R5为IsP,只能进行Ip地址配置﹔其所有地址均配为公有IP地址
[r1]-[r4]配置缺省
[r1]ip route-static 0.0.0.0 0 15.0.0.0.2(其他同理)
[isp-Serial3/0/0]ip address 15.0.0.2 24(其他ip配置同理)

2,R1和R5间使用PPP的PAP认证,R5为主认证方﹔
- [isp-aaa]local-user admin password cipher 123456
- [isp-aaa]local-user admin service-type ppp
- [isp-Serial3/0/0]ppp authentication-mode pap
- [r1-Serial4/0/0]ppp pap local-user admin password cipher 123456
R2于R5之间使用PPP的chap认证,R5为主认证方﹔
- [isp-aaa]local-user admin password cipher 123456
- [isp-aaa]local-user admin service-type ppp
- [isp-Serial3/0/1]ppp authentication-mode chap
- [r2-Serial4/0/0]ppp chap local-user admin
- [r2-Serial4/0/0]ppp chap password cipher 123456
R3于R5之间使用HDLc封装。
[r3-Serial4/0/0]link-protocol hdlc
Warning: The encapsulation protocol of the link will be changed. Continue? [Y/N]
:y
[isp-Serial4/0/0]link-protocol hdlc
Warning: The encapsulation protocol of the link will be changed. Continue? [Y/N]
:y
3,R1/R2/R3构建一个HGRE环境,R1为中心站点;R1、R4间为点到点的GRE。
- [r1-Tunnel0/0/0]ip add 192.168.5.1 24
- [r1-Tunnel0/0/0]tunnel-protocol gre p2mp
- [r1-Tunnel0/0/0]source 15.0.0.1
- [r1-Tunnel0/0/0]nhrp network-id 100
- [r2-Tunnel0/0/0]ip address 192.168.5.2 24
- [r2-Tunnel0/0/0]tunnel-protocol gre p2mp
- [r2-Tunnel0/0/0]source Serial 4/0/0
- [r2-Tunnel0/0/0]nhrp network-id 100
- [r2-Tunnel0/0/0]nhrp entry 192.168.5.1 15.0.0.1 register
- [r3-Tunnel0/0/0]ip address 192.168.5.3 24
- [r3-Tunnel0/0/0]tunnel-protocol gre p2mp
- [r3-Tunnel0/0/0]source Serial 4/0/0
- [r3-Tunnel0/0/0]nhrp network-id 100
- [r3-Tunnel0/0/0]nhrp entry 192.168.5.1 15.0.0.1 register
- [r1-Tunnel0/0/1]ip address 192.168.6.1 24
- [r1-Tunnel0/0/1]tunnel-protocol gre
- [r1-Tunnel0/0/1]source 15.0.0.1
- [r1-Tunnel0/0/1]description 45.0.0.1
- [r4-Tunnel0/0/0]ip address 192.168.6.2 24
- [r4-Tunnel0/0/0]tunnel-protocol gre
- [r4-Tunnel0/0/0]source 45.0.0.1
- [r4-Tunnel0/0/0]destination 15.0.0.1
4,整个私有网络基于RIp全网可达
- [r1-rip-1]network 192.168.5.0
- [r1-rip-1]network 192.168.1.0
- [r1-rip-1]network 192.168.6.0(r2-r4同理)
- [r1-Tunnel0/0/0]undo rip split-horizon
[r1-Tunnel0/0/0]nhrp entry multicast dynamic
5,所有pc设置私有为源IP,可以访问Rs环回。

- [r1-Serial4/0/0]nat outbound 2000
- [r1-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255([r2]-[r4]同理)
本文档详细描述了如何配置IP网络,其中R5作为ISP只使用公有IP地址。R1、R2、R3与R5之间通过PPP认证建立连接,R1与R5使用PAP,R2与R5使用CHAP。R1、R2、R3之间利用HGRE建立隧道环境,R1为中心站点,R1与R4之间则配置了点到点GRE隧道。同时,整个私有网络基于RIP协议实现全网可达,并配置了NAT策略以允许PC访问RS环回。
433

被折叠的 条评论
为什么被折叠?



