动态路由RIP的配置练习

例图:

要求:

R1-R2-R3-R4-R5运行RIPV2,R6-R7运行RIPV1
1,使用合理地址规划网络,各自创建环回接口
2,R1创建环回172.16.1.1/24 172.16.2.1/24 172.16.3.1/ 24
3,要求R3使用R2访问R1环回
4,减少路由条目数量,增加路由传递安全性
5,R5创建一个环回模拟运营商,不能宣告
6,R1 telnet_R2环回实际telnet到R7上
7,R6-R7路由器不能学习到达R1环回路由
8,全网可达

 分析:

①R1-R2-R3-R4-R5运行RIPV2,R6-R7运行RIPV1 -- RIP的两种version1/2

②使用合理地址规划网络,各自创建环回接口 --- 各路由器有自己的环回接口(不限定ip)

③r1有三个环回 --- 需要手工汇总 +宣告

④要求R3使用R2访问R1环回 --- 设置COST 使得 1-4-3的开销值大与1-2-3

⑤减少路由条目数量,增加路由传递安全性 --- 手工汇总!!!不能忘记空接口!!! 必要设置验证登录

⑥R5创建一个环回模拟运营商,不能宣告 --- ***R5的环回不能宣告 做nat技术

⑦R1 telnet_R2环回实际telnet到R7上 --- 比较复杂 

        #需要保证a. R2到达R7的和R2到达R1之间的开销值最小!!!

                        b.R2设置的telent为R7的端口!!!且为R2的环回

                        c.保证R2和R7能互相学习

⑧R6-R7路由器不能学习到达R1环回路由 --- 设置acl来保证R1的流量被拒绝流入R6

⑨全网可达 --- 设置缺省路由 !!!注意防环

一,基础配置(接口,环路配置) 

//R1  接口和三个环路
[R1]interface g0/0/0
[R1-GigabitEthernet0/0/0]ip address 1.0.0.1 30
[R1-GigabitEthernet0/0/0]interface g0/0/1
[R1-GigabitEthernet0/0/1]ip address 4.0.0.1 30
[R1-GigabitEthernet0/0/1]interface l 0
[R1-LoopBack0]ip address  172.16.1.1 24
[R1-LoopBack0]interface l 1
[R1-LoopBack1]ip address 172.16.2.1 24
[R1-LoopBack1]interface l 2
[R1-LoopBack2]ip address 172.16.3.1 24

//R2 接口和一个单环路
[R2]interface  g0/0/0
[R2-GigabitEthernet0/0/1]interface g0/0/0
[R2-GigabitEthernet0/0/0]ip address  1.0.0.2 30
[R2-GigabitEthernet0/0/0]interface g0/0/1
[R2-GigabitEthernet0/0/1]ip address 2.0.0.1 30
[R2-GigabitEthernet0/0/1]interface  l 0
[R2-LoopBack0]ip address 192.168.2.1 24

//R3 接口和一个单环路
[R3]interface g0/00/0
[R3-GigabitEthernet0/0/0]ip ad	
[R3-GigabitEthernet0/0/0]ip address 2.0.0.2 30
[R3-GigabitEthernet0/0/0]interface g0/00/1
[R3-GigabitEthernet0/0/1]ip address 3.0.0.1 30
[R3-GigabitEthernet0/0/1]interface l 0
[R3-LoopBack0]ip address 192.168.3.1 24

//R4 四个接口和一个单环路    --- 需要扩充一个接口
[R4]interface  g0/0/0
[R4-GigabitEthernet0/0/0]ip address 4.0.0.2 30
[R4-GigabitEthernet0/0/0]interface g0/0/1
[R4-GigabitEthernet0/0/1]ip address 3.0.0.2 30
[R4-GigabitEthernet0/0/1]interface g0/0/2
[R4-GigabitEthernet0/0/2]ip address 5.0.0.1 30
[R4-GigabitEthernet0/0/2]interface g4/0/0
[R4-GigabitEthernet4/0/0]ip address 6.0.0.1 30
[R4-GigabitEthernet4/0/0]interface l 0
[R4-LoopBack0]ip address 192.168.4.1 24

