暑假第二天RIP实验

配置了多个路由器的接口与环回地址,并实现了RIP v1和v2的路由协议。通过路由汇总、ACL和路由成本调整确保了网络通信。在R1和R7之间设置了telnet映射,同时利用NAT技术和默认路由实现外部网络连接。通过ACL阻止R6和R7学习特定路由,最后验证了配置的正确性,包括R1到R7的ping测试和R4到外部网络的连通性。
摘要由CSDN通过智能技术生成

在这里插入图片描述

//R1 接口和三个环路
[R1]interface g0/0/0
[R1-GigabitEthernet0/0/0]ip address 1.0.0.1 30
[R1-GigabitEthernet0/0/0]interface g0/0/1
[R1-GigabitEthernet0/0/1]ip address 4.0.0.1 30
[R1-GigabitEthernet0/0/1]interface l 0
[R1-LoopBack0]ip address 172.16.1.1 24
[R1-LoopBack0]interface l 1
[R1-LoopBack1]ip address 172.16.2.1 24
[R1-LoopBack1]interface l 2
[R1-LoopBack2]ip address 172.16.3.1 24

//R2 接口和一个单环路
[R2]interface g0/0/0
[R2-GigabitEthernet0/0/1]interface g0/0/0
[R2-GigabitEthernet0/0/0]ip address 1.0.0.2 30
[R2-GigabitEthernet0/0/0]interface g0/0/1
[R2-GigabitEthernet0/0/1]ip address 2.0.0.1 30
[R2-GigabitEthernet0/0/1]interface l 0
[R2-LoopBack0]ip address 192.168.2.1 24

//R3 接口和一个单环路
[R3]interface g0/00/0
[R3-GigabitEthernet0/0/0]ip ad
[R3-GigabitEthernet0/0/0]ip address 2.0.0.2 30
[R3-GigabitEthernet0/0/0]interface g0/00/1
[R3-GigabitEthernet0/0/1]ip address 3.0.0.1 30
[R3-GigabitEthernet0/0/1]interface l 0
[R3-LoopBack0]ip address 192.168.3.1 24

[R4]interface g0/0/0
[R4-GigabitEthernet0/0/0]ip address 4.0.0.2 30
[R4-GigabitEthernet0/0/0]interface g0/0/1
[R4-GigabitEthernet0/0/1]ip address 3.0.0.2 30
[R4-GigabitEthernet0/0/1]interface g0/0/2
[R4-GigabitEthernet0/0/2]ip address 5.0.0.1 30
[R4-GigabitEthernet0/0/2]interface g4/0/0
[R4-GigabitEthernet4/0/0]ip address 6.0.0.1 30
[R4-GigabitEthernet4/0/0]interface l 0
[R4-LoopBack0]ip address 192.168.4.1 24

//ISP 接口和环路
[ISP]interface g0/0/0
[ISP-GigabitEthernet0/0/0]ip ad
[ISP-GigabitEthernet0/0/0]ip address 5.0.0.2 30
[ISP-GigabitEthernet0/0/0]interface l 0
[ISP-LoopBack0]ip address 192.168.5.1 24

//R6 接口和一个单环路
[R6]interface g0/0/0
[R6-GigabitEthernet0/0/0]ip address 6.0.0.2 30
[R6-GigabitEthernet0/0/0]interface g0/0/1
[R6-GigabitEthernet0/0/1]ip address 7.0.0.1 30
[R6-GigabitEthernet0/0/1]interface l 0
[R6-LoopBack0]ip ad
[R6-LoopBack0]ip address 192.168.6.1 24

//R7 接口和一个单环路
[R7]interface g0/00/0
[R7-GigabitEthernet0/0/0]ip ad
[R7-GigabitEthernet0/0/0]ip address 7.0.0.2 30
[R7-GigabitEthernet0/0/0]interface l 0
[R7-LoopBack0]ip address 192.168.7.1 24
二,配置RIP(需要区分v1和v2)
//RIPV1
//R1
[R1]rip
[R1-rip-1]version 2
[R1-rip-1]net
[R1-rip-1]network 172.16.0.0
[R1-rip-1]network 1.0.0.0
[R1-rip-1]network 4.0.0.0

