一、实验要求
二、实验步骤
1、配置IP地址部分
PC1:
PC2:
PC3:
PC4:
R1:
R2:
R3:
R4:
R5:
环回:
2.通过配置缺省路由让公网互通
[R1]ip route-static 0.0.0.0 0 15.1.1.5
[R2]ip route-static 0.0.0.0 0 25.1.1.5
[R3]ip route-static 0.0.0.0 0 35.1.1.5
[R4]ip route-static 0.0.0.0 0 45.1.1.5
公网通(R4 ping R1、R2、R3)
3.配置ppp
1.R1和R5间的ppp的PAP认证
验证方(R5):
被验证方(R1):
2.R2与R5之间的ppp的CHAP认证
验证方(R5):
被验证方(R2):
3.R3与R5之间使用HDLC封装
[R3]int s4/0/0
[R3-Serial4/0/0]link-protocol hdlc
[R5]int s4/0/0
[R5-Serial4/0/0]link-protocol hdlc
4.R1、R2、R3构建一个MGRE环境,R1为中心站点
R1:
[R1-Tunnel0/0/0]tunnel-protocol gre p2mp
[R1-Tunnel0/0/0]nhrp network-id 100
R2:
[R2-Tunnel0/0/0]tunnel-protocol gre p2mp
[R2-Tunnel0/0/0]nhrp network-id 100
R3:
[R3-Tunnel0/0/0]tunnel-protocol gre p2mp
[R3-Tunnel0/0/0]nhrp network-id 100
查看分支站点注册结果dis nhrp peer all
5.配置R1、R4间为点到点的GRE
R1:
R4:
测试ping通:
6.配置RIP,R1上开启伪广播,并关闭接口的水平分割
配置RIP:
[R1]rip 1
[R1-rip-1]undo summary
R1
[R2]rip 1
[R2-rip-1]undo summary
[R3]rip 1
[R3-rip-1]undo summary
[R4]rip 1
[R4-rip-1]undo summary
开启伪广播,关闭接口的水平分割:
[R1-Tunnel0/0/0]nhrp entry multicast dynamic
[R2-Tunnel0/0/0]undo rip split-horizon
[R3-Tunnel0/0/0]undo rip split-horizon
PC2 ping PC3:
PC1 ping PC4:
查看分支站点注册结果dis nhrp peer all
访问R5环回,达到全网通
[R1]acl 2000
[R1-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[R1]int s4/0/0
[R1-Serial4/0/0]nat outbound 2000
[R2]acl 2000
[R2-acl-basic-2000]rule permit source 192.168.2.0 0.0.0.255
[R2]int s4/0/0
[R2-Serial4/0/0]nat outbound 2000
[R3]acl 2000
[R3-acl-basic-2000]rule permit source 192.168.3.0 0.0.0.255
[R3]int s4/0/0
[R3-Serial4/0/0]nat outbound 2000
[R4]acl 2000
[R4-acl-basic-2000]rule permit source 192.168.4.0 0.0.0.255
[R4]int g0/0/0
[R4-Serial4/0/0]nat outbound 2000
ping 5.5.5.5