基于OSPF的MGRE VPN实验

1，配置IP地址

R1:  
GigabitEthernet0/0/0              15.0.0.1/24          up         up              
LoopBack0                         192.168.1.1/24       up         up(s)

R2:
GigabitEthernet0/0/0              25.0.0.2/24          up         up             
LoopBack0                         192.168.2.2/24       up         up(s) 

R3:
GigabitEthernet0/0/0              35.0.0.3/24          up         up              
LoopBack0                         192.168.3.3/24       up         up(s)

R4:    
GigabitEthernet0/0/0              45.0.0.4/24          up         up              
LoopBack0                         192.168.4.4/24       up         up(s)

R5:
GigabitEthernet0/0/0              15.0.0.5/24          up         up        
GigabitEthernet0/0/1              25.0.0.5/24          up         up        
GigabitEthernet0/0/2              45.0.0.5/24          up         up        
GigabitEthernet4/0/0              35.0.0.5/24          up         up 

2，公网通

[R1]ip route-static 0.0.0.0 0 15.0.0.5
[R2]ip route-static 0.0.0.0 0 25.0.0.5
[R3]ip route-static 0.0.0.0 0 35.0.0.5
[R4]ip route-static 0.0.0.0 0 45.0.0.5

3、配置总部与分部之间的隧道-MGRE VPN

[R1]int Tunnel 0/0/0
[R1-Tunnel0/0/0]ip add 192.168.5.1 24
[R1-Tunnel0/0/0]tunnel-protocol gre p2mp 
[R1-Tunnel0/0/0]source 15.0.0.1

[R2]int Tunnel 0/0/0
[R2-Tunnel0/0/0]ip add 192.168.5.2 24
[R2-Tunnel0/0/0]tunnel-protocol gre p2mp 
[R2-Tunnel0/0/0]source 25.0.0.2

[R3]int Tunnel 0/0/0
[R3-Tunnel0/0/0]ip add 192.168.5.3 24
[R3-Tunnel0/0/0]tunnel-protocol gre p2mp 	
[R3-Tunnel0/0/0]source 35.0.0.3

[R4]int Tunnel 0/0/0
[R4-Tunnel0/0/0]ip address 192.168.5.4 24	
[R4-Tunnel0/0/0]tunnel-protocol gre p2mp 
[R4-Tunnel0/0/0]source 45.0.0.4

4，NHRP配置

中心站点配置：
[R1-Tunnel0/0/0]nhrp network-id 100  创建NHRP域
分支站点配置：
[R2]int Tunnel 0/0/0
[R2-Tunnel0/0/0]nhrp network-id 100   //分支加入中心站点域100
[R2-Tunnel0/0/0]nhrp entry 192.168.5.1 15.0.0.1 register     // 分支找中心注册自己的信息

[R3]int Tunnel 0/0/0
[R3-Tunnel0/0/0]nhrp network-id 100
[R3-Tunnel0/0/0]nhrp entry 192.168.5.1 15.0.0.1 register 

[R4]int Tunnel 0/0/0	
[R4-Tunnel0/0/0]nhrp network-id 100
[R4-Tunnel0/0/0]nhrp entry 192.168.5.1 15.0.0.1 register 

5，开启广播

[R1-Tunnel0/0/0]ospf network-type broadcast
[R2-Tunnel0/0/0]ospf network-type broadcast
[R3-Tunnel0/0/0]ospf network-type broadcast
[R4-Tunnel0/0/0]ospf network-type broadcast

6，解决DR和BDR选举混乱问题：

解决方法：将分支站点的dr选举优先级变0，这样就能保证中心站点是整个广播网络中唯一的DR

[R2-Tunnel0/0/0]ospf dr-priority 0
[R3-Tunnel0/0/0]ospf dr-priority 0
[R4-Tunnel0/0/0]ospf dr-priority 0