一.实验要求
二.实验材料
AR2440路由器5台,PC4台
三.实验思路
1.IP配置
2.公私网通
3.ppp访问
4.MGRE和GRE配置
注意:配置小弟目标地址时要使用接口名称,这里是固定的也可以用IP地址
5.RIP配置
注意1:打开总部设备的广播功能
nhrp entry multicast dynamic
注意2:关闭防环机制负载均衡
[R1-Tunnel0/0/0]undo rip split-horizon
6.NAT配置
四.实验配置
AR1
<AR1>save
<AR1>sys
Enter system view, return user view with Ctrl+Z.
[AR1]ip ro
[AR1]ip route-
[AR1]ip route-static 0.0.0.0 0 15.1.1.5
[AR1]ping 25.1.1.2
PING 25.1.1.2: 56 data bytes, press CTRL_C to break
Reply from 25.1.1.2: bytes=56 Sequence=1 ttl=254 time=110 ms
Reply from 25.1.1.2: bytes=56 Sequence=2 ttl=254 time=150 ms
Reply from 25.1.1.2: bytes=56 Sequence=3 ttl=254 time=80 ms
Reply from 25.1.1.2: bytes=56 Sequence=4 ttl=254 time=70 ms
Reply from 25.1.1.2: bytes=56 Sequence=5 ttl=254 time=80 ms
--- 25.1.1.2 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 70/98/150 ms
[AR1]ping 35.1.1.3
PING 35.1.1.3: 56 data bytes, press CTRL_C to break
Reply from 35.1.1.3: bytes=56 Sequence=1 ttl=254 time=70 ms
Reply from 35.1.1.3: bytes=56 Sequence=2 ttl=254 time=50 ms
Reply from 35.1.1.3: bytes=56 Sequence=3 ttl=254 time=30 ms
Reply from 35.1.1.3: bytes=56 Sequence=4 ttl=254 time=30 ms
Reply from 35.1.1.3: bytes=56 Sequence=5 ttl=254 time=30 ms
--- 35.1.1.3 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 30/42/70 ms
[AR1]ping 45.1.1.4
PING 45.1.1.4: 56 data bytes, press CTRL_C to break
Request time out
Reply from 45.1.1.4: bytes=56 Sequence=2 ttl=254 time=50 ms
Reply from 45.1.1.4: bytes=56 Sequence=3 ttl=254 time=40 ms
Reply from 45.1.1.4: bytes=56 Sequence=4 ttl=254 time=30 ms
Reply from 45.1.1.4: bytes=56 Sequence=5 ttl=254 time=30 ms
--- 45.1.1.4 ping statistics ---
5 packet(s) transmitted
4 packet(s) received
20.00% packet loss
round-trip min/avg/max = 30/37/50 ms
[AR1]int s 4/0/0
[AR1-Serial4/0/0]ppp pap local-user xsl password cipher xsl123
<AR1>sys
Enter system view, return user view with Ctrl+Z.
[AR1]int Tunnel 0/0/0
[AR1-Tunnel0/0/0]ip add 10.1.2.1 24
[AR1-Tunnel0/0/0]tunnel-protocol gre p2mp
[AR1-Tunnel0/0/0]source 15.1.1.1
[AR1-Tunnel0/0/0]nhrp network-id 100
[AR1-Tunnel0/0/0]q
[AR1]int Tunnel 0/0/1
[AR1-Tunnel0/0/1]ip add 10.1.1.1 24
[AR1-Tunnel0/0/1]tunnel-protocol gre
[AR1-Tunnel0/0/1]source 15.1.1.1
[AR1-Tunnel0/0/1]description 192.168.4.2
[AR1-Tunnel0/0/1]undo description
[AR1-Tunnel0/0/1]destination 45.1.1.4
[AR1]rip 1
[AR1-rip-1]v 2
[AR1-rip-1]undo summary
[AR1-rip-1]ne
[AR1-rip-1]network 192.168.1.0
[AR1-rip-1]ne
[AR1-rip-1]network 10.0.0.0
<AR1>sys
Enter system view, return user view with Ctrl+Z.
