例图:
要求:
R1-R2-R3-R4-R5运行RIPV2,R6-R7运行RIPV1
1,使用合理地址规划网络,各自创建环回接口
2,R1创建环回172.16.1.1/24 172.16.2.1/24 172.16.3.1/ 24
3,要求R3使用R2访问R1环回
4,减少路由条目数量,增加路由传递安全性
5,R5创建一个环回模拟运营商,不能宣告
6,R1 telnet_R2环回实际telnet到R7上
7,R6-R7路由器不能学习到达R1环回路由
8,全网可达
分析:
①R1-R2-R3-R4-R5运行RIPV2,R6-R7运行RIPV1 -- RIP的两种version1/2
②使用合理地址规划网络,各自创建环回接口 --- 各路由器有自己的环回接口(不限定ip)
③r1有三个环回 --- 需要手工汇总 +宣告
④要求R3使用R2访问R1环回 --- 设置COST 使得 1-4-3的开销值大与1-2-3
⑤减少路由条目数量,增加路由传递安全性 --- 手工汇总!!!不能忘记空接口!!! 必要设置验证登录
⑥R5创建一个环回模拟运营商,不能宣告 --- ***R5的环回不能宣告 做nat技术
⑦R1 telnet_R2环回实际telnet到R7上 --- 比较复杂
#需要保证a. R2到达R7的和R2到达R1之间的开销值最小!!!
b.R2设置的telent为R7的端口!!!且为R2的环回
c.保证R2和R7能互相学习
⑧R6-R7路由器不能学习到达R1环回路由 --- 设置acl来保证R1的流量被拒绝流入R6
⑨全网可达 --- 设置缺省路由 !!!注意防环
一,基础配置(接口,环路配置)
//R1 接口和三个环路
[R1]interface g0/0/0
[R1-GigabitEthernet0/0/0]ip address 1.0.0.1 30
[R1-GigabitEthernet0/0/0]interface g0/0/1
[R1-GigabitEthernet0/0/1]ip address 4.0.0.1 30
[R1-GigabitEthernet0/0/1]interface l 0
[R1-LoopBack0]ip address 172.16.1.1 24
[R1-LoopBack0]interface l 1
[R1-LoopBack1]ip address 172.16.2.1 24
[R1-LoopBack1]interface l 2
[R1-LoopBack2]ip address 172.16.3.1 24
//R2 接口和一个单环路
[R2]interface g0/0/0
[R2-GigabitEthernet0/0/1]interface g0/0/0
[R2-GigabitEthernet0/0/0]ip address 1.0.0.2 30
[R2-GigabitEthernet0/0/0]interface g0/0/1
[R2-GigabitEthernet0/0/1]ip address 2.0.0.1 30
[R2-GigabitEthernet0/0/1]interface l 0
[R2-LoopBack0]ip address 192.168.2.1 24
//R3 接口和一个单环路
[R3]interface g0/00/0
[R3-GigabitEthernet0/0/0]ip ad
[R3-GigabitEthernet0/0/0]ip address 2.0.0.2 30
[R3-GigabitEthernet0/0/0]interface g0/00/1
[R3-GigabitEthernet0/0/1]ip address 3.0.0.1 30
[R3-GigabitEthernet0/0/1]interface l 0
[R3-LoopBack0]ip address 192.168.3.1 24
//R4 四个接口和一个单环路 --- 需要扩充一个接口
[R4]interface g0/0/0
[R4-GigabitEthernet0/0/0]ip address 4.0.0.2 30
[R4-GigabitEthernet0/0/0]interface g0/0/1
[R4-GigabitEthernet0/0/1]ip address 3.0.0.2 30
[R4-GigabitEthernet0/0/1]interface g0/0/2
[R4-GigabitEthernet0/0/2]ip address 5.0.0.1 30
[R4-GigabitEthernet0/0/2]interface g4/0/0
[R4-GigabitEthernet4/0/0]ip address 6.0.0.1 30
[R4-GigabitEthernet4/0/0]interface l 0
[R4-LoopBack0]ip address 192.168.4.1 24
//ISP 接口和环路
[ISP]interface g0/0/0
[ISP-GigabitEthernet0/0/0]ip ad
[ISP-GigabitEthernet0/0/0]ip address 5.0.0.2 30
[ISP-GigabitEthernet0/0/0]interface l 0
[ISP-LoopBack0]ip address 192.168.5.1 24
//R6 接口和一个单环路
[R6]interface g0/0/0
[R6-GigabitEthernet0/0/0]ip address 6.0.0.2 30
[R6-GigabitEthernet0/0/0]interface g0/0/1
