HCIP实验3

配置要求

1,R5为ISP,只能进行IP地址配置;其所有地址均配为公有IP地址
2,R1和R5间使用PPp的PAP认证，R5为主认证方，
   R2于R5之间使用PPP的chap认证，R5为主认证方;
   R3于R5之间使用HDLc封装。
3,R1/R2/R3构建F个MGRE环境; R1为中心站点; R1、R4间为点到点的GRE。
4,整个私有网络基于RIP全网可达
5,所有PC设置私有IP为源IP,可以访问R5环回。

实验思路
1、首先根据拓扑结构合理分配IP地址，并对各个路由器的IP地址和R5环回接口的IP地址进行配置。

2、让私网中的边界路由器对ISP路由器做缺省路由。

3、根据实验要求，对需要配置不同类型认证的路由器进行认证配置，和需要不同封装的协议进行封装配置。

4、 根据实验要求，对R1、R2、R3构建一个MGRE环境,R1，R4间为点到点的GRE。

5、 对私网中的路由器进行RIP的配置。

6、给边界路由器配置NAT协议，使得内网可以访问到外网。
 

 

1.ip地址的简单划分 

电脑需配置dhcp自动获取IP
[r1]dhcp enable
[r1]ip pool a
[r1-ip-pool-a]network 192.168.1.0 mask 24
[r1-ip-pool-a]gateway-list 192.168.1.1
[r1-ip-pool-a]dns-list 114.114.114.114
[r1]interface GigabitEthernet 0/0/1
[r1-GigabitEthernet0/0/1]dhcp select global
R2/3/4参考R1

R1:

[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip ad 192.168.1.1 24
[Huawei-GigabitEthernet0/0/0]int s4/0/0
[Huawei-Serial4/0/0]link-protocol ppp
[Huawei-Serial4/0/0]ppp pap local-user huawei password cipher huawei123
[Huawei-Serial4/0/0]ip address 15.1.1.1 24
[Huawei-Serial4/0/0]q
[Huawei]int t0/0/0
[Huawei-Tunnel0/0/0]ip ad 10.1.1.1 255.255.255.0
[Huawei-Tunnel0/0/0]tunnel-protocol gre p2mp
[Huawei-Tunnel0/0/0]source 15.1.1.1
[Huawei-Tunnel0/0/0]nhrp entry multicast dynamic
[Huawei-Tunnel0/0/0]nhrp network-id 100
[Huawei-Tunnel0/0/0]undo rip split-horizon
[Huawei-Tunnel0/0/0]int t0/0/1
[Huawei-Tunnel0/0/1]tunnel-protocol gre
[Huawei-Tunnel0/0/1]source 15.1.1.1
[Huawei-Tunnel0/0/1]description 45.1.1.1
[Huawei-Tunnel0/0/1]q
[Huawei]rip
[Huawei-rip-1]version 2
[Huawei-rip-1]un summary
[Huawei-rip-1]network 192.168.1.0
[Huawei-rip-1]network 10.0.0.0
[Huawei-rip-1]q
[Huawei]acl 2000
[Huawei-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[Huawei-acl-basic-2000]int s4/0/0
[Huawei-Serial4/0/0]nat outbound 2000

R2:

[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip ad 192.168.2.1 24
[Huawei-GigabitEthernet0/0/0]int s4/0/0
[Huawei-Serial4/0/0]link-protocol ppp
[Huawei-Serial4/0/0]ppp chap password cipher huawei123
[Huawei-Serial4/0/0]int t0/0/0
[Huawei-Tunnel0/0/0]ip ad 10.1.1.2 255.255.255.0
[Huawei-Tunnel0/0/0]tunnel-protocol gre p2mp
[Huawei-Tunnel0/0/0]source Serial 4/0/0
[Huawei-Tunnel0/0/0]nhrp network-id 100
[Huawei-Tunnel0/0/0]nhrp entry 10.1.1.1 15.1.1.1 register
[Huawei]rip
[Huawei-rip-1]version 2
[Huawei-rip-1]un summary
[Huawei-rip-1]network 192.168.2.0
[Huawei-rip-1]network 10.0.0.0
[Huawei-rip-1]q
[Huawei]acl 2000
[Huawei-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[Huawei-acl-basic-2000]int s4/0/0
[Huawei-Serial4/0/0]nat outbound 2000

R3:

[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip ad 192.168.3.1 24
[Huawei-GigabitEthernet0/0/0]int s4/0/0
[Huawei-Serial4/0/0]link-protocol hdlc
Warning: The encapsulation protocol of the link will be changed. Continue? [Y/N]
:y
[Huawei-Serial4/0/0]int t0/0/0
[Huawei-Tunnel0/0/0]ip ad 10.1.1.3 255.255.255.0
[Huawei-Tunnel0/0/0]tunnel-protocol gre p2mp
[Huawei-Tunnel0/0/0]source s4/0/0
[Huawei-Tunnel0/0/0]nhrp network-id 100
[Huawei-Tunnel0/0/0]nhrp entry 10.1.1.1 15.1.1.1 register
[Huawei-Tunnel0/0/0]q
[Huawei]rip
[Huawei-rip-1]version 2
[Huawei-rip-1]un summary
[Huawei-rip-1]network 192.168.3.0
[Huawei-rip-1]network 10.0.0.0
[Huawei-rip-1]q
[Huawei]acl 2000
[Huawei-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[Huawei-acl-basic-2000]int s4/0/0
[Huawei-Serial4/0/0]nat outbound 2000

R4:

[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip ad 192.168.4.1 24
[Huawei-GigabitEthernet0/0/1]int t0/0/1
[Huawei-Tunnel0/0/1]ip ad 10.1.1.1 24
[Huawei-Tunnel0/0/1]tunnel-protocol gre
[Huawei-Tunnel0/0/1]source 45.1.1.1
[Huawei-Tunnel0/0/1]description 15.1.1.1
[Huawei-Tunnel0/0/1]q
[Huawei]rip
[Huawei-rip-1]version 2
[Huawei-rip-1]un summary
[Huawei-rip-1]network 192.168.4.0
[Huawei-rip-1]network 10.0.0.0
[Huawei-rip-1]q
[Huawei]acl 2000
[Huawei-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[Huawei-acl-basic-2000]int s4/0/0
[Huawei-Serial4/0/0]nat outbound 2000

R5:

[Huawei]aaa
[Huawei-aaa]local-user huawei password cipher huawei123
Info: Add a new user.
[Huawei-aaa]local-user huawei service-type ppp
[Huawei-aaa]int s3/0/0
[Huawei-Serial3/0/0]ppp authentication-mode pap
[Huawei-Serial3/0/0]ip ad 15.1.1.2 24
[Huawei-Serial3/0/0]q
[Huawei]aaa
[Huawei-aaa]local-user huawei password cipher huawei123
[Huawei-aaa]local-user huawei service-type ppp
[Huawei-aaa]int s3/0/0
[Huawei-Serial3/0/0]ppp authentication-mode chap
[Huawei-Serial3/0/0]int s4/0/0
[Huawei-Serial4/0/0]link-protocol hdlc
Warning: The encapsulation protocol of the link will be changed. Continue? [Y/N]
:y