[AR1]int Tunnel 0/0/0
[AR1-Tunnel0/0/0]nhrp entry multicast dynamic
[AR1-Tunnel0/0/0]undo rip split-horizon
[AR1-Tunnel0/0/0]q
[AR1]dis rip
Public VPN-instance
RIP process : 1
RIP version : 2
Preference : 100
Checkzero : Enabled
Default-cost : 0
Summary : Disabled
Host-route : Enabled
Maximum number of balanced paths : 8
Update time : 30 sec Age time : 180 sec
Garbage-collect time : 120 sec
Graceful restart : Disabled
BFD : Disabled
Silent-interfaces : None
Default-route : Disabled
Verify-source : Enabled
Networks :
10.0.0.0 192.168.1.0
Configured peers : None
Number of routes in database : 5
Number of interfaces enabled : 3
Triggered updates sent : 2
Number of route changes : 2
Number of replies to queries : 0
Number of routes in ADV DB : 4
Total count for 1 process :
Number of routes in database : 5
[AR1]q
[AR1]acl 2000
[AR1-acl-basic-2000]rule p
[AR1-acl-basic-2000]rule permit s
[AR1-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[AR1-acl-basic-2000]q
[AR1]int s 4/0/0
[AR1-Serial4/0/0]nat out
[AR1-Serial4/0/0]nat outbound 2000
[AR1-Serial4/0/0]q
[AR1]q
<AR1>save
AR2
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname AR2
[AR2]int g 0/0/0
[AR2-GigabitEthernet0/0/0]ip add 192.168.2.254 24
[AR2-GigabitEthernet0/0/0]int s 4/0/0
[AR2-Serial4/0/0]ip add 25.1.1.2 24
[AR2-Serial4/0/0]q
[AR2]dis ip int b
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
The number of interface that is UP in Physical is 3
The number of interface that is DOWN in Physical is 9
The number of interface that is UP in Protocol is 3
The number of interface that is DOWN in Protocol is 9
Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 192.168.2.254/24 up up
GigabitEthernet0/0/1 unassigned down down
GigabitEthernet0/0/2 unassigned down down
NULL0 unassigned up up(s)
Serial1/0/0 unassigned down down
Serial1/0/1 unassigned down down
Serial2/0/0 unassigned down down
Serial2/0/1 unassigned down down
Serial3/0/0 unassigned down down
Serial3/0/1 unassigned down down
Serial4/0/0 25.1.1.2/24 up up
Serial4/0/1 unassigned down down
[AR2]ip route-static 0.0.0.0 0 25.1.1.5
[AR2]int s 4/0/0
[AR2-Serial4/0/0]ppp chap user xsl
[AR2-Serial4/0/0]ppp chap password cipher xsl123
[AR2]int Tunnel 0/0/0
[AR2-Tunnel0/0/0]ip add 10.1.2.2 24
[AR2-Tunnel0/0/0]tunnel-protocol gre p2mp
[AR2-Tunnel0/0/0]source 25.1.1.2
[AR2-Tunnel0/0/0]nhrp network-id 100
[AR2]rip 1
[AR2-rip-1]v 2
[AR2-rip-1]undo summary
[AR2-rip-1]network 192.168.2.0
[AR2-rip-1]network 10.0.0.0
[AR2-rip-1]q
[AR2]int Tunnel 0/0/0
[AR2-Tunnel0/0/0]nhrp entry 10.1.2.1 15.1.1.1 register
[AR2-Tunnel0/0/0]undo rip split-horizon
[AR2-Tunnel0/0/0]q
[AR2]q
[AR2]acl 2000
[AR2-acl-basic-2000]rule permit source 192.168.2.0 0.0.0.255
[AR2-acl-basic-2000]q
[AR2]int s 4/0/0
[AR2-Serial4/0/0]nat o
[AR2-Serial4/0/0]nat outbound 2000
[AR2-Serial4/0/0]q
[AR2]q
<AR2>save
AR3
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname AR3
[AR3]int g 0/0/0
[AR3-GigabitEthernet0/0/0]ip add 192.168.3.254 24
[AR3-GigabitEthernet0/0/0]int s 4/0/0
[AR3-Serial4/0/0]ip add 35.1.1.3 24
[AR3-Serial4/0/0]q
[AR3]dis ip int b
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
The number of interface that is UP in Physical is 3
The number of interface that is DOWN in Physical is 9
The number of interface that is UP in Protocol is 3
The number of interface that is DOWN in Protocol is 9
Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 192.168.3.254/24 up up
GigabitEthernet0/0/1 unassigned down down
GigabitEthernet0/0/2 unassigned down down
NULL0 unassigned up up(s)
Serial1/0/0 unassigned down down
Serial1/0/1 unassigned down down
Serial2/0/0 unassigned down down
Serial2/0/1 unassigned down down
Serial3/0/0 unassigned down down
Serial3/0/1 unassigned down down
Serial4/0/0 35.1.1.3/24 up up
Serial4/0/1 unassigned down down
[AR3]ip route-static 0.0.0.0 0 35.1.1.5
[AR3]int s 4/0/0
[AR3-Serial4/0/0]link-protocol hdlc
Warning: The encapsulation protocol of the link will be changed. Continue? [Y/N]
:y
Mar 30 2024 14:34:24-08:00 AR3 %%01IFNET/4/CHANGE_ENCAP(l)[0]:The user performed
the configuration that will change the encapsulation protocol of the link and t
hen selected Y.
