ospf mgre实验

最新推荐文章于 2025-04-23 11:38:43 发布

weixin_72849082

最新推荐文章于 2025-04-23 11:38:43 发布

阅读量201

点赞数

文章标签：网络

本文链接：https://blog.youkuaiyun.com/weixin_72849082/article/details/127318075

版权

该博客详细介绍了如何进行OSPF over GRE的实验配置，包括接口IP地址和环回配置，R1-R2之间的PPP PAP单向认证，R2-R3的PPP CHAP双向认证，以及建立MGRE通道并设置R3为hub，R5-R6为spoke。接着，通过在R3-R5-R6上配置缺省路由实现公网通信，并启用OSPF协议，宣告通道接口，调整优先级避免选举问题，最后将R3-R5-R6的通道接口类型设为MBA，确保全网可达。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

1. 先配接口IP地址和环回

[r1-Serial4/0/0]ip address 12.1.1.1 24
[r1-LoopBack0]ip address 1.1.1.1 24
 
[r2-Serial4/0/1]ip address 12.1.1.2 24
[r2-Serial4/0/0]ip address 23.1.1.1 24
[r2-LoopBack0]ip address 2.2.2.2 24
 
[r3-Serial4/0/1]ip address 23.1.1.2 24
[r3-GigabitEthernet0/0/0]ip address 34.1.1.1 24
[r3-LoopBack0]ip address 3.3.3.3 24
 
[r4-GigabitEthernet0/0/0]ip address 34.1.1.2 24	
[r4-GigabitEthernet0/0/1]ip address 45.1.1.1 24
[r4-GigabitEthernet0/0/2]ip address 46.1.1.1 24
 
[r5-GigabitEthernet0/0/0]ip address 45.1.1.2 24
[r5-LoopBack0]ip address 5.5.5.5 24
 
[r6-GigabitEthernet0/0/0]ip address 46.1.1.2 24
[r6-LoopBack0]ip address 6.6.6.6 24

2.然后开始实验的第二步R1-R2之间ppp的pap单向认证

[r1]aaa	
[r1-aaa]local-user hcia password cipher 123456	
[r1-aaa]local-user hcia service-type ppp
[r1-aaa]int s4/0/0	
[r1-Serial4/0/0]ppp authentication-mode pap
 
[r2-Serial4/0/0]link-protocol ppp
[r2-Serial4/0/0]ppp pap local-user hcia password cipher 123456

3.然后实验第三步R2-R3之间做ppp的chap双向认证

[r2]aaa
[r2-aaa]local-user hcip password cipher 234567	
[r2-aaa]local-user hcip service-type ppp
[r2-Serial4/0/0]link-protocol ppp	
[r2-Serial4/0/0]ppp authentication-mode chap
 
[r3-Serial4/0/1]link-protocol ppp
[r3-Serial4/0/1]ppp chap user hcip
[r3-Serial4/0/1]ppp chap password cipher 234567
 
[r3]aaa
[r3-aaa]local-user hcie password cipher 345678	
[r3-aaa]local-user hcie service-type ppp
[r3-Serial4/0/1]link-protocol ppp	
[r3-Serial4/0/1]ppp authentication-mode chap
 
[r2-Serial4/0/0]link-protocol ppp
[r2-Serial4/0/0]ppp chap user hcie
[r2-Serial4/0/0]ppp chap password cipher 345678

4.然后建立mgre通道，让R3成为hub端。R5-R6为spoke端口，R5-R6向R3注册

[r3]interface t0/0/0
[r3-Tunnel0/0/0]ip address 10.1.1.1 24
[r3-Tunnel0/0/0]tunnel-protocol ger p2mp
[r3-Tunnel0/0/0]source 34.1.1.1
[r3-Tunnel0/0/0]nhrp network-id 100
[r3-Tunnel0/0/0]nhrp entry multicast dynamic
 
[r5]interface t0/0/0
[r5-Tunnel0/0/0]ip address 10.1.1.2 24
[r5-Tunnel0/0/0]tunnel-protocol ger p2mp
[r5-Tunnel0/0/0]source 45.1.1.2
[r5-Tunnel0/0/0]nhrp network-id 100
[r5-Tunnel0/0/0]nhrp entry 10.1.1.1 34.1.1.1 register
 
[r6]interface t0/0/0
[r6-Tunnel0/0/0]ip address 10.1.1.3 24
[r6-Tunnel0/0/0]tunnel-protocol ger p2mp
[r6-Tunnel0/0/0]source 46.1.1.2
[r6-Tunnel0/0/0]nhrp network-id 100
[r6-Tunnel0/0/0]nhrp entry 10.1.1.1 34.1.1.1 register

5.然后我们R3-R5-R6各写一条缺省让公网地址可以通信

[r3]ip route-static 0.0.0.0 0 34.1.1.2
[r5]ip route-static 0.0.0.0 0 45.1.1.1
[r6]ip route-static 0.0.0.0 0 46.1.1.1

6.之后启用ospf协议，宣告。注意：R3-R5-R6宣告的是通道接口，而且要修改优先级让R5-R6不参与选举，顺带修改R3-R5-R6的通道接口类型为MBA

[r1]ospf 1 router-id 1.1.1.1
[r1-ospf-1]area 0
[r1-ospf-1-area-0.0.0.0]network 1.1.1.1 0.0.0.0
[r1-ospf-1-area-0.0.0.0]network 12.1.1.1 0.0.0.0
 
[r2]ospf 1 router-id 2.2.2.2
[r2-ospf-1]area 0
[r2-ospf-1-area-0.0.0.0]network 2.2.2.2 0.0.0.0
[r2-ospf-1-area-0.0.0.0]network 12.1.1.2 0.0.0.0
[r2-ospf-1-area-0.0.0.0]network 23.1.1.1 0.0.0.0
 
[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1]area 0
[r3-ospf-1-area-0.0.0.0]network 3.3.3.3 0.0.0.0
[r3-ospf-1-area-0.0.0.0]network 23.1.1.2 0.0.0.0
[r3-ospf-1-area-0.0.0.0]network 10.1.1.1 0.0.0.0
[r3-Tunnel0/0/0]ospf network-type broadcast
 
[r5]ospf 1 router-id 5.5.5.5
[r5-ospf-1]area 0
[r5-ospf-1-area-0.0.0.0]network 5.5.5.5 0.0.0.0
[r5-ospf-1-area-0.0.0.0]network 10.1.1.2 0.0.0.0
[r5-Tunnel0/0/0]ospf dr-priority 0
[r5-Tunnel0/0/0]ospf network-type broadcast
 
[r6]ospf 1 router-id 6.6.6.6
[r6-ospf-1]area 0
[r6-ospf-1-area-0.0.0.0]network 6.6.6.6 0.0.0.0
[r6-ospf-1-area-0.0.0.0]network 10.1.1.3 0.0.0.0
[r6-Tunnel0/0/0]ospf dr-priority 0
[r6-Tunnel0/0/0]ospf network-type broadcast

全网可达