Rip综合实验

RIP综合实验

使用合理IP地址规划网络，各自创建环回接口

1、配置各个路由器接口IP地址以及环回地址R1配置如下：

[R1]int l 0
[R1-LoopBack0]ip add 1.1.1.1 24
[R1-LoopBack0]int g 0/0/0
[R1-GigabitEthernet0/0/0]ip add 10.0.0.2 24
[R1-GigabitEthernet0/0/0]int g 0/0/1
[R1-GigabitEthernet0/0/1]ip add 12.0.0.1 24

2.配置RIP的基本功能 ：启动RIP进程，在指定网段使能RIP,R1配置如下

[R1]rip 100
[R1-rip-100]version 2
[R1-rip-100]network 1.0.0.0
[R1-rip-100]network 172.16.0.0
[R1-rip-100]network 10.0.0.0
[R1-rip-100]network 12.0.0.0

R1创建环回 172.16.1.1/24 172.16.2.1/24 172.16.3.1/24

1.创建环回

[R1]int l 1
[R1-LoopBack1]ip add 172.16.1.1 24
[R1-LoopBack1]int l 2
[R1-LoopBack2]ip add 172.16.2.1 24
[R1-LoopBack2]int l 3
[R1-LoopBack3]ip add 172.16.3.1 24

2.指定这些网段使能RIP

[R1]rip 100
[R1-rip-100]network 172.16.0.0

要求R3使用R2访问R1环回

[R3] acl 2000
[R3-acl-basic-2000] rule permit source 1.1.1.0 0
[R3-acl-basic-2000] rule permit source 172.16.0.0 0
[R3] int g 0/0/0
[R3-GigabitEthernet0/0/0] rip metricin 2000 2

减少路由条目数量，R1-R2之间增加路由传递安全性

[R1] int g 0/0/0
[R1-GigabitEthernet0/0/0] rip summary-address 172.16.0.0 255.255.252.0
[R1] int g 0/0/1	
[R1-GigabitEthernet0/0/1] rip summary-address 172.16.0.0 255.255.252.0
[R1]ip route-static 172.16.0.0 22 NULL 0
[R1] int g 0/0/0
[R1-GigabitEthernet0/0/0] rip authentication-mode md5 nonstandard cipher 1234
56 1
[R2] int g 0/0/0
[R2-GigabitEthernet0/0/0] rip authentication-mode md5 nonstandard cipher 1234
56 1

R5创建一个环回模拟运营商，不能通告

[R5] int l 1
[R5-LoopBack1] ip add 5.5.5.5 32
[R5] rip 100
[R5-rip-100] default-route originate 

在R6的g 0/0/0接口配合RIP V2版本，保证路由互通

[r6]int g0/0/0
[r6-GigabitEthernet0/0/0]rip version 2

R1 telnet R2环回实际telnet 到R7上

[R2]int g 0/0/0
[R2-GigabitEthernet0/0/0]nat server protocol tcp global interface loopback 0 23 
inside 7.7.7.7 24
Warning:The port 23 is well-known port. If you continue it may cause function fa
ilure.
Are you sure to continue?[Y/N]:y
[R2]acl 2000
[R2-acl-basic-2000]rule permit source 7.0.0.0 0
[R2-acl-basic-2000]int g 0/0/0
[R2-GigabitEthernet0/0/0]rip metricin 2000 2

R6-R7路由器不能学习到达R1环回路由

[R6]acl 2000
[R6-acl-basic-2000]rule deny source 1.1.1.0 0
[R6-acl-basic-2000]rule deny source 172.16.0.0 0	
[R6-acl-basic-2000]rule permit source any 
[R6]rip 200
[R6-rip-200]filter-policy 2000 import GigabitEthernet 0/0/0

实验结果

全网可达：

telnet互通：

R6-R7路由器不能学习到达R1环回路由：