RIP综合实验

实验需求

1.R1、R2、R3、R4、R5 运行RIPV2，R6、R7运行RIPV1
2.使用合理IP地址规划网络，各自创建环回接口
3.R1创建环回 172.16.1.1/24 172.16.2.1/24 172.16.3.1/24
4.要求R3使用R2访问R1环回
5.减少路由条目数量，增加路由传递安全性
6.R5创建一个环回模拟运营商，不能通告
7.R1 telnet R2环回实际telnet 到R7上
8.R6-R7路由器不能学习到达R1环回路由
9.全网可达 

配置思路

1.给所有接口配置IP地址，R1与R2之间网段为12.0.0.0/30，以此类推
2.每个路由器创建环回，R1环回LookBack 0 地址为1.1.1.1/32
3.在R1上创建环回172.16.{1-3}.1/24
4.在R1-R5上运行RIPv2，在R4、R6、R7上运行RIPv1，R4上的两个版本RIP相互import，注意关闭自动汇总
5.R3可以通过R2或者R4访问R1，将通过R4访问R1的cost值增大，就能让R3选择通过R2访问R1
6.减少路由条目是指将172.16.{1-3}.0网段进行汇总，增加路由传递安全性是配置rip报文的认证
7.R5上创建环回LookBack 5 地址55.55.55.55/32，并在RIP中发布缺省路由
8.在R2上配置nat server，在R7路由器上配置telnet服务，保证R1通过R2-R3-R4-R6访问到R7，并且R7通过R6-R4-R3-R2回应R1
9.在R6上通过acl过滤R1环回路由
10.配置静态缺省，R7缺省指向R6，R6缺省指向R4

实验配置：

[AR1]int g 0/0/0

[AR1-GigabitEthernet0/0/0]ip ad 10.1.1.1 27

[AR1-GigabitEthernet0/0/0]int g 0/0/1

[AR1-GigabitEthernet0/0/1]ip ad 10.1.129 27

[AR2]int g 0/0/0

[AR2-GigabitEthernet0/0/0]ip ad 10.1.1.2 27

[AR2-GigabitEthernet0/0/0]int g 0/0/1

[AR2-GigabitEthernet0/0/1]ip ad 10.1.1.65 27

[AR3]int g 0/0/0

[AR3-GigabitEthernet0/0/0]ip ad 10.1.1.66 27

[AR3-GigabitEthernet0/0/0]int g 0/0/1

[AR3-GigabitEthernet0/0/1]ip ad 10.1.1.33 27

[AR4]int g 0/0/1

[AR4-GigabitEthernet0/0/1]ip ad 10.1.1.130 27

[AR4-GigabitEthernet0/0/1]int g 0/0/0

[AR4-GigabitEthernet0/0/0]ip ad 10.1.1.34 27

[AR4-GigabitEthernet0/0/0]int g 4/0/0

[AR4-GigabitEthernet4/0/0]ip ad 10.1.1.193 27

[AR4-GigabitEthernet4/0/0]int g 0/0/2

[AR4-GigabitEthernet0/0/2]ip ad 10.1.1.97 27

[AR5]int g 0/0/0

[AR5-GigabitEthernet0/0/0]ip ad 10.1.1.194 27

[AR6]int g 0/0/0

[AR6-GigabitEthernet0/0/0]ip ad 10.1.1.98 27

[AR6-GigabitEthernet0/0/0]int g 0/0/1

[AR6-GigabitEthernet0/0/1]ip ad 10.1.1.161 27

[AR7]int g 0/0/0

[AR7-GigabitEthernet0/0/0]ip ad 10.1.1.162 27

对路由器添加环回地址

[AR1]int lo 0

[AR1-LoopBack0]ip ad 172.16.1.1 24

[AR1-LoopBack0]int lo 2

[AR1-LoopBack2]ip ad 172.16.2.1 24

[AR1-LoopBack2]int lo 3

[AR1-LoopBack3]ip ad 172.16.3.1 24

[AR2]int lo 0

[AR2-LoopBack0]ip ad 2.2.2.2 24

[AR3]int lo 0

[AR3-LoopBack0]ip ad 3.3.3.3 24

[AR4]int lo 0

[AR4-LoopBack0]ip ad 4.4.4.4 24

[AR5]int lo 0

[AR5-LoopBack0]ip ad 5.5.5.5 24

[AR7]int lo 0

[AR7-LoopBack0]ip ad 7.7.7.7 24

进行rip配置

[AR1]rip

[AR1-rip-1]version 2

[AR1-rip-1]undo summary

[AR1-rip-1]network 172.16.0.0

[AR1-rip-1]network 10.0.0.0

[AR2]rip

[AR2-rip-1]version 2

[AR2-rip-1]undo summary

[AR2-rip-1]network 10.0.0.0

[AR2-rip-1]network 2.0.0.0

[AR3]rip

[AR3-rip-1]undo summary

[AR3-rip-1]version 2

[AR3-rip-1]network 10.0.0.0

[AR3-rip-1]network 3.0.0.0

[AR4]rip

[AR4-rip-1]version 2

[AR4-rip-1]undo summary

[AR4-rip-1]network 10.0.0.0

[AR4-rip-1]network 4.0.0.0

[AR5]rip

[AR5-rip-1]version 2

[AR5-rip-1]undo summary

[AR5-rip-1]network 10.0.0.0

因为rip1和rip2的数据不能互通 所以在rip1和Rip2的边界路由器的接口上配置允许两个版本的通过

在rip v1 和rip v2 两版本边界上的路由器接口的其中之一上加入另一个版本号允许该版本流量通过

[AR6]int g0/0/0

[AR6-GigabitEthernet0/0/0]rip version 2

3.R3使用R2访问R1环回

可以使用telnet来完成 R3登陆到R2上再访问R1

[AR2]aaa

[AR2-aaa]local-user user password cipher huawei

Info: Add a new user.

[AR2-aaa]local-user user service-type telnet

[AR2-aaa]local-user user privilege level 15

[AR2]telnet server enable

[AR2]user-interface vty 0 4

[AR2-ui-vty0-4]au

[AR2-ui-vty0-4]authentication-mode aaa

一定要在用户模式下Telnet 否则不会成功

5.R5为运营商

[AR5-rip-1]default-route originate

6.R1telnetR2实际telnet到R7

按照Nat server protocol tcp global current-interface 23 inside R7ip进行配置

7.R6、R7不能学习到R1的环回路由

[AR6]acl 2000

[AR6-acl-basic-2000]rule 10 deny source 172.16.0.0 0.0.255.255

[AR6-GigabitEthernet0/0/0]traffic-filter inbound acl 2000