[R6-GigabitEthernet0/0/1]ip address 7.0.0.1 30
[R6-GigabitEthernet0/0/1]interface l 0
[R6-LoopBack0]ip ad
[R6-LoopBack0]ip address 192.168.6.1 24
//R7 接口和一个单环路
[R7]interface g0/00/0
[R7-GigabitEthernet0/0/0]ip ad
[R7-GigabitEthernet0/0/0]ip address 7.0.0.2 30
[R7-GigabitEthernet0/0/0]interface l 0
[R7-LoopBack0]ip address 192.168.7.1 24
二,配置RIP(需要区分v1和v2)
//RIPV1
//R1
[R1]rip
[R1-rip-1]version 2
[R1-rip-1]net
[R1-rip-1]network 172.16.0.0
[R1-rip-1]network 1.0.0.0
[R1-rip-1]network 4.0.0.0
//R2
[R2]rip
[R2-rip-1]version 2
[R2-rip-1]network 192.168.2.0
[R2-rip-1]network 1.0.0.0
[R2-rip-1]network 2.0.0.0
//R3
[R3]rip
[R3-rip-1]version 2
[R3-rip-1]network 192.168.3.0
[R3-rip-1]network 2.0.0.0
[R3-rip-1]network 3.0.0.0
//R4
[R4-rip-1]version 2
[R4-rip-1]network 192.168.4.0
[R4-rip-1]network 5.0.0.0
[R4-rip-1]network 3.0.0.0
[R4-rip-1]network 4.0.0.0
[R4-rip-1]network 6.0.0.0
//不宣告环回
//ISP
[ISP]rip
[ISP-rip-1]version 2
[ISP-rip-1]network 5.0.0.0
#RIP V1
//R6
[R6]rip
[R6-rip-1]ne
[R6-rip-1]network 6.0.0.0
[R6-rip-1]network 7.0.0.0
[R6-rip-1]network 192.168.6.0
//R7
[R7]rip
[R7-rip-1]ne
[R7-rip-1]network 7.0.0.0
[R7-rip-1]network 192.168.7.0
三,配置检查 (防止功亏一篑)
//R1和它的RIP路由表
[R1-rip-1]display this
[V200R003C00]
#
rip 1
version 2
network 172.16.0.0
network 1.0.0.0
network 4.0.0.0
#
return
//RIP路由表
[R1]display ip routing-table protocol rip
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : RIP
Destinations : 7 Routes : 7
RIP routing table status : <Active>
Destinations : 7 Routes : 7
Destination/Mask Proto Pre Cost Flags NextHop Interface
2.0.0.0/30 RIP 100 1 D 1.0.0.2 GigabitEthernet
0/0/0
3.0.0.0/30 RIP 100 2 D 1.0.0.2 GigabitEthernet
0/0/0
5.0.0.0/30 RIP 100 3 D 1.0.0.2 GigabitEthernet
0/0/0
6.0.0.0/30 RIP 100 3 D 1.0.0.2 GigabitEthernet
0/0/0
192.168.2.0/24 RIP 100 1 D 1.0.0.2 GigabitEthernet
0/0/0
192.168.3.0/24 RIP 100 2 D 1.0.0.2 GigabitEthernet
0/0/0
192.168.4.0/24 RIP 100 3 D 1.0.0.2 GigabitEthernet
0/0/0
RIP routing table status : <Inactive>
Destinations : 0 Routes : 0
//R7和它的路由表
[R7-rip-1]display this
[V200R003C00]
#
rip 1
version 1
network 7.0.0.0
network 192.168.7.0
#
return
//R7的RIP路由表
[R7-rip-1]display ip routing-table protocol rip
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : RIP
Destinations : 2 Routes : 2
RIP routing table status : <Active>
Destinations : 2 Routes : 2
Destination/Mask Proto Pre Cost Flags NextHop Interface
6.0.0.0/8 RIP 100 1 D 7.0.0.1 GigabitEthernet
0/0/0
192.168.6.0/24 RIP 100 1 D 7.0.0.1 GigabitEthernet
