g 0/0/1
[r4-GigabitEthernet0/0/1]ip add 192.168.3.1 24
[r4-GigabitEthernet0/0/1]int g 4/0/0
[r4-GigabitEthernet4/0/0]ip add 192.168.6.1 24
[r4-GigabitEthernet4/0/0]int g0/0/2
[r4-GigabitEthernet0/0/2]ip add 192.168.5.1 24
[r4-GigabitEthernet0/0/2]int l0
[r4-LoopBack0]ip add 4.4.4.4 24

r5
[r5]int g 0/0/0
[r5-GigabitEthernet0/0/0]ip add 192.168.5.2 24
[r5-GigabitEthernet0/0/0]int l0
[r5-LoopBack0]ip add 5.5.5.5 24

r6
[r6]int g 0/0/0
[r6-GigabitEthernet0/0/0]ip add 192.168.6.2 24
[r6-GigabitEthernet0/0/0]int g 0/0/1
[r6-GigabitEthernet0/0/1]ip add 192.168.7.1 24
[r6-GigabitEthernet0/0/1]int l0
[r6-LoopBack0]ip add 6.6.6.6 24

r7
[r7]int g0/0/0
[r7-GigabitEthernet0/0/0]ip add 192.168.7.2 24
[r7-GigabitEthernet0/0/0]int l0
[r7-LoopBack0]ip add 7.7.7.7 24
[r7-LoopBack0]q

二,r1~r5配置RIPV2，R6-R7配置RIPV1
r1
[r1]rip 1
[r1-rip-1]v 2
[r1-rip-1]net
[r1-rip-1]network 1.0.0.0
[r1-rip-1]network 172.0.0.0
[r1-rip-1]network 192.168.1.0
[r1-rip-1]network 192.168.4.0
[r1-rip-1]q

r2
[r2]rip 1
[r2-rip-1]v 2
[r2-rip-1]net
[r2-rip-1]network 2.0.0.0
[r2-rip-1]network 192.168.1.0
[r2-rip-1]network 192.168.2.0
[r2-rip-1]q

r3
[r3]rip 1
[r3-rip-1]v 2
[r3-rip-1]net
[r3-rip-1]network 3.0.0.0
[r3-rip-1]network 192.168.2.0
[r3-rip-1]network 192.168.3.0

r4
[r4]rip 1
[r4-rip-1]v 2
[r4-rip-1]ne
[r4-rip-1]network 4.0.0.0
[r4-rip-1]network 192.168.4.0
[r4-rip-1]network 192.168.3.0
[r4-rip-1]network 192.168.5.0
[r4-rip-1]network 192.168.6.0
[r4-rip-1]q

r5（依据题目注意5.0.0.0不能宣告）
[r5]rip 1
[r5-rip-1]v 2
[r5-rip-1]ne
[r5-rip-1]network 192.168.5.0
[r5-rip-1]q
[r5]

r6
[r6]rip 1
[r6-rip-1]v 1
[r6-rip-1]net
[r6-rip-1]network 6.0.0.0
[r6-rip-1]network 192.168.6.0
[r6-rip-1]network 192.168.7.0
[r6-rip-1]q

r7
[r7]rip 1
[r7-rip-1]v 1
[r7-rip-1]ne
[r7-rip-1]network 7.0.0.0
[r7-rip-1]network 192.168.7.0
[r7-rip-1]q

三,r1配置环回汇总
[r1]int g 0/0/0
[r1-GigabitEthernet0/0/0]rip sum
[r1-GigabitEthernet0/0/0]rip summary-address 172.16.0.0 255.255.252.0
[r1-GigabitEthernet0/0/0]int g 0/0/1
[r1-GigabitEthernet0/0/1]rip summary-address 172.16.0.0 255.255.252.0
[r1-GigabitEthernet0/0/1]q

四，r6上添加ripv2使用0/0/0接口使得ripv1和ripv2互通
[r6]int g0/0/0
[r6-GigabitEthernet0/0/0]rip v
[r6-GigabitEthernet0/0/0]rip version 2
[r6-GigabitEthernet0/0/0]q

