【无标题】RIP综合实验

1.给路由器配置 IP地址

[R1]interface GigabitEthernet 0/0/0  

[R1-GigabitEthernet0/0/0]ip address 12.1.1.1 24

[R1-GigabitEthernet0/0/0]q

[R1]

[R1]interface GigabitEthernet 0/0/1  

[R1-GigabitEthernet0/0/1]ip address 14.1.1.1 24

[R1-GigabitEthernet0/0/1]q

[R1]

[R1]interface LoopBack 0    

[R1-LoopBack0]ip address 172.16.1.1 24

[R1-LoopBack0]q

[R1]

[R1]interface LoopBack 1    

[R1-LoopBack1]ip address 172.16.2.1 24

[R1-LoopBack1]q

[R1]

[R1]interface LoopBack 2    

[R1-LoopBack2]ip address 172.16.3.1 24

[R1-LoopBack2]q

[R1]

[R1]interface LoopBack 3    

[R1-LoopBack2]ip address 1.1.1.1 24

[R1-LoopBack2]q

[R1]

[R2]interface GigabitEthernet 0/0/0  

[R2-GigabitEthernet0/0/0]ip address 12.1.1.2 24

[R2-GigabitEthernet0/0/0]q

[R2]

[R2]interface GigabitEthernet 0/0/1  

[R2-GigabitEthernet0/0/1]ip address 24.1.1.1 24

[R2-GigabitEthernet0/0/1]q

[R2]

[R2]interface LoopBack 0    

[R2-LoopBack0]ip address 2.2.2.2 24

[R2-LoopBack0]q

[R2]

[R3]interface GigabitEthernet 0/0/0  

[R3-GigabitEthernet0/0/0]ip address 23.1.1.2 24

[R3-GigabitEthernet0/0/0]q

[R3]

[R3]interface GigabitEthernet 0/0/1  

[R3-GigabitEthernet0/0/1]ip address 34.1.1.1 24

[R3-GigabitEthernet0/0/1]q

[R3]

[R3]interface LoopBack 0    

[R3-LoopBack0]ip address 3.3.3.3 24

[R3-LoopBack0]q

[R3]

[R4]interface GigabitEthernet 0/0/0  

[R4-GigabitEthernet0/0/0]ip address 14.1.1.2 24

[R4-GigabitEthernet0/0/0]q

[R4]

[R4]interface GigabitEthernet 0/0/1  

[R4-GigabitEthernet0/0/1]ip address 34.1.1.2 24

[R4-GigabitEthernet0/0/1]q

[R4]

[R4]interface GigabitEthernet 0/0/2  

[R4-GigabitEthernet0/0/2]ip address 45.1.1.1 24

[R4-GigabitEthernet0/0/2]q

[R4]

[R4]interface GigabitEthernet 4/0/0  

[R4-GigabitEthernet4/0/0]ip address 46.1.1.1 24

[R4-GigabitEthernet4/0/0]q

[R4]

[R4]interface LoopBack 0    

[R4-LoopBack0]ip address 4.4.4.4 24

[R4-LoopBack0]q

[R4]

[R5]interface GigabitEthernet 0/0/0  

[R5-GigabitEthernet0/0/0]ip address 45.1.1.2 24

[R5-GigabitEthernet0/0/0]q

[R5]

[R5]interface LoopBack 0    

[R5-LoopBack0]ip address 5.5.5.524

[R5-LoopBack0]q

[R5]

[R6]interface GigabitEthernet 0/0/0  

[R6-GigabitEthernet0/0/0]ip address 46.1.1.2 24

[R6-GigabitEthernet0/0/0]q

[R6]

[R6]interface GigabitEthernet 0/0/1  

[R6-GigabitEthernet0/0/1]ip address 67.1.1.1 24

[R6-GigabitEthernet0/0/1]q

[R6]

[R6]interface LoopBack 0    

[R6-LoopBack0]ip address 6.6.6.6 24

[R6-LoopBack0]q

[R6]

[R7]interface GigabitEthernet 0/0/0  

[R7-GigabitEthernet0/0/0]ip address 67.1.1.2 24

[R7-GigabitEthernet0/0/0]q

[R7]

