一、拓扑设计,IP地址规划
二、R1-R2之间启用ppp的pap单向认证
R1为主认证方
[r1]aaa
[r1-aaa]local-user huawei password cipher 123456
Info: Add a new user.
[r1-aaa]local-user huawei service-type ppp
[r1-aaa]int s4/0/0
[r1-Serial4/0/0]ppp authentication-mode pap
R2被认证方
[r2-Serial4/0/1]ppp pap local-user huawei password cipher 123456
三、R2-R3之间启用ppp的chap双向认证
[r2]aaa
[r2-aaa]local-user aaa password cipher 111111
[r2-aaa]local-user aaa service-type ppp
[r2-aaa]int s4/0/0
[r2-Serial4/0/0]ppp authentication-mode chap
[r3]int s4/0/1
[r3-Serial4/0/1]ppp chap user aaa
[r3-Serial4/0/1]ppp chap password cipher 111111
四、R3-R5-R6之间使用MGRE,R3为hub端,R5 R6 为spke端;要求MGRE接口网络类型BMA,spoke之间通信必须经过hub端
[r3]int t0/0/0
[r3-Tunnel0/0/0]ip address 10.1.1.1 24
[r3-Tunnel0/0/0]tunnel-protocol gre p2mp
[r3-Tunnel0/0/0]source 34.1.1.1
[r3-Tunnel0/0/0]nhrp network-id 100
[r3-Tunnel0/0/0]nhrp entry multicast dynamic
[r5]int t0/0/0
[r5-Tunnel0/0/0]ip address 10.1.1.2 24
[r5-Tunnel0/0/0]tunnel-protocol gre p2mp
[r5-Tunnel0/0/0]source 45.1.1.2
[r5-Tunnel0/0/0]nhrp network-id 100
[r5-Tunnel0/0/0]nhrp entry 10.1.1.1 34.1.1.1 register
[r5]ip route-static 0.0.0.0 0 45.1.1.1
[r6]int t0/0/0
[r6-Tunnel0/0/0]ip address 10.1.1.3 24
[r6-Tunnel0/0/0]tunnel-protocol gre p2mp
[r6-Tunnel0/0/0]source 46.1.1.2
[r6-Tunnel0/0/0]nhrp network-id 100
[r6-Tunnel0/0/0]nhrp entry 10.1.1.1 34.1.1.1 register
[r6]ip route-static 0.0.0.0 0 46.1.1.1
五、启用ospf
[r1]ospf 1 router-id 91.1.1.1
[r1-ospf-1]area 0
[r1-ospf-1-area-0.0.0.0]network 1.1.1.1 0.0.0.0
[r1-ospf-1-area-0.0.0.0]network 12.1.1.1 0.0.0.0
[r2]ospf 1 router-id 92.2.2.2
[r2-ospf-1]area 0
[r2-ospf-1-area-0.0.0.0]network 2.2.2.2 0.0.0.0
[r2-ospf-1-area-0.0.0.0]network 12.1.1.2 0.0.0.0
[r2-ospf-1-area-0.0.0.0]network 23.1.1.1 0.0.0.0
[r3]ospf 1 router-id 93.3.3.3
[r3-ospf-1]area 0
[r3-ospf-1-area-0.0.0.0]network 3.3.3.3 0.0.0.0
[r3-ospf-1-area-0.0.0.0]network 23.1.1.2 0.0.0.0
[r3-ospf-1-area-0.0.0.0]network 10.1.1.1 0.0.0.0
[r3-Tunnel0/0/0]ospf network-type broadcast
[r5]ospf 1 router-id 95.5.5.5
[r5-ospf-1]area 0
[r5-ospf-1-area-0.0.0.0]network 5.5.5.5 0.0.0.0
[r5-ospf-1-area-0.0.0.0]network 10.1.1.2 0.0.0.0
[r5-Tunnel0/0/0]ospf network-type broadcast
[r5-Tunnel0/0/0]ospf dr-priority 0
[r6]ospf 1 router-id 96.6.6.6
[r6-ospf-1]area 0
[r6-ospf-1-area-0.0.0.0]network 6.6.6.6 0.0.0.0
[r6-ospf-1-area-0.0.0.0]network 10.1.1.3 0.0.0.0
[r6-Tunnel0/0/0]ospf dr-priority 0
[r6-Tunnel0/0/0]ospf network-type broadcast