//R2
[R2]rip
[R2-rip-1]version 2
[R2-rip-1]network 192.168.2.0
[R2-rip-1]network 1.0.0.0
[R2-rip-1]network 2.0.0.0

//R3
[R3]rip
[R3-rip-1]version 2
[R3-rip-1]network 192.168.3.0
[R3-rip-1]network 2.0.0.0
[R3-rip-1]network 3.0.0.0

//R4
[R4-rip-1]version 2
[R4-rip-1]network 192.168.4.0
[R4-rip-1]network 5.0.0.0
[R4-rip-1]network 3.0.0.0
[R4-rip-1]network 4.0.0.0
[R4-rip-1]network 6.0.0.0

//不宣告环回
//ISP
[ISP]rip
[ISP-rip-1]version 2
[ISP-rip-1]network 5.0.0.0

#RIP V1
//R6
[R6]rip
[R6-rip-1]ne
[R6-rip-1]network 6.0.0.0
[R6-rip-1]network 7.0.0.0
[R6-rip-1]network 192.168.6.0

//R7
[R7]rip
[R7-rip-1]ne
[R7-rip-1]network 7.0.0.0
[R7-rip-1]network 192.168.7.0
三,配置检查 (防止功亏一篑)
//R1和它的RIP路由表
[R1-rip-1]display this
[V200R003C00]

rip 1
version 2
network 172.16.0.0
network 1.0.0.0
network 4.0.0.0

return
//RIP路由表
[R1]display ip routing-table protocol rip

Public routing table : RIP
Destinations : 7 Routes : 7

RIP routing table status :
Destinations : 7 Routes : 7

Destination/Mask Proto Pre Cost Flags NextHop Interface

    2.0.0.0/30  RIP     100  1           D   1.0.0.2         GigabitEthernet

0/0/0
3.0.0.0/30 RIP 100 2 D 1.0.0.2 GigabitEthernet
0/0/0
5.0.0.0/30 RIP 100 3 D 1.0.0.2 GigabitEthernet
0/0/0
6.0.0.0/30 RIP 100 3 D 1.0.0.2 GigabitEthernet
0/0/0
192.168.2.0/24 RIP 100 1 D 1.0.0.2 GigabitEthernet
0/0/0
192.168.3.0/24 RIP 100 2 D 1.0.0.2 GigabitEthernet
0/0/0
192.168.4.0/24 RIP 100 3 D 1.0.0.2 GigabitEthernet
0/0/0

RIP routing table status :
Destinations : 0 Routes : 0

//R7和它的路由表
[R7-rip-1]display this
[V200R003C00]

rip 1
version 1
network 7.0.0.0
network 192.168.7.0

return

//R7的RIP路由表
[R7-rip-1]display ip routing-table protocol rip

Public routing table : RIP
Destinations : 2 Routes : 2

RIP routing table status :
Destinations : 2 Routes : 2

Destination/Mask Proto Pre Cost Flags NextHop Interface

    6.0.0.0/8   RIP     100  1           D   7.0.0.1         GigabitEthernet

0/0/0
192.168.6.0/24 RIP 100 1 D 7.0.0.1 GigabitEthernet
0/0/0

RIP routing table status :
Destinations : 0 Routes : 0

//R4和它的RIP路由表
[R4-rip-1]display this
[V200R003C00]

rip 1
version 2
network 192.168.4.0
network 5.0.0.0
network 3.0.0.0
network 4.0.0.0
network 6.0.0.0

return

//RIP路由表
[R4-rip-1]display ip routing-table protocol rip
Route Flags: R - relay, D - download to fib