//ISP 接口和环路
[ISP]interface g0/0/0
[ISP-GigabitEthernet0/0/0]ip ad	
[ISP-GigabitEthernet0/0/0]ip address 5.0.0.2 30
[ISP-GigabitEthernet0/0/0]interface l 0
[ISP-LoopBack0]ip address 192.168.5.1 24

//R6 接口和一个单环路
[R6]interface g0/0/0
[R6-GigabitEthernet0/0/0]ip address  6.0.0.2 30
[R6-GigabitEthernet0/0/0]interface g0/0/1
[R6-GigabitEthernet0/0/1]ip address 7.0.0.1 30
[R6-GigabitEthernet0/0/1]interface l 0
[R6-LoopBack0]ip ad	
[R6-LoopBack0]ip address 192.168.6.1 24

//R7 接口和一个单环路
[R7]interface  g0/00/0
[R7-GigabitEthernet0/0/0]ip ad	
[R7-GigabitEthernet0/0/0]ip address  7.0.0.2 30
[R7-GigabitEthernet0/0/0]interface l 0
[R7-LoopBack0]ip address 192.168.7.1 24

 二,配置RIP(需要区分v1和v2)

//RIPV1
//R1
[R1]rip
[R1-rip-1]version 2
[R1-rip-1]net	
[R1-rip-1]network 172.16.0.0
[R1-rip-1]network 1.0.0.0
[R1-rip-1]network 4.0.0.0

//R2
[R2]rip
[R2-rip-1]version 2
[R2-rip-1]network 192.168.2.0
[R2-rip-1]network 1.0.0.0
[R2-rip-1]network 2.0.0.0

//R3
[R3]rip
[R3-rip-1]version 2
[R3-rip-1]network 192.168.3.0
[R3-rip-1]network 2.0.0.0
[R3-rip-1]network 3.0.0.0

//R4
[R4-rip-1]version 2	
[R4-rip-1]network  192.168.4.0
[R4-rip-1]network  5.0.0.0
[R4-rip-1]network 3.0.0.0
[R4-rip-1]network 4.0.0.0
[R4-rip-1]network 6.0.0.0

//不宣告环回
//ISP
[ISP]rip 
[ISP-rip-1]version 2
[ISP-rip-1]network  5.0.0.0

#RIP V1
//R6
[R6]rip
[R6-rip-1]ne	
[R6-rip-1]network 6.0.0.0
[R6-rip-1]network 7.0.0.0
[R6-rip-1]network 192.168.6.0

//R7
[R7]rip
[R7-rip-1]ne	
[R7-rip-1]network 7.0.0.0
[R7-rip-1]network 192.168.7.0

三,配置检查 (防止功亏一篑)

//R1和它的RIP路由表
[R1-rip-1]display this 
[V200R003C00]
#
rip 1
 version 2
 network 172.16.0.0
 network 1.0.0.0
 network 4.0.0.0
#
return
//RIP路由表
[R1]display ip routing-table protocol  rip 
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : RIP
         Destinations : 7        Routes : 7        

RIP routing table status : <Active>
         Destinations : 7        Routes : 7

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

        2.0.0.0/30  RIP     100  1           D   1.0.0.2         GigabitEthernet
0/0/0
        3.0.0.0/30  RIP     100  2           D   1.0.0.2         GigabitEthernet
0/0/0
        5.0.0.0/30  RIP     100  3           D   1.0.0.2         GigabitEthernet
0/0/0
        6.0.0.0/30  RIP     100  3           D   1.0.0.2         GigabitEthernet
0/0/0
    192.168.2.0/24  RIP     100  1           D   1.0.0.2         GigabitEthernet
0/0/0
    192.168.3.0/24  RIP     100  2           D   1.0.0.2         GigabitEthernet
0/0/0
    192.168.4.0/24  RIP     100  3           D   1.0.0.2         GigabitEthernet
0/0/0

RIP routing table status : <Inactive>
         Destinations : 0        Routes : 0


//R7和它的路由表
[R7-rip-1]display this
[V200R003C00]
#
rip 1
 version 1
 network 7.0.0.0
 network 192.168.7.0
#
return

