HCIP第三次实验

 

分配ip

[r1]int g0/0/0

[r1-GigabitEthernet0/0/0]ip address 192.168.1.2 24

[r1-GigabitEthernet0/0/0]int g0/0/2

[r1-GigabitEthernet0/0/2]ip address 14.1.1.2 24

[r1-GigabitEthernet0/0/2]int g0/0/1

[r1-GigabitEthernet0/0/1]ip address 41.1.1.2 24

[r2]int g0/0/1

[r2-GigabitEthernet0/0/1]ip address 192.1368.2.2 24

[r2-GigabitEthernet0/0/1]int g0/0/0

[r2-GigabitEthernet0/0/0]ip address 24.1.1.2 24

[r3]int g0/0/1

[r3-GigabitEthernet0/0/1]ip address 192.168.3.2 24

[r3-GigabitEthernet0/0/1]int g0/0/0

[r3-GigabitEthernet0/0/0]ip address 34.1.1.2 24

[isp]int g0/0/1

[isp-GigabitEthernet0/0/1]ip address 14.1.1.1 24

[isp-GigabitEthernet0/0/1]int g0/0/0

[isp-GigabitEthernet0/0/0]ip address 41.1.1.1 24

[isp-GigabitEthernet0/0/0]int g0/0/2

[isp-GigabitEthernet0/0/2]ip address 44.1.1.1 24

[isp-GigabitEthernet0/0/2]int g4/0/2

[isp-GigabitEthernet4/0/2]ip address 24.1.1.1 24

[isp-GigabitEthernet4/0/2]int g4/0/1

[isp-GigabitEthernet4/0/1]ip address 34.1.1.1 24

[isp-GigabitEthernet4/0/1]int g4/0/0

[isp-GigabitEthernet4/0/0]ip address 54.1.1.1 24

[isp]int LoopBack 0

[isp-LoopBack0]ip add

[isp-LoopBack0]ip address 2.2.2.2 24

[r5]int g0/0/1

[r5-GigabitEthernet0/0/1]ip address 192.168.4.2 24

[r5-GigabitEthernet0/0/1]int g0/0/0

[r5-GigabitEthernet0/0/0]ip address 44.1.1.2 24

[r6]int g0/0/1

[r6-GigabitEthernet0/0/1]ip address 192.168.5.2 24

[r6-GigabitEthernet0/0/1]int g0/0/0

[r6-GigabitEthernet0/0/0]ip address 54.1.1.2 24

公网和外网互通

[r1]ip route-static 0.0.0.0 0 14.1.1.1

[r1]ip route-static 0.0.0.0 0 41.1.1.1

[r2]ip route-static 0.0.0.0 0 24.1.1.1

[r3]ip route-static 0.0.0.0 0 34.1.1.1

[r5]ip route-static 0.0.0.0 0 44.1.1.1

[r6]ip route-static 0.0.0.0 0 54.1.1.1

[r1]acl 2000

[r1-acl-basic-2000]rule 1 permit source any

[r1]int g0/0/1

[r1-GigabitEthernet0/0/1]nat outbound 2000

[r1-GigabitEthernet0/0/1]int g0/0/2

[r1-GigabitEthernet0/0/2]nat outbound 2000

[r2]acl 2000

[r2-acl-basic-2000]rule 1 permit source any

[r2]int g0/0/0

[r2-GigabitEthernet0/0/0]nat outbound 2000

[r3]acl 2000

[r3-acl-basic-2000]rule 1 permit source any

[r3]int g0/0/0

[r3-GigabitEthernet0/0/0]nat outbound 2000

[r5]acl 2000

[r5-acl-basic-2000]rule 1 permit source any

[r5]int g0/0/0

[r5-GigabitEthernet0/0/0]nat outbound 2000

[r6]acl 2000

[r6-acl-basic-2000]rule 1 permit source any

[r6]int g0/0/0

[r6-GigabitEthernet0/0/0]nat outbound 2000

r1，r2，r3星型结构MGRE

[r1]int Tunnel 0/0/0

[r1-Tunnel0/0/0]ip address 10.1.1.1 24

[r1-Tunnel0/0/0]tunnel-protocol gre p2mp

[r1-Tunnel0/0/0]source 14.1.1.2

[r1-Tunnel0/0/0]nhrp entry multicast dynamic

[r1-Tunnel0/0/0]nhrp network-id 100

[r2]int Tunnel 0/0/0

[r2-Tunnel0/0/0]ip address 10.1.1.2 24