0/0/0
RIP routing table status : <Inactive>
Destinations : 0 Routes : 0
//R4和它的RIP路由表
[R4-rip-1]display this
[V200R003C00]
#
rip 1
version 2
network 192.168.4.0
network 5.0.0.0
network 3.0.0.0
network 4.0.0.0
network 6.0.0.0
#
return
//RIP路由表
[R4-rip-1]display ip routing-table protocol rip
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : RIP
Destinations : 7 Routes : 7
RIP routing table status : <Active>
Destinations : 7 Routes : 7
Destination/Mask Proto Pre Cost Flags NextHop Interface
1.0.0.0/30 RIP 100 2 D 3.0.0.1 GigabitEthernet
0/0/1
2.0.0.0/30 RIP 100 1 D 3.0.0.1 GigabitEthernet
0/0/1
172.16.1.0/24 RIP 100 3 D 3.0.0.1 GigabitEthernet
0/0/1
172.16.2.0/24 RIP 100 3 D 3.0.0.1 GigabitEthernet
0/0/1
172.16.3.0/24 RIP 100 3 D 3.0.0.1 GigabitEthernet
0/0/1
192.168.2.0/24 RIP 100 2 D 3.0.0.1 GigabitEthernet
0/0/1
192.168.3.0/24 RIP 100 1 D 3.0.0.1 GigabitEthernet
0/0/1
RIP routing table status : <Inactive>
Destinations : 0 Routes : 0
五,路由汇总(注意防环!!!)
//需要在两个接口都要设置
[R1]interface g0/0/0
[R1-GigabitEthernet0/0/0]rip summary-address 172.16.0.0 255.255.252.0
[R1-GigabitEthernet0/0/0]interface g0/0/1
[R1-GigabitEthernet0/0/1]rip summary-address 172.16.0.0 255.255.252.0
[R1]ip route-static 172.16.0.0 22 NULL 0
六,配置路由ACL(1-2-3)
//选择在R3上设置 抓取R1的数据
[R3]acl 2000
[R3-acl-basic-2000]rule permit source 172.16.0.0 0
//查看配置,小心谨慎
[R3-acl-basic-2000]display this
[V200R003C00]
#
acl number 2000
rule 5 permit source 172.16.0.0 0
#
return
[R3-acl-basic-2000]q
//配置入接口增加cost -- 以防万一,我设置1-2-3为cost+2 1-4-3为cost+5
[R3]interface g0/0/1
[R3-GigabitEthernet0/0/1]rip metricin 2000 5
[R3]interface g0/0/0
[R3-GigabitEthernet0/0/0]rip metricin 2000 2
//检查
[R3-GigabitEthernet0/0/0]display ip routing-table protocol rip
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : RIP
Destinations : 7 Routes : 7
RIP routing table status : <Active>
Destinations : 7 Routes : 7
Destination/Mask Proto Pre Cost Flags NextHop Interface
1.0.0.0/30 RIP 100 1 D 2.0.0.1 GigabitEthernet
0/0/0
4.0.0.0/30 RIP 100 1 D 3.0.0.2 GigabitEthernet
0/0/1
5.0.0.0/30 RIP 100 1 D 3.0.0.2 GigabitEthernet
0/0/1
6.0.0.0/30 RIP 100 1 D 3.0.0.2 GigabitEthernet
0/0/1
172.16.0.0/22 RIP 100 4 D 2.0.0.1 GigabitEthernet
0/0/0
192.168.2.0/24 RIP 100 1 D 2.0.0.1 GigabitEthernet
0/0/0
192.168.4.0/24 RIP 100 1 D 3.0.0.2 GigabitEthernet
0/0/1
RIP routing table status : <Inactive>
Destinations : 0 Routes : 0
//此时1-2-3的cost为 2+2 --- 4
七,设置R1的telent映射①
//首先保证R2可以telentR7