[R7]interface LoopBack 0    

[R7-LoopBack0]ip address 5.5.5.5 24

[R7-LoopBack0]q

[R7]

2.给路由器配置路由

[R1]rip 1

[R1-rip-1]verify-source

[R1-rip-1]version 2

[R1-rip-1]network 12.0.0.0

[R1-rip-1]network 14.0.0.0

[R1-rip-1]network 172.16.0.0

[R1-rip-1]q

[R1]

[R2]rip 1

[R2-rip-1]verify-source

[R2-rip-1]version 2

[R2-rip-1]network 12.0.0.0

[R2-rip-1]network 23.0.0.0

[R2-rip-1]network 2.0.0.0

[R2-rip-1]q

[R2]

[R3]rip 2

[R3-rip-2]verify-source

[R3-rip-2]version 2     

[R3-rip-2]network 23.0.0.0

[R3-rip-2]network 34.0.0.0 

[R3-rip-2]network 3.0.0.0

[R3-rip-2]q

[R3]

[R4]rip 1

[R4-rip-1]version 2     

[R4-rip-1]network 14.0.0.0

[R4-rip-1]network 34.0.0.0

[R4-rip-1]network 45.0.0.0

[R4-rip-1]network 46.0.0.0 

[R4-rip-1]network 4.0.0.0

[R4-rip-1]q

[R4]

[R5]rip 1

[R5-rip-1]version 2     

[R5-rip-1]network 45.0.0.0

[R5-rip-1]q

[R5]

[R6]rip 1

[R6-rip-1]version 1     

[R6-rip-1]network 46.0.0.0

[R6-rip-1]network 67.0.0.0

[R6-rip-1]network 6.0.0.0

[R6-rip-1]q

[R6]

[R7]rip 1

[R7-rip-1]version 1     

[R7-rip-1]network 7.0.0.0

[R7-rip-1]network 67.0.0.0

[R7-rip-1]q

[R7]

<R1>display ip routing-table protocol rip /*查看rip 路由表*/

3.在路由器上对R1的环回接口进行汇总，需要对R1的所有直连接口都进行汇总。

[R1]interface GigabitEthernet 0/0/0  

[R1-GigabitEthernet0/0/0]rip summary-address 172.16.0.0 255.255.252.0

[R1-GigabitEthernet0/0/0]q

[R1]

[R1]interface GigabitEthernet 0/0/1  

[R1-GigabitEthernet0/0/1]rip summary-address 172.16.0.0 255.255.252.0

[R1-GigabitEthernet0/0/1]q

[R1]

[R1]ip route-static 172.16.0.0 22 NULL 0 /*做空接口路由，防环*/

4.打通RIPV1和RIPV2 ----出接口更改为RIPV2

[R6]interface GigabitEthernet 0/0/0  

[R6-GigabitEthernet0/0/0]rip version 2

[R6-GigabitEthernet0/0/0]q

[R6]

5.修改R3-R4-R1链路的开销值，使其只经过R2访问R1

[R3]acl 2000 

[R3-acl-basic-2000]rule permit source 1.1.1.0 0     

[R3-acl-basic-2000]rule permit source 172.16.0.0 0

[R3-acl-basic-2000]q

[R3]

[R3]interface GigabitEthernet 0/0/1  

[R3-GigabitEthernet0/0/1]rip metricin 2000 10  /*修改开销值，在原有基础上+10*/

[R3-GigabitEthernet0/0/1]q

[R3]

6.在路由器各接口进行手工认证

[R1]interface GigabitEthernet 0/0/0  

[R1-GigabitEthernet0/0/0]rip authentication-mode ?

  hmac-sha256 

  md5          MD5 authentication

  simple       Simple authentication   

[R1-GigabitEthernet0/0/0]rip authentication-mode md5 ?

  nonstandard  Nonstandard MD5 authentication packet format (IETF)

  usual        Huawei MD5 authentication packet format 

[R1-GigabitEthernet0/0/0]rip authentication-mode md5 usual ?

