实验思路
1、首先根据拓扑结构合理分配IP地址,并对各个路由器的IP地址和R5环回接口的IP地址进行配置。
2、让私网中的边界路由器对ISP路由器做缺省路由。
3、根据实验要求,对需要配置不同类型认证的路由器进行认证配置,和需要不同封装的协议进行封装配置。
4、 根据实验要求,对R1、R2、R3构建一个MGRE环境,R1,R4间为点到点的GRE。
5、 对私网中的路由器进行RIP的配置。
6、给边界路由器配置NAT协议,使得内网可以访问到外网。
1.ip地址的简单划分
电脑需配置dhcp自动获取IP
[r1]dhcp enable
[r1]ip pool a
[r1-ip-pool-a]network 192.168.1.0 mask 24
[r1-ip-pool-a]gateway-list 192.168.1.1
[r1-ip-pool-a]dns-list 114.114.114.114
[r1]interface GigabitEthernet 0/0/1
[r1-GigabitEthernet0/0/1]dhcp select global
R2/3/4参考R1
R1:
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip ad 192.168.1.1 24
[Huawei-GigabitEthernet0/0/0]int s4/0/0
[Huawei-Serial4/0/0]link-protocol ppp
[Huawei-Serial4/0/0]ppp pap local-user huawei password cipher huawei123
[Huawei-Serial4/0/0]ip address 15.1.1.1 24
[Huawei-Serial4/0/0]q
[Huawei]int t0/0/0
[Huawei-Tunnel0/0/0]ip ad 10.1.1.1 255.255.255.0
[Huawei-Tunnel0/0/0]tunnel-protocol gre p2mp
[Huawei-Tunnel0/0/0]source 15.1.1.1
[Huawei-Tunnel0/0/0]nhrp entry multicast dynamic
[Huawei-Tunnel0/0/0]nhrp network-id 100
[Huawei-Tunnel0/0/0]undo rip split-horizon
[Huawei-Tunnel0/0/0]int t0/0/1
[Huawei-Tunnel0/0/1]tunnel-protocol gre
[Huawei-Tunnel0/0/1]source 15.1.1.1
[Huawei-Tunnel0/0/1]description 45.1.1.1
[Huawei-Tunnel0/0/1]q
[Huawei]rip
[Huawei-rip-1]version 2
[Huawei-rip-1]un summary
[Huawei-rip-1]network 192.168.1.0
[Huawei-rip-1]network 10.0.0.0
[Huawei-rip-1]q
[Huawei]acl 2000
[Huawei-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[Huawei-acl-basic-2000]int s4/0/0
[Huawei-Serial4/0/0]nat outbound 2000
R2:
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip ad 192.168.2.1 24
[Huawei-GigabitEthernet0/0/0]int s4/0/0
[Huawei-Serial4/0/0]link-protocol ppp
[Huawei-Serial4/0/0]ppp chap password cipher huawei123
[Huawei-Serial4/0/0]int t0/0/0
[Huawei-Tunnel0/0/0]ip ad 10.1.1.2 255.255.255.0
[Huawei-Tunnel0/0/0]tunnel-protocol gre p2mp
[Huawei-Tunnel0/0/0]source Serial 4/0/0
[Huawei-Tunnel0/0/0]nhrp network-id 100
[Huawei-Tunnel0/0/0]nhrp entry 10.1.1.1 15.1.1.1 register
[Huawei]rip
[Huawei-rip-1]version 2
[Huawei-rip-1]un summary
[Huawei-rip-1]network 192.168.2.0
[Huawei-rip-1]network 10.0.0.0
[Huawei-rip-1]q
[Huawei]acl 2000
[Huawei-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[Huawei-acl-basic-2000]int s4/0/0
[Huawei-Serial4/0/0]nat outbound 2000
R3:
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip ad 192.168.3.1 24
[Huawei-GigabitEthernet0/0/0]int s4/0/0
[Huawei-Serial4/0/0]link-protocol hdlc
Warning: The encapsulation protocol of the link will be changed. Continue? [Y/N]
:y
[Huawei-Serial4/0/0]int t0/0/0
[Huawei-Tunnel0/0/0]ip ad 10.1.1.3 255.255.255.0
[Huawei-Tunnel0/0/0]tunnel-protocol gre p2mp
[Huawei-Tunnel0/0/0]source s4/0/0
[Huawei-Tunnel0/0/0]nhrp network-id 100
[Huawei-Tunnel0/0/0]nhrp entry 10.1.1.1 15.1.1.1 register
[Huawei-Tunnel0/0/0]q
[Huawei]rip
[Huawei-rip-1]version 2
[Huawei-rip-1]un summary
[Huawei-rip-1]network 192.168.3.0
[Huawei-rip-1]network 10.0.0.0
[Huawei-rip-1]q
[Huawei]acl 2000
[Huawei-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[Huawei-acl-basic-2000]int s4/0/0
[Huawei-Serial4/0/0]nat outbound 2000
R4:
[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip ad 192.168.4.1 24
[Huawei-GigabitEthernet0/0/1]int t0/0/1
[Huawei-Tunnel0/0/1]ip ad 10.1.1.1 24
[Huawei-Tunnel0/0/1]tunnel-protocol gre
[Huawei-Tunnel0/0/1]source 45.1.1.1
[Huawei-Tunnel0/0/1]description 15.1.1.1
[Huawei-Tunnel0/0/1]q
[Huawei]rip
[Huawei-rip-1]version 2
[Huawei-rip-1]un summary
[Huawei-rip-1]network 192.168.4.0
[Huawei-rip-1]network 10.0.0.0
[Huawei-rip-1]q
[Huawei]acl 2000
[Huawei-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[Huawei-acl-basic-2000]int s4/0/0
[Huawei-Serial4/0/0]nat outbound 2000
R5:
[Huawei]aaa
[Huawei-aaa]local-user huawei password cipher huawei123
Info: Add a new user.
[Huawei-aaa]local-user huawei service-type ppp
[Huawei-aaa]int s3/0/0
[Huawei-Serial3/0/0]ppp authentication-mode pap
[Huawei-Serial3/0/0]ip ad 15.1.1.2 24
[Huawei-Serial3/0/0]q
[Huawei]aaa
[Huawei-aaa]local-user huawei password cipher huawei123
[Huawei-aaa]local-user huawei service-type ppp
[Huawei-aaa]int s3/0/0
[Huawei-Serial3/0/0]ppp authentication-mode chap
[Huawei-Serial3/0/0]int s4/0/0
[Huawei-Serial4/0/0]link-protocol hdlc
Warning: The encapsulation protocol of the link will be changed. Continue? [Y/N]
:y