[AR3]int Tunnel 0/0/0
[AR3-Tunnel0/0/0]ip add 10.1.2.3 24
[AR3-Tunnel0/0/0]tunnel-protocol gre p2mp
[AR3-Tunnel0/0/0]source 35.1.1.3
[AR3-Tunnel0/0/0]nhrp network-id 100
[AR3]rip 1
[AR3-rip-1]v 2
[AR3-rip-1]undo summary
[AR3-rip-1]network 192.168.3.0
[AR3-rip-1]network 10.0.0.0
[AR3-rip-1]q
[AR3]int Tunnel 0/0/0
[AR3-Tunnel0/0/0]nhrp entry 10.1.2.1 15.1.1.1 register
[AR3-Tunnel0/0/0]undo rip split-horizon
[AR3-Tunnel0/0/0]q
[AR3]q
[AR3]acl 2000
[AR3-acl-basic-2000]rule p
[AR3-acl-basic-2000]rule permit s
[AR3-acl-basic-2000]rule permit source 192.168.3.0 0.0.0.255
[AR3-acl-basic-2000]q
[AR3]int s 4/0/0
[AR3-Serial4/0/0]nat o
[AR3-Serial4/0/0]nat outbound 2000
[AR3-Serial4/0/0]q
[AR3]q
<AR3>save
AR4
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname AR4
[AR4]int g 0/0/0
[AR4-GigabitEthernet0/0/0]ip add 45.1.1.4 24
[AR4-GigabitEthernet0/0/0]int g 0/0/1
[AR4-GigabitEthernet0/0/1]ip add 192.168.4.254 24
[AR4-GigabitEthernet0/0/1]q
[AR4]dis ip int b
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
The number of interface that is UP in Physical is 3
The number of interface that is DOWN in Physical is 9
The number of interface that is UP in Protocol is 3
The number of interface that is DOWN in Protocol is 9
Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 45.1.1.4/24 up up
GigabitEthernet0/0/1 192.168.4.254/24 up up
GigabitEthernet0/0/2 unassigned down down
NULL0 unassigned up up(s)
Serial1/0/0 unassigned down down
Serial1/0/1 unassigned down down
Serial2/0/0 unassigned down down
Serial2/0/1 unassigned down down
Serial3/0/0 unassigned down down
Serial3/0/1 unassigned down down
Serial4/0/0 unassigned down down
Serial4/0/1 unassigned down down
[AR4]q
[AR4]ip route-static 0.0.0.0 0 45.1.1.5
[AR4]int Tunnel 0/0/1
[AR4-Tunnel0/0/1]ip add 10.1.1.4 24
[AR4-Tunnel0/0/1]tunnel-protocol gre
[AR4-Tunnel0/0/1]source 45.1.1.4
[AR4-Tunnel0/0/1]description 15.1.1.1
[AR4]rip 1
[AR4-rip-1]v 2
[AR4-rip-1]undo summary
[AR4-rip-1]ne
[AR4-rip-1]network 192.168.4.0
[AR4-rip-1]network 10.0.0.0
[AR4-rip-1]q
[AR4]q
[AR4]acl 2000
[AR4-acl-basic-2000]rule p
[AR4-acl-basic-2000]rule permit s
[AR4-acl-basic-2000]rule permit source 192.168.4.0 0.0.0.255
[AR4-acl-basic-2000]q
[AR4]int g 0/0/0
[AR4-GigabitEthernet0/0/0]nat outbound 2000
[AR4-GigabitEthernet0/0/0]q
[AR4]q
<AR4>save
AR5
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname AR5
[AR5]int g 0/0/0
[AR5-GigabitEthernet0/0/0]ip add 45.1.1.5 24
[AR5-GigabitEthernet0/0/0]int s 4/0/1
[AR5-Serial4/0/1]ip add 15.1.1.5 24
[AR5-Serial4/0/1]int s 3/0/1