//R7的RIP路由表
[R7-rip-1]display ip routing-table protocol rip
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : RIP
         Destinations : 2        Routes : 2        

RIP routing table status : <Active>
         Destinations : 2        Routes : 2

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

        6.0.0.0/8   RIP     100  1           D   7.0.0.1         GigabitEthernet
0/0/0
    192.168.6.0/24  RIP     100  1           D   7.0.0.1         GigabitEthernet
0/0/0

RIP routing table status : <Inactive>
         Destinations : 0        Routes : 0

//R4和它的RIP路由表
[R4-rip-1]display this 
[V200R003C00]
#
rip 1
 version 2
 network 192.168.4.0
 network 5.0.0.0
 network 3.0.0.0
 network 4.0.0.0
 network 6.0.0.0
#
return

//RIP路由表
[R4-rip-1]display ip routing-table protocol  rip 
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : RIP
         Destinations : 7        Routes : 7        

RIP routing table status : <Active>
         Destinations : 7        Routes : 7

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

        1.0.0.0/30  RIP     100  2           D   3.0.0.1         GigabitEthernet
0/0/1
        2.0.0.0/30  RIP     100  1           D   3.0.0.1         GigabitEthernet
0/0/1
     172.16.1.0/24  RIP     100  3           D   3.0.0.1         GigabitEthernet
0/0/1
     172.16.2.0/24  RIP     100  3           D   3.0.0.1         GigabitEthernet
0/0/1
     172.16.3.0/24  RIP     100  3           D   3.0.0.1         GigabitEthernet
0/0/1
    192.168.2.0/24  RIP     100  2           D   3.0.0.1         GigabitEthernet
0/0/1
    192.168.3.0/24  RIP     100  1           D   3.0.0.1         GigabitEthernet
0/0/1

RIP routing table status : <Inactive>
         Destinations : 0        Routes : 0

 五,路由汇总(注意防环!!!)

//需要在两个接口都要设置
[R1]interface g0/0/0
[R1-GigabitEthernet0/0/0]rip summary-address 172.16.0.0 255.255.252.0
[R1-GigabitEthernet0/0/0]interface g0/0/1
[R1-GigabitEthernet0/0/1]rip summary-address 172.16.0.0 255.255.252.0
[R1]ip route-static 172.16.0.0 22 NULL 0

六,配置路由ACL(1-2-3) 

//选择在R3上设置 抓取R1的数据 
[R3]acl 2000
[R3-acl-basic-2000]rule permit source 172.16.0.0  0

//查看配置,小心谨慎
[R3-acl-basic-2000]display this 
[V200R003C00]
#
acl number 2000  
 rule 5 permit source 172.16.0.0 0 
#
return
[R3-acl-basic-2000]q

//配置入接口增加cost -- 以防万一,我设置1-2-3为cost+2  1-4-3为cost+5
[R3]interface g0/0/1
[R3-GigabitEthernet0/0/1]rip metricin 2000 5 
[R3]interface g0/0/0
[R3-GigabitEthernet0/0/0]rip metricin 2000 2

//检查
[R3-GigabitEthernet0/0/0]display ip routing-table protocol rip
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : RIP
         Destinations : 7        Routes : 7        

RIP routing table status : <Active>
         Destinations : 7        Routes : 7

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

        1.0.0.0/30  RIP     100  1           D   2.0.0.1         GigabitEthernet
0/0/0
        4.0.0.0/30  RIP     100  1           D   3.0.0.2         GigabitEthernet
0/0/1
        5.0.0.0/30  RIP     100  1           D   3.0.0.2         GigabitEthernet
0/0/1
        6.0.0.0/30  RIP     100  1           D   3.0.0.2         GigabitEthernet
0/0/1
     172.16.0.0/22  RIP     100  4           D   2.0.0.1         GigabitEthernet
0/0/0
    192.168.2.0/24  RIP     100  1           D   2.0.0.1         GigabitEthernet
0/0/0
    192.168.4.0/24  RIP     100  1           D   3.0.0.2         GigabitEthernet
0/0/1

