RIP综合实验
使用合理IP地址规划网络,各自创建环回接口
1、配置各个路由器接口IP地址以及环回地址R1配置如下:
[R1]int l 0
[R1-LoopBack0]ip add 1.1.1.1 24
[R1-LoopBack0]int g 0/0/0
[R1-GigabitEthernet0/0/0]ip add 10.0.0.2 24
[R1-GigabitEthernet0/0/0]int g 0/0/1
[R1-GigabitEthernet0/0/1]ip add 12.0.0.1 24
2.配置RIP的基本功能 :启动RIP进程,在指定网段使能RIP,R1配置如下
[R1]rip 100
[R1-rip-100]version 2
[R1-rip-100]network 1.0.0.0
[R1-rip-100]network 172.16.0.0
[R1-rip-100]network 10.0.0.0
[R1-rip-100]network 12.0.0.0
R1创建环回 172.16.1.1/24 172.16.2.1/24 172.16.3.1/24
1.创建环回
[R1]int l 1
[R1-LoopBack1]ip add 172.16.1.1 24
[R1-LoopBack1]int l 2
[R1-LoopBack2]ip add 172.16.2.1 24
[R1-LoopBack2]int l 3
[R1-LoopBack3]ip add 172.16.3.1 24
2.指定这些网段使能RIP
[R1]rip 100
[R1-rip-100]network 172.16.0.0
要求R3使用R2访问R1环回
[R3] acl 2000
[R3-acl-basic-2000] rule permit source 1.1.1.0 0
[R3-acl-basic-2000] rule permit source 172.16.0.0 0
[R3] int g 0/0/0
[R3-GigabitEthernet0/0/0] rip metricin 2000 2
减少路由条目数量,R1-R2之间增加路由传递安全性
[R1] int g 0/0/0
[R1-GigabitEthernet0/0/0] rip summary-address 172.16.0.0 255.255.252.0
[R1] int g 0/0/1
[R1-GigabitEthernet0/0/1] rip summary-address 172.16.0.0 255.255.252.0
[R1]ip route-static 172.16.0.0 22 NULL 0
[R1] int g 0/0/0
[R1-GigabitEthernet0/0/0] rip authentication-mode md5 nonstandard cipher 1234
56 1
[R2] int g 0/0/0
[R2-GigabitEthernet0/0/0] rip authentication-mode md5 nonstandard cipher 1234
56 1
R5创建一个环回模拟运营商,不能通告
[R5] int l 1
[R5-LoopBack1] ip add 5.5.5.5 32
[R5] rip 100
[R5-rip-100] default-route originate
在R6的g 0/0/0接口配合RIP V2版本,保证路由互通
[r6]int g0/0/0
[r6-GigabitEthernet0/0/0]rip version 2
R1 telnet R2环回实际telnet 到R7上
[R2]int g 0/0/0
[R2-GigabitEthernet0/0/0]nat server protocol tcp global interface loopback 0 23
inside 7.7.7.7 24
Warning:The port 23 is well-known port. If you continue it may cause function fa
ilure.
Are you sure to continue?[Y/N]:y
[R2]acl 2000
[R2-acl-basic-2000]rule permit source 7.0.0.0 0
[R2-acl-basic-2000]int g 0/0/0
[R2-GigabitEthernet0/0/0]rip metricin 2000 2
R6-R7路由器不能学习到达R1环回路由
[R6]acl 2000
[R6-acl-basic-2000]rule deny source 1.1.1.0 0
[R6-acl-basic-2000]rule deny source 172.16.0.0 0
[R6-acl-basic-2000]rule permit source any
[R6]rip 200
[R6-rip-200]filter-policy 2000 import GigabitEthernet 0/0/0
实验结果
全网可达:
telnet互通:
R6-R7路由器不能学习到达R1环回路由: