MGRE基础实验

实验拓扑图

 实验需求

1.R2为ISP，其上只能配置IP地址
2.R1-R2之间为HDLC封装
3.R2-R3之间为ppp封装，pap认证，R2为主认证方
4.R2-R4之间为ppp封装，chap认证，R2为主认证方
5.R1、R2、R3构建MGRE环境，仅R1IP地址固定
6.内网使用RIP获取路由，所有pc可以互相访问，并日可访问R2的环回。

实验思路

首先进行ip地址的规划

然后搭建路由，给R1.3.4做去公网的缺省路由

R1.R3.R4之间搭建MGRE环环境

让R1成为中心站点，R3、R4为分支站点，让分支站点到中心站点注册

使用RIP让每个路由器获取到所有的路由，让所有PC可以访问

实验步骤

配置IP

 

 

配置R1-R2之间为HDLC封装 

R1上的配置

[r1]interface Serial 4/0/0
[r1-Serial4/0/0]ip address 1.1.1.1 24
[r1-Serial4/0/0]link    
[r1-Serial4/0/0]link-protocol h    
[r1-Serial4/0/0]link-protocol hdlc 
Warning: The encapsulation protocol of the link will be changed. Continue? [Y/N]
:y
 

R2上的配置

[r2]interface s4/0/0
[r2-Serial4/0/0]ip address 1.1.1.2 24
[r2-Serial4/0/0]lin    
[r2-Serial4/0/0]link-protocol h    
[r2-Serial4/0/0]link-protocol hdlc 
Warning: The encapsulation protocol of the link will be changed. Continue? [Y/N]
:y

配置R2-R3之间为PPP封装，pap认证，R2为主认证方

R2

[r2]aaa
[r2-aaa]local-user a password cipher 123456
[r2-aaa]local-user a service-type ppp
[r2-aaa]int s4/0/1
[r2-Serial4/0/1]ip address 2.2.2.1 24
[r2-Serial4/0/1]ppp authentication-mode pap

R3

[r3]interface s4/0/1
[r3-Serial4/0/1]ip address 2.2.2.2 24
[r3-Serial4/0/1]ppp pap local-user a password cipher 123456

配置 R2- R4之间为PPP封装，chap认证，R2为主认证方

R2

[r2]aaa
[r2-aaa]local-user a1 password cipher 123456
[r2-aaa]local-user a1 service-type ppp
[r2-aaa]int s3/0/0
[r2-Serial3/0/0]ppp authentication-mode chap 
[r3-Serial4/0/1]ip address 3.3.3.1 24

R4

[r4]interface s3/0/0
[r4-Serial3/0/0]ip address 3.3.3.2 24
[r4-Serial3/0/0]ppp chap password cipher 123456

R1、R3、R4构建MGRE环境

R1中心站点配置

[r1]interface Tunnel 0/0/0
[r1-Tunnel0/0/0]ip address 192.168.4.1 24
[r1-Tunnel0/0/0]tunnel-protocol gre p2mp 
[r1-Tunnel0/0/0]source 1.1.1.1
[r1-Tunnel0/0/0]nhrp entry multicast dynamic 
[r1-Tunnel0/0/0]nhrp network-id 100 
 

R3,R4分站点配置

[r3]interface t 0/0/0
[r3-Tunnel0/0/0]ip address 192.168.4.2 24
[r3-Tunnel0/0/0]tunnel-protocol gre p2mp 
[r3-Tunnel0/0/0]source s 4/0/1
[r3-Tunnel0/0/0]nhrp entry 192.168.4.1 1.1.1.1 register 
[r3-Tunnel0/0/0]nhrp network-id 100

[r4]interface t 0/0/0
[r4-Tunnel0/0/0]ip address 192.168.4.3 24
[r4-Tunnel0/0/0]tunnel-protocol gre p2mp 
[r4-Tunnel0/0/0]source s 3/0/0
[r4-Tunnel0/0/0]nhrp entry 192.168.4.1 1.1.1.1 register 
[r4-Tunnel0/0/0]nhrp network-id 100

配置RIP和缺省路由

R1

[r1]rip 1
[r1-rip-1]version 2
[r1-rip-1]network 192.168.1.0
[r1-rip-1]network 192.168.4.0
[r1]interface t 0/0/0
[r1-Tunnel0/0/0]undo rip split-horizon

[r1]ip route-static 0.0.0.0 0 1.1.1.2

R3

[r3]rip 1
[r3-rip-1]version 2
[r3-rip-1]network 192.168.2.0
[r3-rip-1]network 192.168.4.0

[r3]ip route-static 0.0.0.0 0 2.2.2.1

R4

[r4]rip 1 
[r4-rip-1]version 2
[r4-rip-1]network 192.168.3.0
[r4-rip-1]network 192.168.4.0

[r4]ip route-static 0.0.0.0 0 3.3.3.1

测试

成功