RIP routing table status : <Inactive>
         Destinations : 0        Routes : 0

//此时1-2-3的cost为 2+2 --- 4

七,设置R1的telent映射①

//首先保证R2可以telentR7

//我选择在R6的入接口上设置为version2
[R6]interface g0/0/0
[R6-GigabitEthernet0/0/0]rip version  2
[R6-GigabitEthernet0/0/0]q

//此时R6也开始刷新V2的路由
[R6]display  ip routing-table protocol  rip 
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : RIP
         Destinations : 10       Routes : 10       

RIP routing table status : <Active>
         Destinations : 10       Routes : 10

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

        1.0.0.0/30  RIP     100  3           D   6.0.0.1         GigabitEthernet
0/0/0
        2.0.0.0/30  RIP     100  2           D   6.0.0.1         GigabitEthernet
0/0/0
        3.0.0.0/30  RIP     100  1           D   6.0.0.1         GigabitEthernet
0/0/0
        4.0.0.0/30  RIP     100  1           D   6.0.0.1         GigabitEthernet
0/0/0
        5.0.0.0/30  RIP     100  1           D   6.0.0.1         GigabitEthernet
0/0/0
     172.16.0.0/22  RIP     100  6           D   6.0.0.1         GigabitEthernet
0/0/0
    192.168.2.0/24  RIP     100  3           D   6.0.0.1         GigabitEthernet
0/0/0
    192.168.3.0/24  RIP     100  2           D   6.0.0.1         GigabitEthernet
0/0/0
    192.168.4.0/24  RIP     100  1           D   6.0.0.1         GigabitEthernet
0/0/0
    192.168.7.0/24  RIP     100  1           D   7.0.0.2         GigabitEthernet
0/0/1

RIP routing table status : <Inactive>
         Destinations : 0        Routes : 0

//以防万一,我在R7上也查看
[R7]display ip routing-table protocol  rip 
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : RIP
         Destinations : 11       Routes : 11       

RIP routing table status : <Active>
         Destinations : 11       Routes : 11

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

        1.0.0.0/8   RIP     100  4           D   7.0.0.1         GigabitEthernet
0/0/0
        2.0.0.0/8   RIP     100  3           D   7.0.0.1         GigabitEthernet
0/0/0
        3.0.0.0/8   RIP     100  2           D   7.0.0.1         GigabitEthernet
0/0/0
        4.0.0.0/8   RIP     100  2           D   7.0.0.1         GigabitEthernet
0/0/0
        5.0.0.0/8   RIP     100  2           D   7.0.0.1         GigabitEthernet
0/0/0
        6.0.0.0/8   RIP     100  1           D   7.0.0.1         GigabitEthernet
0/0/0
     172.16.0.0/16  RIP     100  7           D   7.0.0.1         GigabitEthernet
0/0/0
    192.168.2.0/24  RIP     100  4           D   7.0.0.1         GigabitEthernet
0/0/0
    192.168.3.0/24  RIP     100  3           D   7.0.0.1         GigabitEthernet
0/0/0
    192.168.4.0/24  RIP     100  2           D   7.0.0.1         GigabitEthernet
0/0/0
    192.168.6.0/24  RIP     100  1           D   7.0.0.1         GigabitEthernet
0/0/0

RIP routing table status : <Inactive>
         Destinations : 0        Routes : 0

//在R2上尝试去pingR7 --ok
[R2]ping 7.0.0.2
  PING 7.0.0.2: 56  data bytes, press CTRL_C to break
    Reply from 7.0.0.2: bytes=56 Sequence=1 ttl=252 time=40 ms
    Reply from 7.0.0.2: bytes=56 Sequence=2 ttl=252 time=30 ms
    Reply from 7.0.0.2: bytes=56 Sequence=3 ttl=252 time=40 ms
    Reply from 7.0.0.2: bytes=56 Sequence=4 ttl=252 time=50 ms
    Reply from 7.0.0.2: bytes=56 Sequence=5 ttl=252 time=40 ms

