gre实验

首先给isp配置ip地址

Huawei-Serial2/0/0]ip address 1.1.1.2 24
[Huawei-Serial2/0/1]ip address 2.2.2.1 24
Huawei-Serial3/0/0]ip address 3.3.3.1 24

r1-isp为HDLC封装

[Huawei-Serial4/0/0]link-protocol hdlc 
Warning: The encapsulation protocol of the link will be changed. Continue? [Y/N]
:y

3.R2-R3之间为ppp封装，pap认证，ISP为主认证方

主认证方
[Huawei]aaa	
[Huawei-aaa]local-user a password cipher 123456
[Huawei-Serial2/0/1]ppp authentication-mode pap
被认证方
[Huawei]int s2/0/0
[Huawei-Serial2/0/0]ppp pap local-user a password cipher 123456

4.R2-R4之间为PPp封装，chap认证，R2为主认证方

主认证
[Huawei-Serial3/0/0]ppp authentication-mode chap
被认证
Huawei-Serial4/0/0]ppp chap password cipher 123456

5.R1、R2、R3构建MGRE环境，仅R1P地址固定

中心站点
[Huawei-Tunnel0/0/0]ip address 192.168.4.1 24	
[Huawei-Tunnel0/0/0]tunnel-protocol gre p2mp 
[Huawei-Tunnel0/0/0]source 1.1.1.1
[Huawei-Tunnel0/0/0]nhrp entry multicast dynamic 
[Huawei-Tunnel0/0/0]nhrp network-id 100
分支站点
[Huawei]interface Tunnel 0/0/0
[Huawei-Tunnel0/0/0]ip address 192.168.4.2 24	
[Huawei-Tunnel0/0/0]tunnel-protocol gre p2mp 
[Huawei-Tunnel0/0/0]source Serial 2/0/0
[Huawei-Tunnel0/0/0]nhrp entry 192.168.4.1 1.1.1.1 register 
[Huawei-Tunnel0/0/0]nhrp network-id 100

6.内网使用RTP获取路中，所有pc可以五相访问，并日可访问B2的环回。

rip以r2为例

[Huawei]rip
[Huawei-rip-1]version 2
[Huawei-rip-1]network 192.168.2.0
[Huawei-rip-1]network 192.168.4.0

pc可以访问isp的环回直接做nat

[Huawei]acl 2000	
[Huawei-acl-basic-2000]rule permit source 192.168.0.0 0.0.255.255
[Huawei]int s2/0/0
[Huawei-Serial2/0/0]nat outbound 2000

见证奇迹的时刻