  STRING<1-16>/<24,32>  Plain text/Encrypted text

  cipher                Encryption type (Cryptogram)

  plain                 Encryption type (Plain text)  

[R1-GigabitEthernet0/0/0]rip authentication-mode md5 usual cipher 520520

[R1-GigabitEthernet0/0/0]q

[R1]

[R2]interface GigabitEthernet 0/0/0  

[R2-GigabitEthernet0/0/0]rip authentication-mode md5 usual cipher 520520

[R2-GigabitEthernet0/0/0]q

[R2]

7.在R5路由器上做一个缺省源，实现全网可达

[R5]rip 1

[R5-rip-1]default-route originate

[R5-rip-1]q

[R5]

8.在R6/R7路由器上做过滤，实现R6/R7不能学习到R1的环回。可以在R6入方向或R4出方向。

[R6]acl 2000 

[R6-acl-basic-2000]rule deny source 172.16.0.0 0 

[R6-acl-basic-2000]rule deny source 1.1.1.0 0

[R6-acl-basic-2000]rule permit source any

[R6-acl-basic-2000]q

[R6]

[R6]rip 1

[R6-rip-1]filter-policy ?

  INTEGER<2000-2999>  Apply basic ACL

  acl-name            Specify IP Access Control List (ACL) name for filtering  

                      routes

  gateway             Filter routes based on the distributing gateway

  ip-prefix           Specify IP prefix for filtering routes

[R6-rip-1]filter-policy 2000 ?

  export  Specify an export policy

  import  Specify an import policy  

[R6-rip-1]filter-policy 2000 import

9.在R7路由器上开启telnet服务

[R7]aaa  

[R7-aaa]local-user china privilege level 15 password cipher jiayou

[R7-aaa]local-user china service-type telnet

[R7-aaa]q

[R7]

[R7]user-interface vty 0 4   

[R7-ui-vty0-4]authentication-mode aaa

[R7-ui-vty0-4]q

[R7]

10.在 做端口映射

[R2]interface g0/0/0

[R2-GigabitEthernet0/0/0]n

[R2-GigabitEthernet0/0/0]nat s 

[R2-GigabitEthernet0/0/0]nat static

[R2-GigabitEthernet0/0/0]nat server ?

  global    Specify global information of NAT

  protocol  Specify protocol

[R2-GigabitEthernet0/0/0]nat server p     

[R2-GigabitEthernet0/0/0]nat server protocol ?

  <1-255>  Protocol number

  icmp     Internet Control Message Protocol (1)

  tcp      Transmission Control Protocol (6)

  udp      User Datagram Protocol (17)

[R2-GigabitEthernet0/0/0]nat server protocol t

[R2-GigabitEthernet0/0/0]nat server protocol tcp g

[R2-GigabitEthernet0/0/0]nat server protocol tcp global ?

  X.X.X.X            Global IP address of NAT

  current-interface  Address of current interface

  interface          Specify the interface

[R2-GigabitEthernet0/0/0]nat server protocol tcp global i    

[R2-GigabitEthernet0/0/0]nat server protocol tcp global interface l     

[R2-GigabitEthernet0/0/0]nat server protocol tcp global interface loopback 0

                                                                             ^

Error:Incomplete command found at '^' position.

[R2-GigabitEthernet0/0/0]nat server protocol tcp global interface loopback 0 23

i     

[R2-GigabitEthernet0/0/0]nat server protocol tcp global interface loopback 0 23

inside 7.7.7.7 23

Warning:The port 23 is well-known port. If you continue it may cause function fa

ilure.

Are you sure to continue?[Y/N]:y

11.修改链路数据走路

[R2]acl 2000

[R2-acl-basic-2000]rule permit source 7.0.0.0 0

[R2-acl-basic-2000]q

[R2]

[R2]interface GigabitEthernet 0/0/0

[R2-GigabitEthernet0/0/0]rip metricin 2000 10

[R2-GigabitEthernet0/0/0]q

[R2]

[R4]acl 2000

[R4-acl-basic-2000]rule permit source 12.1.1.0 0

[R4-acl-basic-2000]q

[R4]

[R4]interface GigabitEthernet 0/0/0

[R4-GigabitEthernet0/0/0]rip metricin 2000 10

[R4-GigabitEthernet0/0/0]q

[R4]