搭建如图所示拓扑图:
要求:
R8和r9的环回分别是172.16.1.0/24和172.16.2.0/24
中间使用78.1.1.0/24
剩下的路由器2-6使用172.16.0.0/16
R1为运营商 r1远程登录r2实际登录r7
R2访问r7要求走r5去访问
全网可达
全网可达
将AR1命名为isp,代码如下:
<Huawei>system-view
[Huawei]sysname isp
[isp]interface LoopBack 0
[isp-LoopBack0]ip address 1.1.1.1 32
[isp-LoopBack0]q
[isp]interface g0/0/0
[isp-GigabitEthernet0/0/0]ip address 12.1.1.1 24
[isp-GigabitEthernet0/0/0]q
[isp]display ip interface brief
结果如图:
r2:
[Huawei]sysname r2
[r2]interface g0/0/0
[r2-GigabitEthernet0/0/0]ip address 12.1.1.2 24
[r2-GigabitEthernet0/0/0]q
[r2]interface g0/0/1
[r2-GigabitEthernet0/0/1]ip address 172.16.3.1 24
[r2-GigabitEthernet0/0/1]q
[r2]display ip interface brief
结果如图:
r3
[Huawei]sysname r3
[r3]interface g0/0/0
[r3-GigabitEthernet0/0/0]ip address 172.16.3.2 24
[r3-GigabitEthernet0/0/0]q
[r3]interface g0/0/1
[r3-GigabitEthernet0/0/1]ip address 172.16.4.1 24
[r3-GigabitEthernet0/0/1]q
[r3]interface g0/0/2
[r3-GigabitEthernet0/0/2]ip address 172.16.5.1 24
[r3-GigabitEthernet0/0/2]q
结果如图:
r4
[Huawei]sysname r4
[r4]interface LoopBack 0
[r4-LoopBack0]ip address 4.4.4.4 32
[r4-LoopBack0]q
[r4]interface g0/0/0
[r4-GigabitEthernet0/0/0]ip address 172.16.4.2 24
[r4-GigabitEthernet0/0/0]q
[r4]interface g0/0/1
[r4-GigabitEthernet0/0/1]ip address 172.16.6.1 24
[r4-GigabitEthernet0/0/1]q
[r4]display ip interface brief
结果如图:
r5
[Huawei]sysname r5
[r5]interface g0/0/0
[r5-GigabitEthernet0/0/0]ip address 172.16.5.2 24
[r5-GigabitEthernet0/0/0]q
[r5]interface g0/0/1
[r5-GigabitEthernet0/0/1]ip address 172.16.8.1 24
[r5-GigabitEthernet0/0/1]q
[r5]display ip interface brief
结果如图:
r6
[r6]interface g0/0/0
[r6-GigabitEthernet0/0/0]ip address 172.16.8.2 24
[r6-GigabitEthernet0/0/0]q
[r6]interface g0/0/1
[r6-GigabitEthernet0/0/1]ip address 172.16.7.1 24
[r6-GigabitEthernet0/0/1]q
[r6]display ip interface brief
[r6]interface g0/0/2
[r6-GigabitEthernet0/0/2]ip address 172.16.9.1 24
[r6-GigabitEthernet0/0/2]q
[r6]display ip interface brief
结果如下图
r7
[r7]interface g0/0/0
[r7-GigabitEthernet0/0/0]ip address 172.16.6.2 24
[r7-GigabitEthernet0/0/0]q
[r7]interface g0/0/1
[r7-GigabitEthernet0/0/1]ip address 172.16.7.2 24
[r7-GigabitEthernet0/0/1]q
[r7]interface LoopBack 0
[r7-LoopBack0]ip address 7.7.7.7 32
[r7-LoopBack0]q
[r7]display ip interface brief
结果如下图:
r8
[r8]interface g0/0/0
[r8-GigabitEthernet0/0/0]ip address 172.16.9.2 24
[r8-GigabitEthernet0/0/0]q
[r8]interface g0/0/1
[r8-GigabitEthernet0/0/1]ip address 78.1.1.1 24
[r8-GigabitEthernet0/0/1]q
[r8]interface LoopBack 0
[r8-LoopBack0]ip address 172.16.1.1 24
[r8-LoopBack0]q
[r8]display ip interface brief
结果如下图:
r9
[r9]interface LoopBack 0
[r9-LoopBack0]ip address 172.16.2.1 24
[r9-LoopBack0]q
[r9]interface g0/0/0
[r9-GigabitEthernet0/0/0]ip address 78.1.1.2 24
[r9-GigabitEthernet0/0/0]q
[r9]display ip interface brief
结果如下图:
r2 rip
[r2]rip 1
[r2-rip-1]version 2
[r2-rip-1]network 172.16.0.0
r3 r4 r5分别如同r2配置
r7
[r7]rip 1
[r7-rip-1]version 2
[r7-rip-1]network 172.16.0.0
[r7-rip-1]network 7.0.0.0
r8
[r8]rip 1
[r8-rip-1]version 1
[r8-rip-1]network 172.16.0.0
[r8-rip-1]network 78.0.0.0
r9
[r9]rip 1
[r9-rip-1]version 1
[r9-rip-1]network 78.0.0.0
[r9-rip-1]network 172.16.0.0
r2上查看是否学到
[r2]display ip routing-table
结果如下图:
可以ping通7.7.7.7
r9
结果如下图:
下面做外网可达
r2
[r2]acl 2000
[r2-acl-basic-2000]rule permit source any
[r2-acl-basic-2000]q
[r2]interface g0/0/0
[r2-GigabitEthernet0/0/0]nat outbound 2000
[r2-GigabitEthernet0/0/0]q
[r2]ip route-static 0.0.0.0 0 12.1.1.1
[r2]rip 1
[r2-rip-1]default-route originate
r2访问r7要求走r5去访问
[r3]acl 2000
[r3-acl-basic-2000]rule permit source 7.7.7.7 0.0.0.0
[r3-acl-basic-2000]q
[r3]interface g0/0/1
[r3-GigabitEthernet0/0/1]rip metricin 2000 4
r1为运营商 r1远程登录r2实际登录r7
[r7]user-interface vty 0 4
[r7-ui-vty0-4]authentication-mode password
Please configure the login password (maximum length 16):123
[r2]interface g0/0/0
[r2-GigabitEthernet0/0/0]nat static protocol tcp global 12.1.1.3 23 inside 7.7.7