[r2-Tunnel0/0/0]tunnel-protocol gre p2mp

[r2-Tunnel0/0/0]nhrp network-id 100

[r2-Tunnel0/0/0]nhrp entry 10.1.1.1 14.1.1.2 register

[r3]int Tunnel 0/0/0

[r3-Tunnel0/0/0]ip address 10.1.1.3 24

[r3-Tunnel0/0/0]tunnel-protocol gre p2mp

[r3-Tunnel0/0/0]nhrp network-id 100

[r3-Tunnel0/0/0]nhrp entry 10.1.1.1 14.1.1.2 register

MGRE视为伪广播，所以要改接口配置，该接口优先级，重新选取DR，BDR

[r1-Tunnel0/0/0]ospf network-type broadcast

[r2-Tunnel0/0/0]ospf network-type broadcast

[r3-Tunnel0/0/0]ospf network-type broadcast

[r3]int g0/0/0

[r3-GigabitEthernet0/0/0]ospf dr-priority 0

<r3>reset ospf process

Warning: The OSPF process will be reset. Continue? [Y/N]:y

[r2]int g0/0/0

[r2-GigabitEthernet0/0/0]ospf dr-priority 0

<r2>reset ospf process

Warning: The OSPF process will be reset. Continue? [Y/N]:y

r1，r5，r6全连网状 MGRE

[r1]int Tunnel 0/0/1

[r1-Tunnel0/0/1]ip address 20.1.1.1 24

[r1-Tunnel0/0/1]tunnel-protocol gre p2mp

[r1-Tunnel0/0/1]source 41.1.1.2

[r1-Tunnel0/0/1]nhrp entry multicast dynamic

[r1-Tunnel0/0/1]nhrp network-id 110

[r5]int Tunnel 0/0/1

[r5-Tunnel0/0/1]ip address 20.1.1.4 24

[r5-Tunnel0/0/1]tunnel-protocol gre p2mp

[r5-Tunnel0/0/1]source 44.1.1.2

[r5-Tunnel0/0/1]nhrp entry multicast dynamic

[r5-Tunnel0/0/1]nhrp network-id 110

[r6]int Tunnel 0/0/1

[r6-Tunnel0/0/1]ip address 20.1.1.5 24

[r6-Tunnel0/0/1]tunnel-protocol gre p2mp

[r6-Tunnel0/0/1]source g0/0/0

[r6-Tunnel0/0/1]nhrp network-id 110

[r6-Tunnel0/0/1]nhrp entry 20.1.1.1 41.1.1.2 register

[r6-Tunnel0/0/1]nhrp entry 20.1.1.4 44.1.1.2 register

[r1]interface Tunnel 0/0/1

[r1-Tunnel0/0/1]source g0/0/1

[r1-Tunnel0/0/1]nhrp network-id 110

[r1-Tunnel0/0/1]nhrp entry 20.1.1.4 44.1.1.2 register

[r5]int Tunnel 0/0/1

[r5-Tunnel0/0/1]source g0/0/0

[r5-Tunnel0/0/1]nhrp network-id 110

[r5-Tunnel0/0/1]nhrp entry 20.1.1.1 41.1.1.2 register

Ospf

[r1]ospf 1 router-id 1.1.1.1

[r1-ospf-1]area 0

[r1-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.255

[r1-ospf-1-area-0.0.0.0]network 10.1.1.0 0.0.0.255

[r1-ospf-1]area 1

[r1-ospf-1-area-0.0.0.1]network 41.1.1.0 0.0.0.255

[r2]ospf 1 router-id 2.2.2.2

[r2-ospf-1]area 0

[r2-ospf-1-area-0.0.0.0]network 192.168.2.0 0.0.0.255

[r2-ospf-1-area-0.0.0.0]network 10.1.1.0 0.0.0.255

[r3]ospf 1 router-id 3.3.3.3

[r3-ospf-1]area 0

[r3-ospf-1-area-0.0.0.0]network 192.168.3.0 0.0.0.255

[r3-ospf-1-area-0.0.0.0]network 10.1.1.0 0.0.0.255

[r5]ospf 1 router-id 4.4.4.4

[r5-ospf-1]area 1

[r5-ospf-1-area-0.0.0.1]network 192.168.4.0 0.0.0.255

[r5-ospf-1-area-0.0.0.1]network 20.1.1.0 0.0.0.255

[r6]ospf 1 router-id 5.5.5.5

[r6-ospf-1]area 1

[r6-ospf-1-area-0.0.0.1]network 192.168.5.0 0.0.0.255

[r6-ospf-1-area-0.0.0.1]network 20.1.1.0 0.0.0.255