五，在r3上做入接口抓取并且进行修改开销值
[r3]acl 2000
[r3-acl-basic-2000]ru
[r3-acl-basic-2000]rule p
[r3-acl-basic-2000]rule permit s
[r3-acl-basic-2000]rule permit source 172.16.0.0 0
[r3-acl-basic-2000]rule permit source 1.1.1.0 0
[r3-acl-basic-2000]q
[r3]int g 0/0/1
[r3-GigabitEthernet0/0/1]rip m
[r3-GigabitEthernet0/0/1]rip metricin
[r3-GigabitEthernet0/0/1]rip metricout 2000 10
[r3-GigabitEthernet0/0/1]q

六，r1做一个手工认证增加路由传递安全性
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]rip a
[r1-GigabitEthernet0/0/0]rip authentication-mode m
[r1-GigabitEthernet0/0/0]rip authentication-mode md5 u
[r1-GigabitEthernet0/0/0]rip authentication-mode md5 usual c
[r1-GigabitEthernet0/0/0]rip authentication-mode md5 usual cipher 123456
[r1-GigabitEthernet0/0/0]
[r2]int g0/0/0
[r2-GigabitEthernet0/0/0]rip a
[r2-GigabitEthernet0/0/0]rip authentication-mode m
[r2-GigabitEthernet0/0/0]rip authentication-mode md5 u
[r2-GigabitEthernet0/0/0]rip authentication-mode md5 usual c
[r2-GigabitEthernet0/0/0]rip authentication-mode md5 usual cipher 123456
[r2-GigabitEthernet0/0/0]q

七,r1做一个空接口路由,防止路由环路
[r1]ip route-static 172.16.0.0 22 null0

八,由于r5不能进行宣告环回,配个缺省
[r5]rip 1
[r5-rip-1]d
[r5-rip-1]default-cost
[r5-rip-1]default-route o
[r5-rip-1]default-route originate
[r5-rip-1]q
[r5]int g0/0/0
[r5-GigabitEthernet0/0/0]rip su
[r5-GigabitEthernet0/0/0]rip summary-address 0.0.0.0 0.0.0.0

九,在r6上进行过滤，让r6-r7不能学习到r1环回
[r6]acl 2000
[r6-acl-basic-2000]rule d
[r6-acl-basic-2000]rule deny s
[r6-acl-basic-2000]rule deny source 1.1.1.0 0
[r6-acl-basic-2000]rule deny source 172.16.0.0 0
[r6-acl-basic-2000]rule p
[r6-acl-basic-2000]rule permit s
[r6-acl-basic-2000]rule permit source a
[r6-acl-basic-2000]rule permit source any
[r6-acl-basic-2000]q
[r6]rip 1
[r6-rip-1]f
[r6-rip-1]filter-policy 2000 i
[r6-rip-1]filter-policy 2000 import
[r6-rip-1]q
[r6]

十,r7开启telnat
[r7]aaa
[r7-aaa]local-user haha privilege level 15 password cipher 123456
Info: Add a new user.
[r7-aaa]local-user haha service-type telnet
[r7]user-interface vty 0 4
[r7-ui-vty0-4]authentication-mode aaa
[r7-ui-vty0-4]q

十一，r2做端口映射

[r2]int g 0/0/0
[r2-GigabitEthernet0/0/0]nat server protocol tcp global interface loopback 0 23 inside 7.7.7.7 23
Warning:The port 23 is well-known port. If you continue it may cause function failure.
Are you sure to continue?[Y/N]:y
[r2]acl 2000
[r2-acl-basic-2000]rule p
[r2-acl-basic-2000]rule permit s
[r2-acl-basic-2000]rule permit source 7.0.0.0 0
[r2-acl-basic-2000]q
[r2]int g 0/0/1
[r2-GigabitEthernet0/0/1]rip m
[r2-GigabitEthernet0/0/1]rip metricin 2000 5
[r2-GigabitEthernet0/0/1]q

[r4]acl 2000
[r4-acl-basic-2000]rule p
[r4-acl-basic-2000]rule permit s
[r4-acl-basic-2000]rule permit source 192.168.1.0 0
[r4-acl-basic-2000]rule permit source 1.1.1.0 0
[r4-acl-basic-2000]rule permit source 172.16.0.0 0
[r4-acl-basic-2000]q
[r4]int g 0/0/0
[r4-GigabitEthernet0/0/0]rip m
[r4-GigabitEthernet0/0/0]rip metricin 2000 10
[r4-GigabitEthernet0/0/0]q