青海保险网站建设公司,亳州网站开发,律师网站建设公司,山东卓创 网站建设实验要求
1.R5为ISP#xff0c;只能进行IP地址配置#xff0c;其所有地址均配为公有I地址;
2、R1和R5间使用PPP的PAP认证#xff0c;R5为主认证方:
R2与R5之间使用ppp的CHAP认证#xff0c;R5为主认证方;
R3与R5之间使用HDLC封装; 3R1、R2、R3构建一个MGRE环境#xf…实验要求
1.R5为ISP只能进行IP地址配置其所有地址均配为公有I地址;
2、R1和R5间使用PPP的PAP认证R5为主认证方:
R2与R5之间使用ppp的CHAP认证R5为主认证方;
R3与R5之间使用HDLC封装; 3·R1、R2、R3构建一个MGRE环境R1为中心站点R1、R4间为点到点的GRE
4.整个私有网络基本RIP全网可达
5.所有pc设置私有IP为源IP可以访问R5环回,达到全网通。 第一部分
配置PC端IP各个路由器IP环回接口
R1
R1]int g 0/0/0 [R1-GigabitEthernet0/0/0]ip add 192.168.1.2 24 Mar 30 2024 14:08:35-08:00 R1 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R1-GigabitEthernet0/0/0]int s 4/0/0 [R1-Serial4/0/0]ip add 15.1.1.1 24
R2;
[R2]int g 0/0/0 [R2-GigabitEthernet0/0/0]ip add 192.168.2.1 24 Mar 30 2024 14:10:45-08:00 R2 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R2-GigabitEthernet0/0/0]int s 4/0/0 [R2-Serial4/0/0]ip add 25.1.1.1 24
R3:
[R3]int g0/0/0 [R3-GigabitEthernet0/0/0]ip add 192.168.3.1 24 Mar 30 2024 14:13:10-08:00 R3 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state. [R3-GigabitEthernet0/0/0]int s 4/0/0 [R3-Serial4/0/0]ip add 35.1.1.1 24 R4:
[R4]int g 0/0/1 [R4-GigabitEthernet0/0/1]ip add 192.168.4.1 24 Mar 30 2024 14:14:33-08:00 R4 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state. [R4-GigabitEthernet0/0/1]int g 0/0/0 [R4-GigabitEthernet0/0/0]ip add 45.1.1.1 24
R5:
[R5-Serial4/0/1]ip add 15.1.1.5 24 [R5-Serial4/0/1] Mar 30 2024 14:16:48-08:00 R5 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol PPP IPCP on the interface Serial4/0/1 has entered the UP state. [R5-Serial4/0/1]int s 3/0/1 [R5-Serial3/0/1]ip add 25.1.1.5 24 [R5-Serial3/0/1] Mar 30 2024 14:17:26-08:00 R5 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol PPP IPCP on the interface Serial3/0/1 has entered the UP state. [R5-Serial3/0/1]int s 4/0/0 [R5-Serial4/0/0]ip add 35.1.1.5 24 [R5-Serial4/0/0] Mar 30 2024 14:17:45-08:00 R5 %%01IFNET/4/LINK_STATE(l)[2]:The line protocol PPP IPCP on the interface Serial4/0/0 has entered the UP state. . [R5-Serial4/0/0]ip add 45.1.1.5 24 Mar 30 2024 14:18:01-08:00 R5 %%01IFNET/4/LINK_STATE(l)[3]:The line protocol PPP IPCP on the interface Serial4/0/0 has entered the DOWN state. [R5-Serial4/0/0] Mar 30 2024 14:18:01-08:00 R5 %%01IFNET/4/LINK_STATE(l)[4]:The line protocol PPP IPCP on the interface Serial4/0/0 has entered the UP state. [R5-Serial4/0/0]int l0 [R5-LoopBack0]ip add 5.5.5.5 24
全网通
[R1]ip route-static 0.0.0.0 0 15.1.1.5
[R2]ip route-static 0.0.0.0 0 25.1.1.5
[R3]ip route-static 0.0.0.0 0 35.1.1.5
[R4]ip route-static 0.0.0.0 0 45.1.1.5
2、R1和R5间使用PPP的PAP认证R5为主认证方:
[R5-aaa]local-user wangdaye password cipher wdy12345 Info: Add a new user. [R5-aaa]lo [R5-aaa]local-user wangdaye se [R5-aaa]local-user wangdaye service-type ppp
[R5-Serial4/0/1]ppp authentication-mode pap
