RIP实验

要求：  R1-R2-R3-R4-R5 RIP 100运行版本2

R6-R7 RIP 200 运行版本1

1.使用合理IP地址规划网络，各自创建环回接口

2.R1创建环回 172.16.1.1/24   172.16.2.1/24

172.16.3.1/24

3.要求R3使用R2访问R1环回

4.减少路由条目数量，  R1-R2之间增加路由传递安全

性

5.R5创建一个环回模拟运营商，丌能通告

6.R1 telnet R2环回实际telnet 到R7上

7.R6-R7路由器丌能学习到达R1环回路由

8.全网可达

 R1

创建环回
[R1]int lo 0
[R1-LoopBack0]ip add 1.1.1.1 24
[R1-LoopBack0]int lo 1
[R1-LoopBack1]ip add 172.16.1.1 24
[R1-LoopBack1]int lo 2
[R1-LoopBack2]ip add 172.16.2.1 24
[R1-LoopBack2]int lo 3
[R1-LoopBack3]ip add 172.16.3.1 24
配置ip
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip add 1.0.0.1 24
[R1-GigabitEthernet0/0/0]int g0/0/1
[R1-GigabitEthernet0/0/1]ip add 4.0.0.1 24
创建RIP 宣告
[R1]rip 100	
[R1-rip-100]version 2
[R1-rip-100]network 1.0.0.0
[R1-rip-100]network 4.0.0.0
[R1-rip-100]network 172.16.0.0
对R1的3个环回进行手工汇总
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]rip summary-address 172.16.0.0 255.255.252.0
[R1-GigabitEthernet0/0/0]int g0/0/1
[R1-GigabitEthernet0/0/1]rip summary-address 172.16.0.0 255.255.252.0
同时为了避免汇总产生路由黑洞带来的路由环路的影响，写一条汇总指向nuLL0	
[R1]ip route-static 172.16.0.0 22 NULL 0  

R2

创建环回
[r2]int lo 0
[r2-LoopBack0]ip a 2.2.2.2 24
配置ip
[r2-LoopBack0]int g0/0/0
[r2-GigabitEthernet0/0/0]ip a 1.0.0.2 24
[r2-GigabitEthernet0/0/0]int g0/0/1
[r2-GigabitEthernet0/0/1]ip a 2.0.0.1 24
创建RIP 宣告
[r2]rip 100	
[r2-rip-100]version 2
[r2-rip-100]network 2.0.0.0
[r2-rip-100]network 1.0.0.0

R3

创建环回
[Huawei]int lo 0
[Huawei-LoopBack0]ip a 3.3.3.3 24
配置ip
[Huawei-LoopBack0]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip a 2.0.0.2 24 
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip a 3.0.0.1 24
[Huawei]sy r3
启用RIP协议
[r3]rip 100
[r3-rip-100]version 2
[r3-rip-100]network 3.0.0.0
[r3-rip-100]network 2.0.0.0
在r1回包的入方向（->R3）将度量值增大，r3就会选择度量值较小的r2访问r1
[r3]acl 2000
[r3-acl-basic-2000]rule permit source 172.16.0.0 0
[r3-acl-basic-2000]rule permit source 1.1.1.0 0
[r3]interface g0/0/1
[r3-GigabitEthernet0/0/1]rip metricin 2000 10

R4

创建环回
[Huawei]int lo 0
[Huawei-LoopBack0]ip a 4.4.4.4 24
配置ip
[Huawei-LoopBack0]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip a 4.0.0.2 24
[Huawei-GigabitEthernet0/0/0]int g4/0/0
[Huawei-GigabitEthernet4/0/0]ip a 3.0.0.2 24
[Huawei-GigabitEthernet4/0/0]int g0/0/2
[Huawei-GigabitEthernet0/0/2]ip a 5.0.0.1 24
[Huawei-GigabitEthernet0/0/2]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip a 6.0.0.1 24
启用RIP协议
[Huawei]rip 100
[Huawei-rip-100]version 2
[Huawei-rip-100]network 4.0.0.0
[Huawei-rip-100]network 5.0.0.0
[Huawei-rip-100]network 6.0.0.0
[Huawei-rip-100]network 3.0.0.0
[Huawei]sy r4
 
R4pingR1验证RIPV1是否互通
[r4]ping 1.0.0.1
  PING 1.0.0.1: 56  data bytes, press CTRL_C to break
    Reply from 1.0.0.1: bytes=56 Sequence=1 ttl=255 time=90 ms
    Reply from 1.0.0.1: bytes=56 Sequence=2 ttl=255 time=20 ms
R4pingR2验证RIPV1是否互通
[r4]ping 2.0.0.1
  PING 2.0.0.1: 56  data bytes, press CTRL_C to break
    Request time out
    Reply from 2.0.0.1: bytes=56 Sequence=2 ttl=254 time=40 ms
    Reply from 2.0.0.1: bytes=56 Sequence=3 ttl=254 time=40 ms

R5

创建环回
[r5]int lo 0
[r5-LoopBack0]ip a 5.5.5.5 24
模拟运营商环回
[r5]int LoopBack 1
[r5-LoopBack1]ip a 8.8.8.8 24
配置ip
[r5-LoopBack0]int g0/0/0
[r5-GigabitEthernet0/0/0]ip a 5.0.0.2 24
启用RIP协议
[r5]rip 100	
[r5-rip-100]version 2
[r5-rip-100]network 5.0.0.0

R6

创建环回
[r6]int lo 0
[r6-LoopBack0]ip a 6.6.6.6 24
配置ip
[r6-LoopBack0]int g0/0/0
[r6-GigabitEthernet0/0/0]ip a 6.0.0.2 24
[r6-GigabitEthernet0/0/0]int g0/0/1
[r6-GigabitEthernet0/0/1]ip a 7.0.0.1 24
启用RIP协议版本1
[r6]rip 200	
[r6-rip-200]version 1
[r6-rip-200]network 6.0.0.0
[r6-rip-200]network 7.0.0.0

R7

创建环回
[Huawei]int lo 0
[Huawei-LoopBack0]ip a 7.7.7.7 24
配置ip
[Huawei-LoopBack0]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip a 7.0.0.2 24
启用RIP协议版本1
[Huawei]rip 200	
[Huawei-rip-200]version 1
[Huawei-rip-200]network 7.0.0.0

增加路由传递安全性在R1和R2上做路由认证

[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]rip authentication-mode md5 usual cipher 123456
 
[r2]int g0/0/0
[r2-GigabitEthernet0/0/0]rip authentication-mode md5 usual cipher 123456

由于R1-R5和R6-R7是不同版本 即在R6上配置rip version 2让不同版本互通

[r6]int g0/0/0
[r6-GigabitEthernet0/0/0]rip version 2

R5创建了8.8.8.8的环回模拟运营商但不能宣告，即在R5上放一个缺省

[r5]rip
[r5-rip-1]default-route originate

 R6-R7路由器不能学习到达R1环回路由

[R6]acl 2000
[R6-acl-basic-2000]rule deny  source 1.1.1.0 0
[R6-acl-basic-2000]rule deny source 172.16.0.0 0.0.255.255
[R6-acl-basic-2000]rule permit source any
[R6-acl-basic-2000]q
[R6]rip 200
[R6-rip-200]filter-policy 2000 import 
[R6-rip-200]q