Public routing table : RIP
Destinations : 7 Routes : 7

RIP routing table status :
Destinations : 7 Routes : 7

Destination/Mask Proto Pre Cost Flags NextHop Interface

    1.0.0.0/30  RIP     100  2           D   3.0.0.1         GigabitEthernet

0/0/1
2.0.0.0/30 RIP 100 1 D 3.0.0.1 GigabitEthernet
0/0/1
172.16.1.0/24 RIP 100 3 D 3.0.0.1 GigabitEthernet
0/0/1
172.16.2.0/24 RIP 100 3 D 3.0.0.1 GigabitEthernet
0/0/1
172.16.3.0/24 RIP 100 3 D 3.0.0.1 GigabitEthernet
0/0/1
192.168.2.0/24 RIP 100 2 D 3.0.0.1 GigabitEthernet
0/0/1
192.168.3.0/24 RIP 100 1 D 3.0.0.1 GigabitEthernet
0/0/1

RIP routing table status :
Destinations : 0 Routes : 0
五,路由汇总(注意防环!!!)
//需要在两个接口都要设置
[R1]interface g0/0/0
[R1-GigabitEthernet0/0/0]rip summary-address 172.16.0.0 255.255.252.0
[R1-GigabitEthernet0/0/0]interface g0/0/1
[R1-GigabitEthernet0/0/1]rip summary-address 172.16.0.0 255.255.252.0
[R1]ip route-static 172.16.0.0 22 NULL 0
六,配置路由ACL(1-2-3)
//选择在R3上设置 抓取R1的数据
[R3]acl 2000
[R3-acl-basic-2000]rule permit source 172.16.0.0 0

//查看配置,小心谨慎
[R3-acl-basic-2000]display this
[V200R003C00]

acl number 2000
rule 5 permit source 172.16.0.0 0

return
[R3-acl-basic-2000]q

//配置入接口增加cost – 以防万一,我设置1-2-3为cost+2 1-4-3为cost+5
[R3]interface g0/0/1
[R3-GigabitEthernet0/0/1]rip metricin 2000 5
[R3]interface g0/0/0
[R3-GigabitEthernet0/0/0]rip metricin 2000 2

//检查
[R3-GigabitEthernet0/0/0]display ip routing-table protocol rip
Route Flags: R - relay, D - download to fib

Public routing table : RIP
Destinations : 7 Routes : 7

RIP routing table status :
Destinations : 7 Routes : 7

Destination/Mask Proto Pre Cost Flags NextHop Interface

    1.0.0.0/30  RIP     100  1           D   2.0.0.1         GigabitEthernet

0/0/0
4.0.0.0/30 RIP 100 1 D 3.0.0.2 GigabitEthernet
0/0/1
5.0.0.0/30 RIP 100 1 D 3.0.0.2 GigabitEthernet
0/0/1
6.0.0.0/30 RIP 100 1 D 3.0.0.2 GigabitEthernet
0/0/1
172.16.0.0/22 RIP 100 4 D 2.0.0.1 GigabitEthernet
0/0/0
192.168.2.0/24 RIP 100 1 D 2.0.0.1 GigabitEthernet
0/0/0
192.168.4.0/24 RIP 100 1 D 3.0.0.2 GigabitEthernet
0/0/1

RIP routing table status :
Destinations : 0 Routes : 0

//此时1-2-3的cost为 2+2 — 4
七,设置R1的telent映射①
//首先保证R2可以telentR7

//我选择在R6的入接口上设置为version2
[R6]interface g0/0/0
[R6-GigabitEthernet0/0/0]rip version 2
[R6-GigabitEthernet0/0/0]q

//此时R6也开始刷新V2的路由
[R6]display ip routing-table protocol rip
Route Flags: R - relay, D - download to fib

Public routing table : RIP
Destinations : 10 Routes : 10

RIP routing table status :
Destinations : 10 Routes : 10

Destination/Mask Proto Pre Cost Flags NextHop Interface

    1.0.0.0/30  RIP     100  3           D   6.0.0.1         GigabitEthernet

0/0/0
2.0.0.0/30 RIP 100 2 D 6.0.0.1 GigabitEthernet
0/0/0
3.0.0.0/30 RIP 100 1 D 6.0.0.1 GigabitEthernet
0/0/0
4.0.0.0/30 RIP 100 1 D 6.0.0.1 GigabitEthernet
0/0/0
5.0.0.0/30 RIP 100 1 D 6.0.0.1 GigabitEthernet
0/0/0
172.16.0.0/22 RIP 100 6 D 6.0.0.1 GigabitEthernet
0/0/0
192.168.2.0/24 RIP 100 3 D 6.0.0.1 GigabitEthernet
0/0/0
192.168.3.0/24 RIP 100 2 D 6.0.0.1 GigabitEthernet
0/0/0
192.168.4.0/24 RIP 100 1 D 6.0.0.1 GigabitEthernet
0/0/0
192.168.7.0/24 RIP 100 1 D 7.0.0.2 GigabitEthernet
0/0/1

RIP routing table status :
Destinations : 0 Routes : 0

//以防万一,我在R7上也查看
[R7]display ip routing-table protocol rip
Route Flags: R - relay, D - download to fib

Public routing table : RIP
Destinations : 11 Routes : 11

RIP routing table status :
Destinations : 11 Routes : 11

Destination/Mask Proto Pre Cost Flags NextHop Interface

    1.0.0.0/8   RIP     100  4           D   7.0.0.1         GigabitEthernet

0/0/0
2.0.0.0/8 RIP 100 3 D 7.0.0.1 GigabitEthernet
0/0/0
3.0.0.0/8 RIP 100 2 D 7.0.0.1 GigabitEthernet
0/0/0
4.0.0.0/8 RIP 100 2 D 7.0.0.1 GigabitEthernet
0/0/0
5.0.0.0/8 RIP 100 2 D 7.0.0.1 GigabitEthernet
0/0/0
6.0.0.0/8 RIP 100 1 D 7.0.0.1 GigabitEthernet
0/0/0
172.16.0.0/16 RIP 100 7 D 7.0.0.1 GigabitEthernet
0/0/0
192.168.2.0/24 RIP 100 4 D 7.0.0.1 GigabitEthernet
0/0/0
192.168.3.0/24 RIP 100 3 D 7.0.0.1 GigabitEthernet
0/0/0
192.168.4.0/24 RIP 100 2 D 7.0.0.1 GigabitEthernet
0/0/0
192.168.6.0/24 RIP 100 1 D 7.0.0.1 GigabitEthernet
0/0/0

RIP routing table status :
Destinations : 0 Routes : 0

//在R2上尝试去pingR7 --ok
[R2]ping 7.0.0.2
PING 7.0.0.2: 56 data bytes, press CTRL_C to break
Reply from 7.0.0.2: bytes=56 Sequence=1 ttl=252 time=40 ms
Reply from 7.0.0.2: bytes=56 Sequence=2 ttl=252 time=30 ms
Reply from 7.0.0.2: bytes=56 Sequence=3 ttl=252 time=40 ms
Reply from 7.0.0.2: bytes=56 Sequence=4 ttl=252 time=50 ms
Reply from 7.0.0.2: bytes=56 Sequence=5 ttl=252 time=40 ms

— 7.0.0.2 ping statistics —
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 30/40/50 ms
七,设置R1的telent映射 ②
//为了保证R2去R7的cost最小,且R7去R1的cost也最小
//保证为R2是必经之路!!!
// 2*-3-4-5-6-7 7-6-5-4-3-2*-1

//我在R4上设置到R1的路由cost+10 — 加狠点
[R4]acl 2000

//抓取R7的返回流量
[R4-acl-basic-2000]rule permit source 7.0.0.0 0
[R4-acl-basic-2000]q
[R4]interface g0/0/0
[R4-GigabitEthernet0/0/0]rip metricout 2000 10

//此时再去查看R4的rip表
//到达172.16.0.0/22的cost为5 ,且走的是 3.0.0.1 #所以前面的cost得加狠点
[R4]display ip routing-table protocol rip
Route Flags: R - relay, D - download to fib

