先配接口IP地址和环回。
[r1-Serial4/0/0]ip address 12.1.1.1 24
[r1-LoopBack0]ip address 1.1.1.1 24
[r2-Serial4/0/1]ip address 12.1.1.2 24
[r2-Serial4/0/0]ip address 23.1.1.1 24
[r2-LoopBack0]ip address 2.2.2.2 24
[r3-Serial4/0/1]ip address 23.1.1.2 24
[r3-GigabitEthernet0/0/0]ip address 34.1.1.1 24
[r3-LoopBack0]ip address 3.3.3.3 24
[r4-GigabitEthernet0/0/0]ip address 34.1.1.2 24
[r4-GigabitEthernet0/0/1]ip address 45.1.1.1 24
[r4-GigabitEthernet0/0/2]ip address 46.1.1.1 24
[r5-GigabitEthernet0/0/0]ip address 45.1.1.2 24
[r5-LoopBack0]ip address 5.5.5.5 24
[r6-GigabitEthernet0/0/0]ip address 46.1.1.2 24
[r6-LoopBack0]ip address 6.6.6.6 24
然后开始实验的第二步R1-R2之间ppp的pap单向认证。
[r1]aaa
[r1-aaa]local-user hcia password cipher 123456
[r1-aaa]local-user hcia service-type ppp
[r1-aaa]int s4/0/0
[r1-Serial4/0/0]ppp authentication-mode pap
[r2-Serial4/0/0]link-protocol ppp
[r2-Serial4/0/0]ppp pap local-user hcia password cipher 123456
然后实验第三步R2-R3之间做ppp的chap双向认证。
[r2]aaa
[r2-aaa]local-user hcip password cipher 234567
[r2-aaa]local-user hcip service-type ppp
[r2-Serial4/0/0]link-protocol ppp
[r2-Serial4/0/0]ppp authentication-mode chap
[r3-Serial4/0/1]link-protocol ppp
[r3-Serial4/0/1]ppp chap user hcip
[r3-Serial4/0/1]ppp chap password cipher 234567
[r3]aaa
[r3-aaa]local-user hcie password cipher 345678
[r3-aaa]local-user hcie service-type ppp
[r3-Serial4/0/1]link-protocol ppp
[r3-Serial4/0/1]ppp authentication-mode chap
[r2-Serial4/0/0]link-protocol ppp
[r2-Serial4/0/0]ppp chap user hcie
[r2-Serial4/0/0]ppp chap password cipher 345678
然后建立mgre通道,让R3成为hub端。R5-R6为spoke端口,R5-R6向R3注册。
[r3]interface t0/0/0
[r3-Tunnel0/0/0]ip address 10.1.1.1 24
[r3-Tunnel0/0/0]tunnel-protocol gre p2mp
[r3-Tunnel0/0/0]source 34.1.1.1
[r3-Tunnel0/0/0]nhrp network-id 100
[r3-Tunnel0/0/0]nhrp entry multicast dynamic
[r5]interface t0/0/0
[r5-Tunnel0/0/0]ip address 10.1.1.2 24
[r5-Tunnel0/0/0]tunnel-protocol gre p2mp
[r5-Tunnel0/0/0]source 45.1.1.2
[r5-Tunnel0/0/0]nhrp network-id 100
[r5-Tunnel0/0/0]nhrp entry 10.1.1.1 34.1.1.1 register
[r6]interface t0/0/0
[r6-Tunnel0/0/0]ip address 10.1.1.3 24
[r6-Tunnel0/0/0]tunnel-protocol gre p2mp
[r6-Tunnel0/0/0]source 46.1.1.2
[r6-Tunnel0/0/0]nhrp network-id 100
[r6-Tunnel0/0/0]nhrp entry 10.1.1.1 34.1.1.1 register
然后我们R3-R5-R6各写一条缺省让公网地址可以通信。
[r3]ip route-static 0.0.0.0 0 34.1.1.2
[r5]ip route-static 0.0.0.0 0 45.1.1.1
[r6]ip route-static 0.0.0.0 0 46.1.1.1
之后启用ospf协议,宣告。注意:R3-R5-R6宣告的是通道接口,而且要修改优先级让R5-R6不参与选举,顺带修改R3-R5-R6的通道接口类型为MBA
[r1]ospf 1 router-id 1.1.1.1
[r1-ospf-1]area 0
[r1-ospf-1-area-0.0.0.0]network 1.1.1.1 0.0.0.0
[r1-ospf-1-area-0.0.0.0]network 12.1.1.1 0.0.0.0
[r2]ospf 1 router-id 2.2.2.2
[r2-ospf-1]area 0
[r2-ospf-1-area-0.0.0.0]network 2.2.2.2 0.0.0.0
[r2-ospf-1-area-0.0.0.0]network 12.1.1.2 0.0.0.0
[r2-ospf-1-area-0.0.0.0]network 23.1.1.1 0.0.0.0
[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1]area 0
[r3-ospf-1-area-0.0.0.0]network 3.3.3.3 0.0.0.0
[r3-ospf-1-area-0.0.0.0]network 23.1.1.2 0.0.0.0
[r3-ospf-1-area-0.0.0.0]network 10.1.1.1 0.0.0.0
[r3-Tunnel0/0/0]ospf network-type broadcast
[r5]ospf 1 router-id 5.5.5.5
[r5-ospf-1]area 0
[r5-ospf-1-area-0.0.0.0]network 5.5.5.5 0.0.0.0
[r5-ospf-1-area-0.0.0.0]network 10.1.1.2 0.0.0.0
[r5-Tunnel0/0/0]ospf dr-priority 0
[r5-Tunnel0/0/0]ospf network-type broadcast
[r6]ospf 1 router-id 6.6.6.6
[r6-ospf-1]area 0
[r6-ospf-1-area-0.0.0.0]network 6.6.6.6 0.0.0.0
[r6-ospf-1-area-0.0.0.0]network 10.1.1.3 0.0.0.0
[r6-Tunnel0/0/0]ospf dr-priority 0
[r6-Tunnel0/0/0]ospf network-type broadcast
然后我们在R3上看已经学到了全部路由,由此ping全网可达。