MGRE实验

如图配置接口IP地址串口
配置完之后第一步配置缺省 指向R5

r1
[r1]ip route-static 0.0.0.0 0 15.0.0.2
r2
[r2]ip route-static 0.0.0.0 0 25.0.0.2
r3
[r3]ip route-static 0.0.0.0 0 35.0.0.2
r4
[r4]ip route-static 0.0.0.0 0 45.0.0.2

第二点
r1和r5之间使用PPP认证，r5为主认证方
r5
[r5]aaa
[r5-aaa]local-user admin password cipher 123456
[r5-aaa]local-user admin service-type ppp
[r5-aaa]int s 4/0/0
[r5-Serial4/0/0]ppp authentication-mode pap
r1
[r1]int Serial 4/0/0
[r1-Serial4/0/0]ppp authentication-mode pap

r2和r5之间使用chap认证 AR5为主认证方
r5
[r5]int s 4/0/1
[r5-Serial4/0/1]ppp authentication-mode chap
r2
[r2]int s 4/0/1
[r2-Serial4/0/1]ppp authentication-mode chap

r5与r3之间使用HDLC封装
r5
[r5-Serial4/0/1]int s 3/0/0
[r5-Serial3/0/0]link-protocol hdlc
r3
[r3]int s 4/0/0
[r3-Serial4/0/0]link-protocol hdlc

r1/r2/r3 构建一个MGRE环境 r1为中心
r1
[r1]int Tunnel 0/0/0
[r1-Tunnel0/0/0]ip address 192.168.5.1 24
[r1-Tunnel0/0/0]tunnel-protocol gre p2mp
[r1-Tunnel0/0/0]source 15.0.0.1
[r1-Tunnel0/0/0]nhrp network-id 100
[r1-Tunnel0/0/0]nhrp entry multicast dynamic
r2
[r2]int t 0/0/0
[r2-Tunnel0/0/0]ip address 192.168.5.2 24
[r2-Tunnel0/0/0]tunnel-protocol gre p2mp
[r2-Tunnel0/0/0]source Serial 4/0/1
[r2-Tunnel0/0/0]nhrp network-id 100
[r2-Tunnel0/0/0]nhrp entry 192.168.5.1 15.0.0.1 register
r3
[r3]int t 0/0/0
[r3-Tunnel0/0/0]ip address 192.168.5.3 24
[r3-Tunnel0/0/0]tunnel-protocol gre p2mp
[r3-Tunnel0/0/0]nhrp network-id 100
[r3-Tunnel0/0/0]source Serial 4/0/0
[r3-Tunnel0/0/0]nhrp entry 192.168.5.1 15.0.0.1 register

r1 r4 间为点到点的GRE
r1
[r1]int t 0/0/1
[r1-Tunnel0/0/1]ip address 192.168.6.1 24
[r1-Tunnel0/0/1]source 15.0.0.1
[r1-Tunnel0/0/1]destination 45.0.0.1
r4
[r4]int t 0/0/1
[r4-Tunnel0/0/1]ip address 192.168.6.2 24
[r4-Tunnel0/0/1]tunnel-protocol gre
[r4-Tunnel0/0/1]source 45.0.0.1
[r4-Tunnel0/0/1]destination 15.0.0.1

配置RIP
r1
[r1]rip 1
[r1-rip-1]version 2
[r1-rip-1]network 1.0.0.0
[r1-rip-1]network 192.168.5.0
[r1-rip-1]network 192.168.6.0
[r1-rip-1]int t 0/0/0
[r1-Tunnel0/0/0]undo rip split-horizon //取消水平分割
r2
[r2]rip 1
[r2-rip-1]version 2
[r2-rip-1]network 2.0.0.0
[r2-rip-1]network 192.168.5.0
r3
[r3]rip 1
[r3-rip-1]v 2
[r3-rip-1]network 3.0.0.0
[r3-rip-1]network 192.168.5.0
r4
[r4]rip 1
[r4-rip-1]v 2
[r4-rip-1]network 192.168.6.0
[r4-rip-1]network 4.0.0.0
所有pc设置私有IP为源IP，可以访问r5环回//私网访问公网 NAT
r1
[r1]acl 2000
[r1-acl-basic-2000]rule permit source 1.0.0.0 0.255.255.255
[r1-acl-basic-2000]int s 4/0/0
[r1-Serial4/0/0]nat outbound 2000
r2
[r2]acl 2000
[r2-acl-basic-2000]rule permit source 2.0.0.0 0.255.255.255
[r2-acl-basic-2000]int s 4/0/1
[r2-Serial4/0/1]nat outbound 2000
r3
[r3]acl 2000
[r3-acl-basic-2000]rule permit source 3.0.0.0 0.255.255.255
[r3-acl-basic-2000]int s 4/0/0
[r3-Serial4/0/0]nat outbound 2000
r4
[r4]acl 2000
[r4-acl-basic-2000]rule permit source 4.0.0.0 0.255.255.255
[r4-acl-basic-2000]int g 0/0/0
[r4-GigabitEthernet0/0/0]nat outbound 2000