  --- 7.0.0.2 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 30/40/50 ms

 七,设置R1的telent映射 ②

//为了保证R2去R7的cost最小,且R7去R1的cost也最小
//保证为R2是必经之路!!!
// 2*-3-4-5-6-7    7-6-5-4-3-2*-1

//我在R4上设置到R1的路由cost+10 --- 加狠点
[R4]acl 2000

//抓取R7的返回流量
[R4-acl-basic-2000]rule permit source 7.0.0.0 0
[R4-acl-basic-2000]q
[R4]interface g0/0/0
[R4-GigabitEthernet0/0/0]rip metricout 2000 10

//此时再去查看R4的rip表
//到达172.16.0.0/22的cost为5 ,且走的是 3.0.0.1  #所以前面的cost得加狠点
[R4]display ip routing-table protocol  rip 
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : RIP
         Destinations : 8        Routes : 8        

RIP routing table status : <Active>
         Destinations : 8        Routes : 8

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

        1.0.0.0/30  RIP     100  2           D   3.0.0.1         GigabitEthernet
0/0/1
        2.0.0.0/30  RIP     100  1           D   3.0.0.1         GigabitEthernet
0/0/1
        7.0.0.0/30  RIP     100  1           D   6.0.0.2         GigabitEthernet
4/0/0
     172.16.0.0/22  RIP     100  5           D   3.0.0.1         GigabitEthernet
0/0/1
    192.168.2.0/24  RIP     100  2           D   3.0.0.1         GigabitEthernet
0/0/1
    192.168.3.0/24  RIP     100  1           D   3.0.0.1         GigabitEthernet
0/0/1
    192.168.6.0/24  RIP     100  1           D   6.0.0.2         GigabitEthernet
4/0/0
    192.168.7.0/24  RIP     100  2           D   6.0.0.2         GigabitEthernet
4/0/0

RIP routing table status : <Inactive>
         Destinations : 0        Routes : 0

 七,设置R1的telent映射 ③

//主要做认证   #用户为lxb  密码为123456  密文

[R7]user-interface vty  0 4
[R7-ui-vty0-4]authentication-mode aaa
[R7-ui-vty0-4]q
[R7]aaa
[R7-aaa]local-user lxb privilege level 15 password cipher 123456
Info: Add a new user.

//检查,以防万一
[R7-aaa]display  this 
[V200R003C00]
#
aaa 
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default 
 domain default_admin 
 local-user lxb password cipher %$%$epUpT4#e("xqEmQl1GiARD5$%$%$
 local-user lxb privilege level 15
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
return

//然后去R2的接口做映射  #这个为端口映射
[R2-GigabitEthernet0/0/0]nat server protocol tcp global current-interface 23 ins
ide 7.0.0.2 23
Warning:The port 23 is well-known port. If you continue it may cause function fa
ilure.
Are you sure to continue?[Y/N]:y

//检查
[R2-GigabitEthernet0/0/0]display this 
[V200R003C00]
#
interface GigabitEthernet0/0/0
 ip address 1.0.0.2 255.255.255.252 
 nat server protocol tcp global current-interface telnet inside 7.0.0.2 23
#
return

        #这边有点操蛋,碰到几个问题,后面会总结①

八,设置nat技术

//众所周知,流量是相互的,所以我设置一个静态缺省,通完R4的接口
[ISP]ip route-static   0.0.0.0 0 5.0.0.1  

//然后就是在R4上配置缺省和ACL策略了

//缺省
[R4]ip route-static 0.0.0.0 0 5.0.0.2
[R4]return
[R4]rip 
[R4-rip-1]default-route originate 

//nat策略
[R4]nat address-group 1 192.168.5.10 192.168.5.20
[R4]acl 2002
[R4-acl-basic-2002]rule permit source any 
[R4-acl-basic-2002]q
[R4]interface g0/0/2
[R4-GigabitEthernet0/0/2]nat outbound 2002 address-group 1 
[R4-GigabitEthernet0/0/2]q
        #这边出了个操蛋的事情,标记②