Public routing table : RIP
Destinations : 8 Routes : 8

RIP routing table status :
Destinations : 8 Routes : 8

Destination/Mask Proto Pre Cost Flags NextHop Interface

    1.0.0.0/30  RIP     100  2           D   3.0.0.1         GigabitEthernet

0/0/1
2.0.0.0/30 RIP 100 1 D 3.0.0.1 GigabitEthernet
0/0/1
7.0.0.0/30 RIP 100 1 D 6.0.0.2 GigabitEthernet
4/0/0
172.16.0.0/22 RIP 100 5 D 3.0.0.1 GigabitEthernet
0/0/1
192.168.2.0/24 RIP 100 2 D 3.0.0.1 GigabitEthernet
0/0/1
192.168.3.0/24 RIP 100 1 D 3.0.0.1 GigabitEthernet
0/0/1
192.168.6.0/24 RIP 100 1 D 6.0.0.2 GigabitEthernet
4/0/0
192.168.7.0/24 RIP 100 2 D 6.0.0.2 GigabitEthernet
4/0/0

RIP routing table status :
Destinations : 0 Routes : 0
七,设置R1的telent映射 ③
//主要做认证 #用户为lxb 密码为123456 密文

[R7]user-interface vty 0 4
[R7-ui-vty0-4]authentication-mode aaa
[R7-ui-vty0-4]q
[R7]aaa
[R7-aaa]local-user lxb privilege level 15 password cipher 123456
Info: Add a new user.

//检查,以防万一
[R7-aaa]display this
[V200R003C00]

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user lxb password cipher % % epUpT4#e("xqEmQl1GiARD5 % %$
local-user lxb privilege level 15
local-user admin password cipher % % K8m.Nt84DZ}e#<0`8bmE3Uw}% %
local-user admin service-type http

return

//然后去R2的接口做映射 #这个为端口映射
[R2-GigabitEthernet0/0/0]nat server protocol tcp global current-interface 23 ins
ide 7.0.0.2 23
Warning:The port 23 is well-known port. If you continue it may cause function fa
ilure.
Are you sure to continue?[Y/N]:y

//检查
[R2-GigabitEthernet0/0/0]display this
[V200R003C00]

interface GigabitEthernet0/0/0
ip address 1.0.0.2 255.255.255.252
nat server protocol tcp global current-interface telnet inside 7.0.0.2 23

return

    #这边有点操蛋,碰到几个问题,后面会总结①

八,设置nat技术
//众所周知,流量是相互的,所以我设置一个静态缺省,通完R4的接口
[ISP]ip route-static 0.0.0.0 0 5.0.0.1

//然后就是在R4上配置缺省和ACL策略了

//缺省
[R4]ip route-static 0.0.0.0 0 5.0.0.2
[R4]return
[R4]rip
[R4-rip-1]default-route originate

//nat策略
[R4]nat address-group 1 192.168.5.10 192.168.5.20
[R4]acl 2002
[R4-acl-basic-2002]rule permit source any
[R4-acl-basic-2002]q
[R4]interface g0/0/2
[R4-GigabitEthernet0/0/2]nat outbound 2002 address-group 1
[R4-GigabitEthernet0/0/2]q
#这边出了个操蛋的事情,标记②
九,配置R1不能被R6和R7学习
[R6]acl 2000
[R6-acl-basic-2000]rule 5 deny source 172.16.0.0 0
[R6-acl-basic-2000]display this
[V200R003C00]

acl number 2000
rule 5 deny source 172.16.0.0 0

return
[R6-acl-basic-2000]rule permit source any
[R6-rip-1]filter-policy 2000 import
#这边看我操作就是有点操蛋,出来个问题,标记③

//此时去R6和R7的路由表上刷新
[R6]display ip routing-table protocol rip
Route Flags: R - relay, D - download to fib

