二、实验思路
1、先将IP配置好,注意其环回就设置为1.1.1.1/24,且其属于私网依次类推
2、缺省路由,使得公网可达
3、配Mgre结构,让其有MAP,为私网地址
4、然后mgre 开启伪广播,配置ospf,并且注意其邻居关系,修改其网络接口类型为广播。
5、注意ospf的DR选举
三、实验步骤
配IP写缺省路由使公网可达
配IP:
[R1]int g0/0/1
[R1-GigabitEthernet0/0/1]ip add 16.1.1.1 24
[R1-GigabitEthernet0/0/1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip add 61.1.1.1 24
[R1-GigabitEthernet0/0/0]int l0
[R1-LoopBack0]ip add 192.168.1.1 24
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip add 26.1.1.1 24
[R2-GigabitEthernet0/0/0]int l0
[R2-LoopBack0]ip add 192.168.2.1 24
[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]ip add 36.1.1.1 24
[R3-GigabitEthernet0/0/0]int l0
[R3-LoopBack0]ip add 192.168.3.1 24
[R4]int g0/0/0
[R4-GigabitEthernet0/0/0]ip add 46.1.1.1 24
[R4-GigabitEthernet0/0/0]int l0
[R4-LoopBack0] ip add 192.168.4.1 24
[R5]int g0/0/0
[R5-GigabitEthernet0/0/0]ip add 56.1.1.1 24
[R5-GigabitEthernet0/0/0]int l0
[R5-LoopBack0]ip add 192.168.5.1 24
[R6]int g0/0/1
[R6-GigabitEthernet0/0/1]ip add 16.1.1.2 24
[R6-GigabitEthernet0/0/1]int g0/0/0
[R6-GigabitEthernet0/0/0]ip add 61.1.1.2 24
[R6-GigabitEthernet0/0/0]int g0/0/2
[R6-GigabitEthernet0/0/2]ip add 26.1.1.2 24
[R6-GigabitEthernet0/0/2]int g2/0/0
[R6-GigabitEthernet2/0/0]ip add 36.1.1.2 24
[R6-GigabitEthernet2/0/0]int g1/0/0
[R6-GigabitEthernet1/0/0]ip add 46.1.1.2 24
[R6-GigabitEthernet1/0/0]int g3/0/0
[R6-GigabitEthernet3/0/0]ip add 56.1.1.2 24
[R6-GigabitEthernet3/0/0]int l0
[R6-LoopBack0]ip add 6.6.6.6 24
配静态路由使得公网通:[R1]ip route-static 0.0.0.0 0 16.1.1.2
[R1]ip route-static 0.0.0.0 0 61.1.1.2
[R2]ip route-static 0.0.0.0 0 26.1.1.2
[R3]ip route-static 0.0.0.0 0 36.1.1.2
[R4]ip route-static 0.0.0.0 0 46.1.1.2
[R5]ip route-static 0.0.0.0 0 56.1.1.2
通过检测,可以看出公网全网可达了,因为r1-5环回是私有的所以不考虑在公网内:
r1/4/5开启全连的MGRE结构,使其有map
r1上的配置:
[R1]int Tunnel 0/0/0
[R1-Tunnel0/0/0]ip add 10.1.1.1 24
[R1-Tunnel0/0/0]tunnel-protocol gre p2mp
[R1-Tunnel0/0/0]source 16.1.1.1
[R1-Tunnel0/0/0]nhrp entry multicast dynamic ------开启伪广播
[R1-Tunnel0/0/0]nhrp network-id 100
r4上的配置:
[R4]int Tunnel 0/0/0
[R4-Tunnel0/0/0]ip address 10.1.1.2 24
[R4-Tunnel0/0/0]tunnel-protocol gre p2mp
[R4-Tunnel0/0/0]source 46.1.1.1
[R4-Tunnel0/0/0]nhrp entry 10.1.1.1 16.1.1.1 register
[R4-Tunnel0/0/0]nhrp entry 10.1.1.3 56.1.1.1 register
[R4-Tunnel0/0/0]nhrp network-id 100
r5上的配置:
[R5]int Tunnel 0/0/0
[R5-Tunnel0/0/0]ip add 10.1.1.3 24
[R5-Tunnel0/0/0]tunnel-protocol gre p2mp
[R5-Tunnel0/0/0]source 56.1.1.1
[R5-Tunnel0/0/0]nhrp entry 10.1.1.1 16.1.1.1 register
[R5-Tunnel0/0/0]nhrp entry multicast dynamic
[R5-Tunnel0/0/0]nhrp network-id 100