[AR5-Serial3/0/1]ip add 25.1.1.5 24
[AR5-Serial3/0/1]int s 4/0/0
[AR5-Serial4/0/0]ip add 35.1.1.5 24
[AR5-Serial4/0/0]int l0
[AR5-LoopBack0]ip add 5.5.5.5 24
[AR5-LoopBack0]q
[AR5]dis ip int b
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
The number of interface that is UP in Physical is 6
The number of interface that is DOWN in Physical is 7
The number of interface that is UP in Protocol is 6
The number of interface that is DOWN in Protocol is 7
Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 45.1.1.5/24 up up
GigabitEthernet0/0/1 unassigned down down
GigabitEthernet0/0/2 unassigned down down
LoopBack0 5.5.5.5/24 up up(s)
NULL0 unassigned up up(s)
Serial1/0/0 unassigned down down
Serial1/0/1 unassigned down down
Serial2/0/0 unassigned down down
Serial2/0/1 unassigned down down
Serial3/0/0 unassigned down down
Serial3/0/1 25.1.1.5/24 up up
Serial4/0/0 35.1.1.5/24 up up
Serial4/0/1 15.1.1.5/24 up up
[AR5]q
[AR5]aaa
[AR5-aaa]local-user xsl password cipher xsl123
Info: Add a new user.
[AR5-aaa]local-user xsl service-type ppp
[AR5-aaa]int s 4/0/1
[AR5-Serial4/0/1]ppp authentication-mode pap
[AR5-Serial4/0/1]q
[AR5-aaa]local-user xsl password cipher xsl123
[AR5-aaa]local-user xsl service-type ppp
[AR5-aaa]int s 3/0/1
[AR5-Serial3/0/1]ppp a
[AR5-Serial3/0/1]ppp authentication-mode chap
[AR5-Serial3/0/1]q
[AR5]int s 4/0/0
[AR5-Serial4/0/0]link-protocol hdlc
Warning: The encapsulation protocol of the link will be changed. Continue? [Y/N]
:y
Mar 30 2024 14:35:11-08:00 AR5 %%01IFNET/4/CHANGE_ENCAP(l)[2]:The user performed
the configuration that will change the encapsulation protocol of the link and t
hen selected Y.
<AR5>save
PC1
PC>ping 192.168.1.254
Ping 192.168.1.254: 32 data bytes, Press Ctrl_C to break
From 192.168.1.1: Destination host unreachable
From 192.168.1.1: Destination host unreachable
From 192.168.1.1: Destination host unreachable
From 192.168.1.1: Destination host unreachable
From 192.168.1.1: Destination host unreachable
--- 192.168.1.254 ping statistics ---
5 packet(s) transmitted
0 packet(s) received
100.00% packet loss
PC>ping 192.168.3.1
Ping 192.168.3.1: 32 data bytes, Press Ctrl_C to break
From 192.168.1.1: Destination host unreachable
From 192.168.1.1: Destination host unreachable
From 192.168.1.1: Destination host unreachable
From 192.168.1.1: Destination host unreachable
From 192.168.1.1: Destination host unreachable
--- 192.168.1.254 ping statistics ---
5 packet(s) transmitted
0 packet(s) received
100.00% packet loss
PC2
五.实验结果
实现公私网通,MGRE和GRE配置,以及pap,chap,hdlc配置生效.