Public routing table : RIP
Destinations : 10 Routes : 10

RIP routing table status :
Destinations : 10 Routes : 10

Destination/Mask Proto Pre Cost Flags NextHop Interface

    0.0.0.0/0   RIP     100  1           D   6.0.0.1         GigabitEthernet

0/0/0
1.0.0.0/30 RIP 100 3 D 6.0.0.1 GigabitEthernet
0/0/0
2.0.0.0/30 RIP 100 2 D 6.0.0.1 GigabitEthernet
0/0/0
3.0.0.0/30 RIP 100 1 D 6.0.0.1 GigabitEthernet
0/0/0
4.0.0.0/30 RIP 100 1 D 6.0.0.1 GigabitEthernet
0/0/0
5.0.0.0/30 RIP 100 1 D 6.0.0.1 GigabitEthernet
0/0/0
192.168.2.0/24 RIP 100 3 D 6.0.0.1 GigabitEthernet
0/0/0
192.168.3.0/24 RIP 100 2 D 6.0.0.1 GigabitEthernet
0/0/0
192.168.4.0/24 RIP 100 1 D 6.0.0.1 GigabitEthernet
0/0/0
192.168.7.0/24 RIP 100 1 D 7.0.0.2 GigabitEthernet
0/0/1

RIP routing table status :
Destinations : 0 Routes : 0

display ip routing-table protocol rip
Route Flags: R - relay, D - download to fib

Public routing table : RIP
Destinations : 11 Routes : 11

RIP routing table status :
Destinations : 11 Routes : 11

Destination/Mask Proto Pre Cost Flags NextHop Interface

    0.0.0.0/0   RIP     100  2           D   7.0.0.1         GigabitEthernet

0/0/0
1.0.0.0/8 RIP 100 4 D 7.0.0.1 GigabitEthernet
0/0/0
2.0.0.0/8 RIP 100 3 D 7.0.0.1 GigabitEthernet
0/0/0
3.0.0.0/8 RIP 100 2 D 7.0.0.1 GigabitEthernet
0/0/0
4.0.0.0/8 RIP 100 2 D 7.0.0.1 GigabitEthernet
0/0/0
5.0.0.0/8 RIP 100 2 D 7.0.0.1 GigabitEthernet
0/0/0
6.0.0.0/8 RIP 100 1 D 7.0.0.1 GigabitEthernet
0/0/0
192.168.2.0/24 RIP 100 4 D 7.0.0.1 GigabitEthernet
0/0/0
192.168.3.0/24 RIP 100 3 D 7.0.0.1 GigabitEthernet
0/0/0
192.168.4.0/24 RIP 100 2 D 7.0.0.1 GigabitEthernet
0/0/0
192.168.6.0/24 RIP 100 1 D 7.0.0.1 GigabitEthernet
0/0/0

RIP routing table status :
Destinations : 0 Routes : 0

//此时失去172.16.0.0/22这个路由信息
十,验证
//做了这么久配置,检验成果的时候

//R1ping R7
ping 192.168.7.1
PING 192.168.7.1: 56 data bytes, press CTRL_C to break
Reply from 192.168.7.1: bytes=56 Sequence=1 ttl=251 time=70 ms
Reply from 192.168.7.1: bytes=56 Sequence=2 ttl=251 time=40 ms
Reply from 192.168.7.1: bytes=56 Sequence=3 ttl=251 time=60 ms
Reply from 192.168.7.1: bytes=56 Sequence=4 ttl=251 time=50 ms
Reply from 192.168.7.1: bytes=56 Sequence=5 ttl=251 time=40 ms

//R4 ping外网
R4ping 192.168.5.1
PING 192.168.5.1: 56 data bytes, press CTRL_C to break
Reply from 192.168.5.1: bytes=56 Sequence=1 ttl=255 time=20 ms
Reply from 192.168.5.1: bytes=56 Sequence=2 ttl=255 time=10 ms
Reply from 192.168.5.1: bytes=56 Sequence=3 ttl=255 time=20 ms
Reply from 192.168.5.1: bytes=56 Sequence=4 ttl=255 time=30 ms
Reply from 192.168.5.1: bytes=56 Sequence=5 ttl=255 time=20 ms

— 192.168.5.1 ping statistics —
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 10/20/30 ms

  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值