九,配置R1不能被R6和R7学习

[R6]acl 2000
[R6-acl-basic-2000]rule 5 deny source 172.16.0.0 0 
[R6-acl-basic-2000]display this 
[V200R003C00]
#
acl number 2000  
 rule 5 deny source 172.16.0.0 0 
#
return
[R6-acl-basic-2000]rule permit source any 
[R6-rip-1]filter-policy 2000 import
    #这边看我操作就是有点操蛋,出来个问题,标记③

//此时去R6和R7的路由表上刷新
[R6]display ip routing-table protocol rip
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : RIP
         Destinations : 10       Routes : 10       

RIP routing table status : <Active>
         Destinations : 10       Routes : 10

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

        0.0.0.0/0   RIP     100  1           D   6.0.0.1         GigabitEthernet
0/0/0
        1.0.0.0/30  RIP     100  3           D   6.0.0.1         GigabitEthernet
0/0/0
        2.0.0.0/30  RIP     100  2           D   6.0.0.1         GigabitEthernet
0/0/0
        3.0.0.0/30  RIP     100  1           D   6.0.0.1         GigabitEthernet
0/0/0
        4.0.0.0/30  RIP     100  1           D   6.0.0.1         GigabitEthernet
0/0/0
        5.0.0.0/30  RIP     100  1           D   6.0.0.1         GigabitEthernet
0/0/0
    192.168.2.0/24  RIP     100  3           D   6.0.0.1         GigabitEthernet
0/0/0
    192.168.3.0/24  RIP     100  2           D   6.0.0.1         GigabitEthernet
0/0/0
    192.168.4.0/24  RIP     100  1           D   6.0.0.1         GigabitEthernet
0/0/0
    192.168.7.0/24  RIP     100  1           D   7.0.0.2         GigabitEthernet
0/0/1

RIP routing table status : <Inactive>
         Destinations : 0        Routes : 0

<R7>display ip routing-table protocol rip
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : RIP
         Destinations : 11       Routes : 11       

RIP routing table status : <Active>
         Destinations : 11       Routes : 11

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

        0.0.0.0/0   RIP     100  2           D   7.0.0.1         GigabitEthernet
0/0/0
        1.0.0.0/8   RIP     100  4           D   7.0.0.1         GigabitEthernet
0/0/0
        2.0.0.0/8   RIP     100  3           D   7.0.0.1         GigabitEthernet
0/0/0
        3.0.0.0/8   RIP     100  2           D   7.0.0.1         GigabitEthernet
0/0/0
        4.0.0.0/8   RIP     100  2           D   7.0.0.1         GigabitEthernet
0/0/0
        5.0.0.0/8   RIP     100  2           D   7.0.0.1         GigabitEthernet
0/0/0
        6.0.0.0/8   RIP     100  1           D   7.0.0.1         GigabitEthernet
0/0/0
    192.168.2.0/24  RIP     100  4           D   7.0.0.1         GigabitEthernet
0/0/0
    192.168.3.0/24  RIP     100  3           D   7.0.0.1         GigabitEthernet
0/0/0
    192.168.4.0/24  RIP     100  2           D   7.0.0.1         GigabitEthernet
0/0/0
    192.168.6.0/24  RIP     100  1           D   7.0.0.1         GigabitEthernet
0/0/0

RIP routing table status : <Inactive>
         Destinations : 0        Routes : 0

//此时失去172.16.0.0/22这个路由信息

十,验证

//做了这么久配置,检验成果的时候

//R1ping R7
<R1>ping 192.168.7.1
  PING 192.168.7.1: 56  data bytes, press CTRL_C to break
    Reply from 192.168.7.1: bytes=56 Sequence=1 ttl=251 time=70 ms
    Reply from 192.168.7.1: bytes=56 Sequence=2 ttl=251 time=40 ms
    Reply from 192.168.7.1: bytes=56 Sequence=3 ttl=251 time=60 ms
    Reply from 192.168.7.1: bytes=56 Sequence=4 ttl=251 time=50 ms
    Reply from 192.168.7.1: bytes=56 Sequence=5 ttl=251 time=40 ms