//我选择在R6的入接口上设置为version2
[R6]interface g0/0/0
[R6-GigabitEthernet0/0/0]rip version 2
[R6-GigabitEthernet0/0/0]q
//此时R6也开始刷新V2的路由
[R6]display ip routing-table protocol rip
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : RIP
Destinations : 10 Routes : 10
RIP routing table status : <Active>
Destinations : 10 Routes : 10
Destination/Mask Proto Pre Cost Flags NextHop Interface
1.0.0.0/30 RIP 100 3 D 6.0.0.1 GigabitEthernet
0/0/0
2.0.0.0/30 RIP 100 2 D 6.0.0.1 GigabitEthernet
0/0/0
3.0.0.0/30 RIP 100 1 D 6.0.0.1 GigabitEthernet
0/0/0
4.0.0.0/30 RIP 100 1 D 6.0.0.1 GigabitEthernet
0/0/0
5.0.0.0/30 RIP 100 1 D 6.0.0.1 GigabitEthernet
0/0/0
172.16.0.0/22 RIP 100 6 D 6.0.0.1 GigabitEthernet
0/0/0
192.168.2.0/24 RIP 100 3 D 6.0.0.1 GigabitEthernet
0/0/0
192.168.3.0/24 RIP 100 2 D 6.0.0.1 GigabitEthernet
0/0/0
192.168.4.0/24 RIP 100 1 D 6.0.0.1 GigabitEthernet
0/0/0
192.168.7.0/24 RIP 100 1 D 7.0.0.2 GigabitEthernet
0/0/1
RIP routing table status : <Inactive>
Destinations : 0 Routes : 0
//以防万一,我在R7上也查看
[R7]display ip routing-table protocol rip
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : RIP
Destinations : 11 Routes : 11
RIP routing table status : <Active>
Destinations : 11 Routes : 11
Destination/Mask Proto Pre Cost Flags NextHop Interface
1.0.0.0/8 RIP 100 4 D 7.0.0.1 GigabitEthernet
0/0/0
2.0.0.0/8 RIP 100 3 D 7.0.0.1 GigabitEthernet
0/0/0
3.0.0.0/8 RIP 100 2 D 7.0.0.1 GigabitEthernet
0/0/0
4.0.0.0/8 RIP 100 2 D 7.0.0.1 GigabitEthernet
0/0/0
5.0.0.0/8 RIP 100 2 D 7.0.0.1 GigabitEthernet
0/0/0
6.0.0.0/8 RIP 100 1 D 7.0.0.1 GigabitEthernet
0/0/0
172.16.0.0/16 RIP 100 7 D 7.0.0.1 GigabitEthernet
0/0/0
192.168.2.0/24 RIP 100 4 D 7.0.0.1 GigabitEthernet
0/0/0
192.168.3.0/24 RIP 100 3 D 7.0.0.1 GigabitEthernet
0/0/0
192.168.4.0/24 RIP 100 2 D 7.0.0.1 GigabitEthernet
0/0/0
192.168.6.0/24 RIP 100 1 D 7.0.0.1 GigabitEthernet
0/0/0
RIP routing table status : <Inactive>
Destinations : 0 Routes : 0
//在R2上尝试去pingR7 --ok
[R2]ping 7.0.0.2
PING 7.0.0.2: 56 data bytes, press CTRL_C to break
Reply from 7.0.0.2: bytes=56 Sequence=1 ttl=252 time=40 ms
Reply from 7.0.0.2: bytes=56 Sequence=2 ttl=252 time=30 ms
Reply from 7.0.0.2: bytes=56 Sequence=3 ttl=252 time=40 ms
Reply from 7.0.0.2: bytes=56 Sequence=4 ttl=252 time=50 ms
Reply from 7.0.0.2: bytes=56 Sequence=5 ttl=252 time=40 ms
--- 7.0.0.2 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 30/40/50 ms
七,设置R1的telent映射 ②
//为了保证R2去R7的cost最小,且R7去R1的cost也最小
//保证为R2是必经之路!!!
