HCIP第二次实验

配置ip

[r1]int g0/0/0

[r1-GigabitEthernet0/0/0]ip address 192.168.1.2 24

[r1-GigabitEthernet0/0/0]int s4/0/0

[r1-Serial4/0/0]ip address 12.1.1.1 24

[r2]int s3/0/0

[r2-Serial3/0/0]ip address 12.1.1.2 24

[r2-Serial3/0/0]int s3/0/1

[r2-Serial3/0/1]ip address 13.1.1.1 24

[r2-Serial3/0/1]int s4/0/0

[r2-Serial4/0/0]ip address 14.1.1.1 24

[r2]interface LoopBack 0

[r2-LoopBack0]ip address 2.2.2.2 24

[r3]int s4/0/0

[r3-Serial4/0/0]ip address 13.1.1.2 24

[r3-Serial4/0/0]int g0/0/0

[r3-GigabitEthernet0/0/0]ip address 192.168.2.2 24

[r4]int g0/0/0

[r4-GigabitEthernet0/0/0]ip address 192.168.3.2 24

[r4-GigabitEthernet0/0/0]int s4/0/0

[r4-Serial4/0/0]ip address 14.1.1.2 24

R1和R2为 HDLC封装

[r1]int s4/0/0

[r1-Serial4/0/0]link-protocol hdlc

Warning: The encapsulation protocol of the link will be changed. Continue? [Y/N]:

Y

[r2]int s3/0/0

[r2-Serial3/0/0]link-protocol hdlc

Warning: The encapsulation protocol of the link will be changed. Continue? [Y/N]:

Y

R2到R3为PPP封装且PAP认证时R2为主认证方

[r2]aaa  

[r2-aaa]local-user huawei password  cipher 123456

[r2-aaa]local-user huawei service-type ppp

[r2]int s3/0/1

[r2-Serial3/0/1]link-protocol ppp

[r2-Serial3/0/1]ppp authentication-mode pap

[r3]int s4/0/0

[r3-Serial4/0/0]link-protocol ppp

[r3-Serial4/0/0]ppp pap local-user huawei password cipher 123456

R2到R4为PPP封装且CHAP认证时R2为主认证方

[r2]aaa

[r2-aaa]local-user huawei password cipher 123456

[r2-aaa]local-user huawei service-type ppp

[r2]int s4/0/0

[r2-Serial4/0/0]link-protocol ppp

[r2-Serial4/0/0]ppp authentication-mode chap

[r4]int s4/0/0

[r4-Serial4/0/0]link-protocol ppp

[r4-Serial4/0/0]ppp chap user huawei

[r4-Serial4/0/0]ppp chap password cipher 123456

做缺省，NET

[r1]ip route-static 0.0.0.0 0 12.1.1.2

[r1]acl 2000

[r1-acl-basic-2000]rule 1 permit source any

[r1]int s4/0/0

[r1-Serial4/0/0]nat outbound 2000    

[r3]ip route-static 0.0.0.0 0 13.1.1.1

[r3]acl 2000

[r3-acl-basic-2000]rule 1 permit source any

[r3]int s4/0/0

[r3-Serial4/0/0]nat outbound 2000

[r4]ip route-static 0.0.0.0 0 14.1.1.1

[r4]acl 2000

[r4-acl-basic-2000]rule 1 permit source any

[r4]int s4/0/0

[r4-Serial4/0/0]nat outbound 2000

构建MGRE环境

将R1设置为中心站点

[r1]interface Tunnel 0/0/0

[r1-Tunnel0/0/0]ip address 10.1.1.1 24

[r1-Tunnel0/0/0]tunnel-protocol gre p2mp

[r1-Tunnel0/0/0]source 12.1.1.1

[r1-Tunnel0/0/0]nhrp entry multicast dynamic

[r1-Tunnel0/0/0]nhrp network-id 100

将 R3，R4设置为分支站点

[r3]interface Tunnel 0/0/0

[r3-Tunnel0/0/0]ip address 10.1.1.2 24

[r3-Tunnel0/0/0]tunnel-protocol gre p2mp

[r3-Tunnel0/0/0]source s4/0/0

[r3-Tunnel0/0/0]nhrp network-id 100

[r3-Tunnel0/0/0]nhrp entry 10.1.1.1 12.1.1.1 register

[r4]interface Tunnel 0/0/0

[r4-Tunnel0/0/0]ip address 10.1.1.3 24

[r4-Tunnel0/0/0]tunnel-protocol gre p2mp

[r4-Tunnel0/0/0]source s4/0/0

[r4-Tunnel0/0/0]nhrp network-id 100

[r4-Tunnel0/0/0]nhrp entry 10.1.1.1 12.1.1.1 register

设置 RIP

[r1]rip

[r1-rip-1]version 2

[r1-rip-1]network 10.0.0.0

[r1-rip-1]network 192.168.1.0

[r3]rip

[r3-rip-1]version 2

[r3-rip-1]network 10.0.0.0

[r3-rip-1]network 192.168.2.0

[r4]rip

[r4-rip-1]version 2

[r4-rip-1]network 10.0.0.0

[r4-rip-1]network 192.168.3.0

关闭R1上S4/0/0的水平分割

[r1]int Tunnel 0/0/0

[r1-Tunnel0/0/0]undo rip split-horizon

检测

PC1去PING PC2和PC3

 PC2去PING PC3

PC1,PC2,PC3访问R2的环回