MGRE综合实验

目录

1.R2为ISP，其上只配置IP地址

2.R1-R2之间为HDLC封装

3.R2-R3之间为ppp封装，Pap认证，R2为主认证方

4.R2-R4之间为ppp封装，chap认证，R2为主认证方

5.R1、R2、R3构建MGRE环境，仅R1IP地址固定

6.内网使用RIP获取路由，所有PC可以互相访问，并且可访问R2的环回。    

---

 

实验步骤：

第一步IP规划：

pc规划

设备	地址	网关
pc1	192.168.1.2/24	192.168.1.1/24
pc2	192.168.2.2/24	192.168.2.1/24
pc3	192.168.3.2/24	192.168.3.1/24

设备地址

设备	接口	地址
R1	S4/0/0	15.1.1.1/24
R3	S4/0/0	35.1.1.3/24
R4	S4/0/0	45.1.1.1.4/24
R2	S4/0/0	15.1.1.5/24
	S4/0/1	35.1.1.5/24
	S3/0/0	45.1.1.5/24

第⼆步：配置 IP 地址

R1 配置

interface GigabitEthernet0/0/1
 ip address 192.168.1.1 255.255.255.0 

interface Serial4/0/1

 ip address 15.1.1.1 255.255.255.0 

 

 

 R2配置

interface Serial3/0/0
 ip address 45.1.1.5 255.255.255.0 
interface Serial4/0/1

 ip address 35.1.1.5 255.255.255.0 
interface Serial4/0/0
 ip address 15.1.1.5 255.255.255.0

 

 

R3配置

 interface Serial4/0/0
 ip address 35.1.1.3 255.255.255.0 

interface GigabitEthernet0/0/1
 ip address 192.168.2.1 255.255.255.0 

 

 

 R4配置

interface Serial4/0/0

 ip address 45.1.1.4 255.255.255.0 

interface GigabitEthernet0/0/1
 ip address 192.168.3.1 255.255.255.0 

 

 第三步：配置缺省路由

【R1】 route-static 0.0.0.0 0 15.1.1.5

[R2]ip route-static 0.0.0.0 0 25.1.1.5

[R3]ip route-static 0.0.0.0 0 35.1.1.5

[R4]ip route-static 0.0.0.0 0 45.1.1.5

 第四步：NAT

[R1]acl 2000

[R1-acl-basic-2000]rule 1 permit source any

[R1-acl-basic-2000]q

[R1]inter s4/0/0

[R1-Serial4/0/0]nat outbound 2000

 

 

 第五步：PAP认证

主认证⽅配置

[R2]aaa

[R2-aaa]local-user huawei password cipher huawei

[R2-aaa]local-user huawei service-type ppp

[R2]interface s4/0/0

[R2-Serial4/0/0]ppp authentication-mode pap

 

 

 被认证⽅配置

 

[R1]interface s4/0/0

[R1-Serial4/0/0]ppp pap local-user huawei password cipher huawei

 

 

第六步：CHAP认证 

主认证⽅配置

[R2]aaa

[R2-aaa]local-user huawei password cipher huawei

[R2-aaa]local-user huawei service-type ppp

[R2]interface s4/0/0

[R2-Serial4/0/0]ppp authentication-mode chap

 

 

被认证⽅配置

[R4]interface s4/0/0

[R4-Serial4/0/0]ppp chap user huawei

[R4-Serial4/0/0]ppp chap password cipher huawei

 

 

 第七步：HDLC封装

[R1]inter s4/0/0

[R1-Serial4/0/0]link-protocol hdlc

[R2]interface s4/0/0

[R2-Serial3/0/0]link-protocol hdlc

 

 

 第⼋步：R1R2R3构建MGRE环境

R1配置

[R1]interface Tunnel 0/0/0

[R1-Tunnel0/0/0]ip address 10.1.1.1 24

[R1-Tunnel0/0/0]tunnel-protocol gre p2mp

[R1-Tunnel0/0/0]source 15.1.1.1

[R1-Tunnel0/0/0]nhrp network-id 100

 R2配置

 

[R2]interface Tunnel 0/0/0

[R2-Tunnel0/0/0]ip address 10.1.1.2 24

[R2-Tunnel0/0/0]tunnel-protocol gre p2mp

[R2-Tunnel0/0/0]source s4/0/0

[R2-Tunnel0/0/0]nhrp entry 10.1.1.1 15.1.1.1 register

[R2-Tunnel0/0/0]nhrp network-id 100

 

 R3配置

[R3]interface Tunnel 0/0/0

[R3-Tunnel0/0/0]ip address 10.1.1.3 24

[R3-Tunnel0/0/0]tunnel-protocol gre p2mp

[R3-Tunnel0/0/0]source s4/0/0

[R3-Tunnel0/0/0]nhrp network-id 100

[R3-Tunnel0/0/0]nhrp entry 10.1.1.1 15.1.1.1 register

 

第⼗步：书写 RIP 路由

MGRE 环境下 RIP 路由配置

[R1]rip 1

[R1-rip-1]version 2

[R1-rip-1]network 192.168.1.0

[R1-rip-1]network 10.0.0.0

 R2配置

注意R1/R4/R3都需要配置路由和上面同理

[R2]rip 1

[R2-rip-1]version 2

[R2-rip-1]network 192.168.2.0

[R2-rip-1]network 10.0.0.0

 R3配置

[R3]rip 1

[R3-rip-1]version 2

[R3-rip-1]network 192.168.3.0

[R3-rip-1]network 10.0.0.0

 

注意：MGRE环境下RIP需要开启伪⼴播和关闭⽔平分割 

[R1]interface Tunnel 0/0/0

[R1-Tunnel0/0/0]nhrp entry multicast dynamic // 开启伪⼴播

[R1-Tunnel0/0/0]undo rip split-horizon // 关闭⽔平分割

 

 PING通：