// 2*-3-4-5-6-7 7-6-5-4-3-2*-1
//我在R4上设置到R1的路由cost+10 --- 加狠点
[R4]acl 2000
//抓取R7的返回流量
[R4-acl-basic-2000]rule permit source 7.0.0.0 0
[R4-acl-basic-2000]q
[R4]interface g0/0/0
[R4-GigabitEthernet0/0/0]rip metricout 2000 10
//此时再去查看R4的rip表
//到达172.16.0.0/22的cost为5 ,且走的是 3.0.0.1 #所以前面的cost得加狠点
[R4]display ip routing-table protocol rip
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : RIP
Destinations : 8 Routes : 8
RIP routing table status : <Active>
Destinations : 8 Routes : 8
Destination/Mask Proto Pre Cost Flags NextHop Interface
1.0.0.0/30 RIP 100 2 D 3.0.0.1 GigabitEthernet
0/0/1
2.0.0.0/30 RIP 100 1 D 3.0.0.1 GigabitEthernet
0/0/1
7.0.0.0/30 RIP 100 1 D 6.0.0.2 GigabitEthernet
4/0/0
172.16.0.0/22 RIP 100 5 D 3.0.0.1 GigabitEthernet
0/0/1
192.168.2.0/24 RIP 100 2 D 3.0.0.1 GigabitEthernet
0/0/1
192.168.3.0/24 RIP 100 1 D 3.0.0.1 GigabitEthernet
0/0/1
192.168.6.0/24 RIP 100 1 D 6.0.0.2 GigabitEthernet
4/0/0
192.168.7.0/24 RIP 100 2 D 6.0.0.2 GigabitEthernet
4/0/0
RIP routing table status : <Inactive>
Destinations : 0 Routes : 0
七,设置R1的telent映射 ③
//主要做认证 #用户为lxb 密码为123456 密文
[R7]user-interface vty 0 4
[R7-ui-vty0-4]authentication-mode aaa
[R7-ui-vty0-4]q
[R7]aaa
[R7-aaa]local-user lxb privilege level 15 password cipher 123456
Info: Add a new user.
//检查,以防万一
[R7-aaa]display this
[V200R003C00]
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user lxb password cipher %$%$epUpT4#e("xqEmQl1GiARD5$%$%$
local-user lxb privilege level 15
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
return
//然后去R2的接口做映射 #这个为端口映射
[R2-GigabitEthernet0/0/0]nat server protocol tcp global current-interface 23 ins
ide 7.0.0.2 23
Warning:The port 23 is well-known port. If you continue it may cause function fa
ilure.