以上R1通过其他路由手工注册而获得map,且R1,R5开启伪广播使得其相互之间可以正常工作,这样虚拟的私网就能通,下面还需要设置ospf使其外部这一部分私网也能通。
R1/4/5设置ospf宣告,设置网络接口类型为broadcast
r1上的配置
[R1]ospf 1 router-id 1.1.1.1
[R1-ospf-1]area 0
[R1-ospf-1-area-0.0.0.0]network 10.1.1.1 0.0.0.0
[R1-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.255
#接口类型设置为broadcast
[R1]interface Tunnel 0/0/0
[R1-Tunnel0/0/0]ospf network-type broadcast
r4上的配置:
[R4]ospf 1 router-id 4.4.4.4
[R4-ospf-1]area 0
[R4-ospf-1-area-0.0.0.0]network 10.1.1.2 0.0.0.0
[R4-ospf-1-area-0.0.0.0]network 192.168.4.0 0.0.0.255
#网络接口类型为broadcast
[R4]interface Tunnel 0/0/0
[R4-Tunnel0/0/0]ospf network-type broadcast
r5上的配置:
[R5]ospf 1 router-id 5.5.5.5
[R5-ospf-1]area 0
[R5-ospf-1-area-0.0.0.0]network 10.1.1.3 0.0.0.0
[R5-ospf-1-area-0.0.0.0]network 192.168.5.0 0.0.0.255
#网络接口类型为broadcast
[R5]interface Tunnel 0/0/0
[R5-Tunnel0/0/0]ospf network-type broadcast
R1/2/3开启星型拓扑mgre,使其有map
r1上的配置:
[R1]interface Tunnel 0/0/1
[R1-Tunnel0/0/1]ip add 10.1.2.1 24
[R1-Tunnel0/0/1]tunnel-protocol gre p2mp
[R1-Tunnel0/0/1]source 61.1.1.1
[R1-Tunnel0/0/1]nhrp network-id 100
[R1-Tunnel0/0/1]nhrp entry multicast dynamic ----中心站点伪广播
r2上的配置:
[R2]interface Tunnel 0/0/1
[R2-Tunnel0/0/1]ip add 10.1.2.2 24
[R2-Tunnel0/0/1]tunnel-protocol gre p2mp
[R2-Tunnel0/0/1]source g0/0/0
[R2-Tunnel0/0/1]nhrp entry 10.1.2.1 61.1.1.1 register
[R2-Tunnel0/0/1]nhrp network-id 100
r3上的配置:
[R3]int Tunnel 0/0/1
[R3-Tunnel0/0/1]ip add 10.1.2.3 24
[R3-Tunnel0/0/1]tunnel-protocol gre p2mp
[R3-Tunnel0/0/1]source g0/0/0
[R3-Tunnel0/0/1]nhrp entry 10.1.2.1 61.1.1.1 register
[R3-Tunnel0/0/1]nhrp network-id 100
以上R1伪广播为中心站点,使得其相互之间可以获得map,这样虚拟的私网就能通,下面还需要设置ospf使其外部这一部分私网也能通。
3.5 R1/2/3设置ospf宣告等操作
R1上的配置:
[R1]ospf 1 router-id 1.1.1.1
[R1-ospf-1]area 0
[R1-ospf-1-area-0.0.0.0]network 10.1.2.1 0.0.0.0
[R1-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.255
#网络接口类型为broadcast
[R1]interface Tunnel 0/0/1
[R1-Tunnel0/0/1]ospf network-type broadcast
R2上的配置:
[R2]ospf 1 router-id 2.2.2.2
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]network 10.1.2.2 0.0.0.0
[R2-ospf-1-area-0.0.0.0]network 192.168.2.0 0.0.0.255
#网络接口类型为broadcast
[R2]interface Tunnel 0/0/1
[R2-Tunnel0/0/1]ospf network-type broadcast
#优先级设置为0,放弃选举
[R2-Tunnel0/0/1]ospf dr-priority 0
R3上的配置:
[R3]ospf 1 router-id 3.3.3.3
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]network 10.1.2.3 0.0.0.0
[R3-ospf-1-area-0.0.0.0]network 192.168.3.0 0.0.0.255
#网络接口类型为broadcast
[R3]interface Tunnel 0/0/1
[R3-Tunnel0/0/1]ospf network-type broadcast
#优先级设置为0,放弃选举
[R3-Tunnel0/0/1]ospf dr-priority 0