MGRE实验

1，实验题目

具体要求

1，R2为ISP，只能配置IP地址

2，R1~R2之间为HDLC封装

3，R2~R3之间为ppp封装，pap认证，R2为主认证方

4，R2~R4之间为ppp封装，chap认证，R2为主认证方

5，R1、R2、R3构建MGRE环境，R1的IP地址固定

6，内网使用RIP获取路由，所有PC可以相互访问，可以访问R2的环回

2，IP配置

[r1-GigabitEthernet0/0/1]ip add 192.168.1.1 24

[r1-Serial4/0/0]ip add 12.1.1.1 24

[r2-Serial4/0/0]ip add 12.1.1.2 24

[r2-Serial4/0/1]ip add 32.1.1.2 24

[r2-Serial3/0/0]ip add 42.1.1.2 24

[r2-LoopBack0]ip add 2.2.2.2 24

[r3-GigabitEthernet0/0/1]ip add 192.168.2.1 24

[r3-Serial4/0/0]ip add 32.1.1.1 24

[R4-GigabitEthernet0/0/0]ip add 192.168.3.1 24

[r4-Serial4/0/0]ip add 42.1.1.1 24

3，配置缺省路由

[r1]ip route-static 0.0.0.0 0 12.1.1.2

[r3]ip route-static 0.0.0.0 0 32.1.1.2

[r4]ip route-static 0.0.0.0 0 42.1.1.2

4，配置nat

 [R1]acl 2000
 [R1-acl-basic-2000]rule 1 permit source any
 [R1-acl-basic-2000]q
 [R1]int s4/0/0
 [R1-Serial4/0/0]nat outbound 2000
 ​[R3]acl 2000
 [R3-acl-basic-2000]rule 1 permit source any
 [R3-acl-basic-2000]q
 [R3]int s4/0/0
 [R3-Serial4/0/0]nat outbound 2000
 ​[R4]acl 2000
 [R4-acl-basic-2000]rule 1 permit source any
 [R4-acl-basic-2000]q
 [R4]int s4/0/0
 [R4-Serial4/0/0]nat outbound 2000

5,hdlc封装

 [R1]int s4/0/0       
 [R1-Serial4/0/0]link-protocol hdlc
 [ISP]int s4/0/0
 [ISP-Serial4/0/0]link-protocol hdlc

6，封装R2~R3（ppp封装，pap认证）

R2;

[ISP]aaa
[ISP-aaa]local-user qsx password cipher 010313
[ISP-aaa]local-user qsx service-type ppp
[ISP]int s4/0/1
[ISP-Serial4/0/1]ppp authentication-mode pap

R3;

[R3]int s4/0/0
[R3-Serial4/0/0]ppp pap local-user qsx password cipher 010313

7、封装R2~R4（ppp封装，chap认证）

R2;

[ISP]aaa
[ISP-aaa]local-user qy password cipher 123456
[ISP-aaa]local-user qy service-type ppp
[ISP]int s3/0/0
[ISP-Serial3/0/0]ppp authentication-mode chap

R4;

[R4]int s4/0/0
[R4-Serial4/0/0]ppp chap user qy
[R4-Serial4/0/0]ppp chap password cipher 123456

8,R1,R2,R3构建MGRE，R1ip固定

R1；

[R1]interface Tunnel 0/0/0
[R1-Tunnel0/0/0]ip add 192.168.4.1 24
[R1-Tunnel0/0/0]tunnel-protocol gre p2mp 
[R1-Tunnel0/0/0]source 12.1.1.1
[R1-Tunnel0/0/0]nhrp entry multicast dynamic 
[R1-Tunnel0/0/0]nhrp network-id 200

R3；

[R3]interface Tunnel 0/0/0
[R3-Tunnel0/0/0]ip add 192.168.4.2 24
[R3-Tunnel0/0/0]tunnel-protocol gre p2mp 
[R3-Tunnel0/0/0]source s4/0/0
[R3-Tunnel0/0/0]nhrp entry 192.168.4.1 12.1.1.1 register 
[R3-Tunnel0/0/0]nhrp network-id 200

R4；

[R4]interface Tunnel 0/0/0
[R4-Tunnel0/0/0]ip  add 192.168.4.3 24    
[R4-Tunnel0/0/0]tunnel-protocol gre p2mp 
[R4-Tunnel0/0/0]source s4/0/0
[R4-Tunnel0/0/0]nhrp entry 192.168.4.1 12.1.1.1 register 
[R4-Tunnel0/0/0]nhrp network-id 200

9，设置rip

[r1-rip-1]version 2        

[r1-rip-1]network 192.168.1.0

[r1-rip-1]network 192.168.4.0

[r1-rip-1]version2        

[r1-rip-1]network 192.168.4.0

[r1-rip-1]network 192.168.2.0

[r1-rip-1]version 2        

[r1-rip-1]network 192.168.4.0

[r1-rip-1]network 192.168.3.0