Are you sure to continue?[Y/N]:y
//检查
[R2-GigabitEthernet0/0/0]display this
[V200R003C00]
#
interface GigabitEthernet0/0/0
ip address 1.0.0.2 255.255.255.252
nat server protocol tcp global current-interface telnet inside 7.0.0.2 23
#
return
#这边有点操蛋,碰到几个问题,后面会总结①
八,设置nat技术
//众所周知,流量是相互的,所以我设置一个静态缺省,通完R4的接口
[ISP]ip route-static 0.0.0.0 0 5.0.0.1
//然后就是在R4上配置缺省和ACL策略了
//缺省
[R4]ip route-static 0.0.0.0 0 5.0.0.2
[R4]return
[R4]rip
[R4-rip-1]default-route originate
//nat策略
[R4]nat address-group 1 192.168.5.10 192.168.5.20
[R4]acl 2002
[R4-acl-basic-2002]rule permit source any
[R4-acl-basic-2002]q
[R4]interface g0/0/2
[R4-GigabitEthernet0/0/2]nat outbound 2002 address-group 1
[R4-GigabitEthernet0/0/2]q
#这边出了个操蛋的事情,标记②
九,配置R1不能被R6和R7学习
[R6]acl 2000
[R6-acl-basic-2000]rule 5 deny source 172.16.0.0 0
[R6-acl-basic-2000]display this
[V200R003C00]
#
acl number 2000
rule 5 deny source 172.16.0.0 0
#
return
[R6-acl-basic-2000]rule permit source any
[R6-rip-1]filter-policy 2000 import
#这边看我操作就是有点操蛋,出来个问题,标记③
//此时去R6和R7的路由表上刷新
[R6]display ip routing-table protocol rip
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : RIP
Destinations : 10 Routes : 10
RIP routing table status : <Active>
Destinations : 10 Routes : 10
Destination/Mask Proto Pre Cost Flags NextHop Interface
0.0.0.0/0 RIP 100 1 D 6.0.0.1 GigabitEthernet
0/0/0
1.0.0.0/30 RIP 100 3 D 6.0.0.1 GigabitEthernet
0/0/0
2.0.0.0/30 RIP 100 2 D 6.0.0.1 GigabitEthernet
0/0/0
3.0.0.0/30 RIP 100 1 D 6.0.0.1 GigabitEthernet
0/0/0
4.0.0.0/30 RIP 100 1 D 6.0.0.1 GigabitEthernet
0/0/0
5.0.0.0/30 RIP 100 1 D 6.0.0.1 GigabitEthernet
0/0/0
192.168.2.0/24 RIP 100 3 D 6.0.0.1 GigabitEthernet
0/0/0
192.168.3.0/24 RIP 100 2 D 6.0.0.1 GigabitEthernet
0/0/0
192.168.4.0/24 RIP 100 1 D 6.0.0.1 GigabitEthernet
0/0/0
192.168.7.0/24 RIP 100 1 D 7.0.0.2 GigabitEthernet
0/0/1
RIP routing table status : <Inactive>
Destinations : 0 Routes : 0
<R7>display ip routing-table protocol rip
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Public routing table : RIP
Destinations : 11 Routes : 11
RIP routing table status : <Active>
Destinations : 11 Routes : 11
Destination/Mask Proto Pre Cost Flags NextHop Interface
0.0.0.0/0 RIP 100 2 D 7.0.0.1 GigabitEthernet
0/0/0
1.0.0.0/8 RIP 100 4 D 7.0.0.1 GigabitEthernet
0/0/0
2.0.0.0/8 RIP 100 3 D 7.0.0.1 GigabitEthernet
0/0/0
3.0.0.0/8 RIP 100 2 D 7.0.0.1 GigabitEthernet
0/0/0
4.0.0.0/8 RIP 100 2 D 7.0.0.1 GigabitEthernet
0/0/0
5.0.0.0/8 RIP 100 2 D 7.0.0.1 GigabitEthernet
0/0/0
6.0.0.0/8 RIP 100 1 D 7.0.0.1 GigabitEthernet
0/0/0
192.168.2.0/24 RIP 100 4 D 7.0.0.1 GigabitEthernet
0/0/0
192.168.3.0/24 RIP 100 3 D 7.0.0.1 GigabitEthernet
0/0/0
192.168.4.0/24 RIP 100 2 D 7.0.0.1 GigabitEthernet
0/0/0
192.168.6.0/24 RIP 100 1 D 7.0.0.1 GigabitEthernet
0/0/0
RIP routing table status : <Inactive>
Destinations : 0 Routes : 0
//此时失去172.16.0.0/22这个路由信息
十,验证
//做了这么久配置,检验成果的时候
//R1ping R7
<R1>ping 192.168.7.1
PING 192.168.7.1: 56 data bytes, press CTRL_C to break
Reply from 192.168.7.1: bytes=56 Sequence=1 ttl=251 time=70 ms
Reply from 192.168.7.1: bytes=56 Sequence=2 ttl=251 time=40 ms
Reply from 192.168.7.1: bytes=56 Sequence=3 ttl=251 time=60 ms
Reply from 192.168.7.1: bytes=56 Sequence=4 ttl=251 time=50 ms
Reply from 192.168.7.1: bytes=56 Sequence=5 ttl=251 time=40 ms
//R4 ping外网
<R4>ping 192.168.5.1
PING 192.168.5.1: 56 data bytes, press CTRL_C to break
Reply from 192.168.5.1: bytes=56 Sequence=1 ttl=255 time=20 ms
Reply from 192.168.5.1: bytes=56 Sequence=2 ttl=255 time=10 ms
Reply from 192.168.5.1: bytes=56 Sequence=3 ttl=255 time=20 ms
Reply from 192.168.5.1: bytes=56 Sequence=4 ttl=255 time=30 ms
Reply from 192.168.5.1: bytes=56 Sequence=5 ttl=255 time=20 ms
--- 192.168.5.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 10/20/30 ms
//R1telent R2
<R1>telnet 192.168.2.2
Press CTRL_] to quit telnet mode
Trying 192.168.2.2 ...