//R4 ping外网
<R4>ping 192.168.5.1
  PING 192.168.5.1: 56  data bytes, press CTRL_C to break
    Reply from 192.168.5.1: bytes=56 Sequence=1 ttl=255 time=20 ms
    Reply from 192.168.5.1: bytes=56 Sequence=2 ttl=255 time=10 ms
    Reply from 192.168.5.1: bytes=56 Sequence=3 ttl=255 time=20 ms
    Reply from 192.168.5.1: bytes=56 Sequence=4 ttl=255 time=30 ms
    Reply from 192.168.5.1: bytes=56 Sequence=5 ttl=255 time=20 ms

  --- 192.168.5.1 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 10/20/30 ms

//R1telent R2
<R1>telnet 192.168.2.2
  Press CTRL_] to quit telnet mode
  Trying 192.168.2.2 ...
  Connected to 192.168.2.2 ...

Login authentication


Username:lxb
Password:
  ----------------------------------------------------------------------------- 
    
  User last login information:     
  -----------------------------------------------------------------------------
  Access Type: Telnet      
  IP-Address : 7.0.0.1     
  Time       : 2022-01-06 22:54:38-08:00     
  -----------------------------------------------------------------------------
<R7>
<R7>q

//基本完成要求

问题总结:

①三个配置的问题:

①做R2的端口映射时候,我配置的是R2的g0/0/0接口的配置,但是要求是R2的环回
    配置问题:我在telent环回时,发现192.168.2.1无法使用,后在帮助下,得以修改
    原因:华为的ENSP会存在环回无法ping通(虚拟地址)
<R1>ping 192.168.2.1
  PING 192.168.2.1: 56  data bytes, press CTRL_C to break
    Reply from 192.168.2.1: bytes=56 Sequence=1 ttl=255 time=20 ms
    Reply from 192.168.2.1: bytes=56 Sequence=2 ttl=255 time=20 ms
    Reply from 192.168.2.1: bytes=56 Sequence=3 ttl=255 time=40 ms
    Reply from 192.168.2.1: bytes=56 Sequence=4 ttl=255 time=30 ms
    Reply from 192.168.2.1: bytes=56 Sequence=5 ttl=255 time=20 ms

  --- 192.168.2.1 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 20/26/40 ms

<R1>ping 192.168.2.2
  PING 192.168.2.2: 56  data bytes, press CTRL_C to break
    Request time out
    Request time out
    Request time out
    Request time out

  --- 192.168.2.2 ping statistics ---
    4 packet(s) transmitted
    0 packet(s) received
    100.00% packet loss
    还有就是在配置时,是目标地址和对应的端口好 我这边写成掩码了 -- 掌嘴
 # nat server protocol tcp global current-interface telnet inside 7.0.0.2 30  错误
 # nat server protocol tcp global 192.168.2.2 telnet inside 7.0.0.2 telnet    正确

②在做nat宣告的时候,我没有去设置缺省和ISP的静态路由,导致一直丢包
    后来在帮助下,写了ISP的静态路由

③这个是最无语的问题,我在设置拒绝的deny ACL策略时,没有设置允许方向的permit
    导致我的R6和R7一直无法刷新!!!

②关于实验中存在的问题:

1.配置宣告的时候
华为的ENSP默认的RIP是version1
我在配置是,强制使用了V1,并且在配置时,调整成了V2模式,所以导致R6/R7无法正常刷出RIP信息

解决方案:
在R6的入接口G0/0/0上设置了rip version  2才成功

2.配置nat的时候,我一直认为动态路由不宣告ISP,只靠缺省就可以获取isp的网段信息
但是!!! 需要在isp内设置一条静态路由,否则无法产生回包信息

3.在配置宣告的时候,配错ip
导致一直存在一个旧的ip无法被刷掉,解决方式:undo 然后重新宣告

4.做telent的问题,环回问题!!!

5.关于RIP的边界问题
我原以为RIPV1和RIPV2是两个区域,需要同时设置两个缺省路由,才能去获取nat的网段
  ---> 没有区分RIP的边界和nat的边界路由 --- 两个概念不一样!!!

完毕!

  • 1
    点赞
  • 4
    收藏
    觉得还不错? 一键收藏
  • 0
    评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值