[R5-Serial4/0/1]link-protocol ppp
[R1]int s 4/0/0 [R1-Serial4/0/0]ppp chap user wangdaye [R1-Serial4/0/0]ppp chap password cipher wdy12345 [R1-Serial4/0/0]ppp pap local-user wangdaye password cipher wdy12345
R2与R5之间使用ppp的CHAP认证R5为主认证方;
[R5]aaa [R5-aaa]local-user huawei privilege level 15 password cipher wdy12345 [R5-aaa]local-user huawei service-type ppp [R5-aaa]int s3/0/1 [R5-Serial3/0/1]ppp authentication-mode chap
[R2]int s4/0/0 [R2-Serial4/0/0]ppp chap user wangdaye [R2-Serial4/0/0]ppp chap password cipher wdy12345
R3与R5之间使用HDLC封装;
[R5-Serial4/0/0]link-protocol hdlc
[R3-Serial4/0/0]link-protocol hdlc
3·R1、R2、R3构建一个MGRE环境R1为中心站点R1、R4间为点到点的GRE
[R1]interface Tunnel 0/0/0 [R1-Tunnel0/0/0]ip address 192.168.5.1 24 [R1-Tunnel0/0/0]tunnel-protocol gre p2mp [R1-Tunnel0/0/0]source 15.0.0.1 [R1-Tunnel0/0/0]nhrp network-id 100
[R2]interface Tunnel 0/0/0 [R2-Tunnel0/0/0]ip address 192.168.5.2 24 [R2-Tunnel0/0/0]tunnel-protocol gre p2mp [R2-Tunnel0/0/0]source Serial 4/0/0 [R2-Tunnel0/0/0]nhrp network-id 100 [R2-Tunnel0/0/0]nhrp entry 192.168.5.1 15.0.0.1 register
[R3]interface Tunnel 0/0/0 [R3-Tunnel0/0/0]ip address 192.168.5.3 24 [R3-Tunnel0/0/0]tunnel-protocol gre p2mp [R3-Tunnel0/0/0]source Serial 4/0/0 [R3-Tunnel0/0/0]nhrp network-id 100 [R3-Tunnel0/0/0]nhrp entry 192.168.5.1 15.0.0.1 register
[R1]interface Tunnel 0/0/1 [R1-Tunnel0/0/1]ip address 192.168.6.1 24 [R1-Tunnel0/0/1]tunnel-protocol gre [R1-Tunnel0/0/1]source 15.0.0.1 [R1-Tunnel0/0/1]destination 45.0.0.1
[R4]interface Tunnel 0/0/1 [R4-Tunnel0/0/1]ip address 192.168.6.2 24 [R4-Tunnel0/0/1]tunnel-protocol gre [R4-Tunnel0/0/1]source 45.0.0.1 [R4-Tunnel0/0/1]destination 15.0.0.1
4.整个私有网络基本RIP全网可达
[R1]int Tunnel 0/0/0 [R1-Tunnel0/0/0]nhrp entry multicast dynamic [R1-Tunnel0/0/0]undo rip split-horizon [R1-Tunnel0/0/0]q [R1]rip [R1-rip-1]version 2 [R1-rip-1]network 192.168.1.0 [R1-rip-1]network 192.168.5.0 [R1-rip-1]network 192.168.6.0
[R2]rip [R2-rip-1]version 2 [R2-rip-1]network 192.168.2.0 [R2-rip-1]network 192.168.5.0
[R3]rip [R3-rip-1]version 2 [R3-rip-1]network 192.168.3.0 [R3-rip-1]network 192.168.4.0
[R4]rip [R4-rip-1]version 2 [R4-rip-1]network 192.168.4.0 [R4-rip-1]network 192.168.6.0
5.所有pc设置私有IP为源IP可以访问R5环回,达到全网通。
[R1]acl 2000 [R1-acl-basic-2000]rule 10 permit source 192.168.1.0 0.0.0.255 [R1-acl-basic-2000]q [R1]int s4/0/0 [R1-Serial4/0/0]nat outbound 2000
[R2]acl 2000 [R2-acl-basic-2000]rule 10 permit source 192.168.2.0 0.0.0.255 [R2-acl-basic-2000]q [R2]int s4/0/0 [R2-Serial4/0/0]nat outbound 2000
[R3]acl 2000 [R3-acl-basic-2000]rule 10 permit source 192.168.3.0 0.0.0.255 [R3-acl-basic-2000]q [R3]int s4/0/0 [R3-Serial4/0/0]nat outbound 2000
[R4]acl 2000 [R4-acl-basic-2000]rule 10 permit source 192.168.4.0 0.0.0.255 [R4-acl-basic-2000]int g0/0/0 [R4-GigabitEthernet0/0/0]nat outbound 2000
