实验步骤:
根据题目配置ip地址,然后实现PC可通公网,路由器之间可以相互通讯,最后根据再按要求配置相关内容。首先给R1,R3,R4配置静态路由,使得路由器之间可通讯,pc可达公网。
R1:
R2:
R3:
1、R2为ISP,其上只能配置IP地址(且有一个环回地址代表互联网)
2、R1与R2之间为HDLC封装
R1:
[r1]interface s4/0/0
[r1-Serial4/0/0]link-protocol hdlc
R2:
[r2-LoopBack0]int s4/0/0
[r2-Serial4/0/0]link-protocol hdlc
3、R2与R3为PPP封装,pap认证,R2为主认证方
3、R2与R3为PPP封装,pap认证,R2为主认证方
R2:
[r2-Serial4/0/1]aaa
[r2-aaa]local-user xzl privilege level 15 password cipher 123456
Info: Add a new user.
[r2-aaa]local-user xzl service-type ppp
[r2-aaa]int s4/0/1
[r2-Serial4/0/1]ppp authentication-mode pap
R3:
[r3]int s4/0/0
[r3-Serial4/0/0]ppp pap local-user xzl password cipher 123456
4、R2与R4为PPP封装,chap认证,R2为主认证方
R2:
[r2]aaa
[r2-aaa]local-user qq privilege level 15 password cipher 123456
[r2-aaa]local-user qq service-type ppp
[r2]int s3/0/0
[r2-Serial3/0/0]ppp au
[r2-Serial3/0/0]ppp authentication-mode chap
R4:
[r4]int s4/0/0
[r4-Serial4/0/0]ppp chap password cipher 123456
[r4-Serial4/0/0]ppp chap user qq
5、R1、R3、R4构建MGRE环境,仅R1 IP固定
R1:(中心站点)
[r1]int t0/0/0
[r1-Tunnel0/0/0]ip address 10.1.1.1 24
[r1-Tunnel0/0/0]tunnel-protocol gre p2mp
[r1-Tunnel0/0/0]source 12.1.1.1
[r1-Tunnel0/0/0]nhrp entry multicast dynamic
[r1-Tunnel0/0/0]nhrp network-id 100
[r1-Tunnel0/0/0]undo rip split-horizon
R3:(分支占点)
[r3]int t0/0/0
[r3-Tunnel0/0/0]ip address 10.1.1.2 24
[r3-Tunnel0/0/0]tunnel-protocol gre p2mp
[r3-Tunnel0/0/0]source s4/0/0
[r3-Tunnel0/0/0]nhrp network-id 100
[r3-Tunnel0/0/0]nhrp entry 10.1.1.1 12.1.1.1 register
R4:(分支站点)
[r4]int t0/0/0
[r4-Tunnel0/0/0]ip address 10.1.1.3 24
[r4-Tunnel0/0/0]tunnel-protocol gre p2mp
[r4-Tunnel0/0/0]source s4/0/0
[r4-Tunnel0/0/0]nhrp network-id 100
[r4-Tunnel0/0/0]nhrp entry 10.1.1.1 12.1.1.1
6、内网使用RIP获取路由,所有PC可以互相访问,并且可访问R2的环回地址
R1:
[r1]ripi
[r1-rip-1]version 2
[r1-rip-1]network 192.168.1.0
[r1-rip-1]network 10.0.0.0
关闭水平分割:
[r1-Tunnel0/0/0]undo rip split-horizon
R3:
[r3]rip
[r3-rip-1]version 2
[r3-rip-1]network 192.168.2.0
[r3-rip-1]network 10.0.0.0
R4:
[r4]rip
[r4-rip-1]version 2
[r4-rip-1]network 192.168.3.0
[r4-rip-1]network 10.0.0.0