Connected to 192.168.2.2 ...
Login authentication
Username:lxb
Password:
-----------------------------------------------------------------------------
User last login information:
-----------------------------------------------------------------------------
Access Type: Telnet
IP-Address : 7.0.0.1
Time : 2022-01-06 22:54:38-08:00
-----------------------------------------------------------------------------
<R7>
<R7>q
//基本完成要求
问题总结:
①三个配置的问题:
①做R2的端口映射时候,我配置的是R2的g0/0/0接口的配置,但是要求是R2的环回
配置问题:我在telent环回时,发现192.168.2.1无法使用,后在帮助下,得以修改
原因:华为的ENSP会存在环回无法ping通(虚拟地址)
<R1>ping 192.168.2.1
PING 192.168.2.1: 56 data bytes, press CTRL_C to break
Reply from 192.168.2.1: bytes=56 Sequence=1 ttl=255 time=20 ms
Reply from 192.168.2.1: bytes=56 Sequence=2 ttl=255 time=20 ms
Reply from 192.168.2.1: bytes=56 Sequence=3 ttl=255 time=40 ms
Reply from 192.168.2.1: bytes=56 Sequence=4 ttl=255 time=30 ms
Reply from 192.168.2.1: bytes=56 Sequence=5 ttl=255 time=20 ms
--- 192.168.2.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 20/26/40 ms
<R1>ping 192.168.2.2
PING 192.168.2.2: 56 data bytes, press CTRL_C to break
Request time out
Request time out
Request time out
Request time out
--- 192.168.2.2 ping statistics ---
4 packet(s) transmitted
0 packet(s) received
100.00% packet loss
还有就是在配置时,是目标地址和对应的端口好 我这边写成掩码了 -- 掌嘴
# nat server protocol tcp global current-interface telnet inside 7.0.0.2 30 错误
# nat server protocol tcp global 192.168.2.2 telnet inside 7.0.0.2 telnet 正确
②在做nat宣告的时候,我没有去设置缺省和ISP的静态路由,导致一直丢包
后来在帮助下,写了ISP的静态路由
③这个是最无语的问题,我在设置拒绝的deny ACL策略时,没有设置允许方向的permit
导致我的R6和R7一直无法刷新!!!
②关于实验中存在的问题:
1.配置宣告的时候
华为的ENSP默认的RIP是version1
我在配置是,强制使用了V1,并且在配置时,调整成了V2模式,所以导致R6/R7无法正常刷出RIP信息
解决方案:
在R6的入接口G0/0/0上设置了rip version 2才成功
2.配置nat的时候,我一直认为动态路由不宣告ISP,只靠缺省就可以获取isp的网段信息
但是!!! 需要在isp内设置一条静态路由,否则无法产生回包信息
3.在配置宣告的时候,配错ip
导致一直存在一个旧的ip无法被刷掉,解决方式:undo 然后重新宣告
4.做telent的问题,环回问题!!!
5.关于RIP的边界问题
我原以为RIPV1和RIPV2是两个区域,需要同时设置两个缺省路由,才能去获取nat的网段
---> 没有区分RIP的边界和nat的边界路由 --- 两个概念不一样!!!
完毕!