DSVPN实验

DSVPN实验

1.拓扑

2.分析配置

1.R5为ISP,只配置IP，其他设备配共有地址。设置路由与PC之间为192.168.0.0/24网段

路由之间设置为10，15，20，25.0.0.0/24

[AR1]int g0/0/0
[AR1-GigabitEthernet0/0/0]ip address 192.168.1.2 24
[AR1-GigabitEthernet0/0/0]int s 4/0/0
[AR1-Serial4/0/0]ip address 10.0.0.1 24
[AR1]ip route
[AR1]ip route-static 0.0.0.0 0 10.0.0.2

[AR2]int g0/0/0
[AR2-GigabitEthernet0/0/0]ip address 192.168.2.2 24
[AR2-GigabitEthernet0/0/0]int s4/0/0
[AR2-Serial4/0/0]ip address 15.0.0.1 24
[AR2]ip route-static 0.0.0.0 0 15.0.0.2

[AR3]int g0/0/0
[AR3-GigabitEthernet0/0/0]ip address 192.168.3.2 24
[AR3-GigabitEthernet0/0/0]int s4/0/0
[AR3-Serial4/0/0]ip ad	
[AR3-Serial4/0/0]ip address 20.0.0.2 24
[AR3]ip route-static 0.0.0.0 0 20.0.0.1

[AR4]int g0/0/1
[AR4-GigabitEthernet0/0/1]ip address 192.168.4.2 24
[AR4-GigabitEthernet0/0/1]int g0/0/0
[AR4-GigabitEthernet0/0/0]ip address 25.0.0.2 24
[AR4]ip route-static 0.0.0.0 0 25.0.0.1 

[ISP]int s 3/0/0
[ISP-Serial3/0/0]ip address 10.0.0.2 24
[ISP-Serial3/0/0]int s 3/0/1
[ISP-Serial3/0/1]ip address 15.0.0.2 24
[ISP-Serial3/0/1]int s 4/0/0
[ISP-Serial4/0/0]ip address 20.0.0.1 24
[ISP-GigabitEthernet0/0/0]ip address 25.0.0.1 24
[ISP]int LoopBack 1
[ISP-LoopBack1]ip address 5.5.5.1 24

2.R1与R5之间认证PAP,R2与R5之间认证chap；R3与R5之间使用HDLC封装

[ISP]aaa
[ISP-aaa]local-user admin password cipher 8888
[ISP-aaa]local-user admin service-type ppp
[ISP-aaa]int s 3/0/0
[ISP-Serial3/0/0]ppp authentication-mode pap
[AR1-Serial4/0/0]ppp pap local-user admin password cipher 8888

[ISP]aaa
[ISP-aaa]local-user admin password cipher 8888
[ISP-aaa]local-user admin service-type ppp
[ISP-Serial3/0/1]ppp authentication-mode  chap
[AR2-Serial4/0/0]ppp chap user admin
[AR2-Serial4/0/0]ppp chap password cipher 8888

[ISP-Serial4/0/0]link-protocol hdlc 
[AR3-Serial4/0/0]link-protocol hdlc 

3.搭建MGRE环境

[AR1]int Tunnel 0/0/0
[AR1-Tunnel0/0/0]ip address 192.168.5.1 24
[AR1-Tunnel0/0/0]tunnel-protocol gre p2mp 
[AR1-Tunnel0/0/0]source 10.0.0.1
[AR1-Tunnel0/0/0]nhrp network-id 10

[AR2]int Tunnel 0/0/0
[AR2-Tunnel0/0/0]ip address 192.168.5.2 24
[AR2-Tunnel0/0/0]tunnel-protocol gre p2mp 	
[AR2-Tunnel0/0/0]source 15.0.0.1
[AR2-Tunnel0/0/0]nhrp network-id 10
[AR2-Tunnel0/0/0]nhrp entry 192.168.5.1 10.0.0.1 register 

[AR3]int Tunnel 0/0/0
[AR3-Tunnel0/0/0]ip address 192.168.5.3 24
[AR3-Tunnel0/0/0]tunnel-protocol gre p2mp 
[AR3-Tunnel0/0/0]source 20.0.0.2 
[AR3-Tunnel0/0/0]nhrp network-id 10
[AR3-Tunnel0/0/0]nhrp entry 192.168.5.1 10.0.0.1 register 

4.R1与R4间点到点GRE

另外创建一条192.168.6.0的网段隧道

[AR1]int Tunnel 0/0/1
[AR1-Tunnel0/0/1]ip address 192.168.6.1 24
[AR1-Tunnel0/0/1]tunnel-protocol gre 
[AR1-Tunnel0/0/1]source 10.0.0.1
[AR1-Tunnel0/0/1]destination 25.0.0.2

[AR4]int Tunnel 0/0/1
[AR4-Tunnel0/0/1]ip address 192.168.6.2 24
[AR4-Tunnel0/0/1]tunnel-protocol gre 
[AR4-Tunnel0/0/1]source 25.0.0.2
[AR4-Tunnel0/0/1]destination 10.0.0.1 

5.基于RIP全网可达

[AR1]rip
[AR1-rip-1]version 2
[AR1-rip-1]network 192.168.1.0
[AR1-rip-1]network 192.168.5.0
[AR1-rip-1]network 192.168.6.0
[AR1-rip-1]q
[AR1-Tunnel0/0/0]nhrp entry multicast dynamic 
[AR1-Tunnel0/0/0]undo rip split-horizon

[AR2]rip
[AR2-rip-1]v 2
[AR2-rip-1]network 192.168.2.0
[AR2-rip-1]network 192.168.5.0

[AR3]rip
[AR3-rip-1]v 2
[AR3-rip-1]network 192.168.3.0
[AR3-rip-1]network 192.168.2.0
[AR3-rip-1]network 192.168.5.0

[AR4]rip 
[AR4-rip-1]v 2
[AR4-rip-1]network 192.168.4.0
[AR4-rip-1]network 192.168.6.0