
配置地址
 【R1】
 [r1-Serial4/0/0]ip address 15.0.0.2 24
 [r1-GigabitEthernet0/0/0]ip address 192.168.1.1 24
 【R2】
 [r2-Serial4/0/0]ip address 25.0.0.2 24
 [r2-GigabitEthernet0/0/0]ip address 192.168.2.1 24
 【R3】
 [r3-Serial4/0/0]ip address 35.0.0.2 24
 [r3-GigabitEthernet0/0/0]ip address 192.168.3.1 24
 【R4】
 [r4-GigabitEthernet0/0/1]ip address 192.168.4.1 24
 [r4-GigabitEthernet0/0/0]ip address 45.0.0.2 24
 【R5】
 [ISP-Serial3/0/0]ip address 15.0.0.1 24
 [ISP-Serial3/0/1]ip address 25.0.0.1 24
 [ISP-Serial4/0/0]ip address 35.0.0.1 24
 [ISP-GigabitEthernet0/0/0]ip address 45.0.0.1 24
 [ISP-LoopBack0]ip address 5.5.5.5 24
配缺省路由指向ISP
 [r1]ip route-static 0.0.0.0 0 15.0.0.1
 [r2]ip route-static 0.0.0.0 0 25.0.0.1
 [r3]ip route-static 0.0.0.0 0 35.0.0.1
 [r4]ip route-static 0.0.0.0 0 45.0.0.1

R1和R5间使用PPP的PAP认证,R5为主认证方
 【R5】
 [ISP]aaa
 [ISP-aaa]local-user bbb password cipher 123
 [ISP-aaa]local-user bbb service-type ppp
 [ISP]interface s3/0/0
 [ISP-Serial3/0/0]ppp authentication-mode pap
 【R1】
 [r1]interface s4/0/0
 [r1-Serial4/0/0]ppp pap local-user bbb password cipher 123
R2于R5之间使用PPP的chap认证,R5为主认证方
 【R5】
 [ISP]aaa
 [ISP-aaa]local-user bbb password cipher 123
 [ISP-aaa]local-user bbb service-type ppp
 [ISP]interface s4/0/0
 [ISP-Serial3/0/1]ppp authentication-mode chap
 【R2】
 [r2]interface s4/0/0
 [r2-Serial4/0/0]ppp chap user bbb
 [r2-Serial4/0/0]ppp chap password cipher 123
R3于R5之间使用HDLC封装
 【R3】
 [r3]interface s4/0/0
 [r3-Serial4/0/0]link-protocol hdlc
 【r5】
 [ISP]interface s4/0/1
 [ISP-Serial4/0/0]link-protocol hdlc
R1、R4之间为点到点的GRE
 【R1】
 [r1]interface t0/0/0
 [r1-Tunnel0/0/1]ip address 192.168.5.1 24
 [r1-Tunnel0/0/1]tunnel-protocol gre
 [r1-Tunnel0/0/1]source 15.0.0.2
 [r1-Tunnel0/0/1]destination 45.0.0.2(R4的G0/0/0接口IP)
 【R4】
 [r4]interface t0/0/0
 [r4-Tunnel0/0/0]ip address 192.168.5.2 24
 [r4-Tunnel0/0/0]tunnel-protocol gre
 [r4-Tunnel0/0/0]source 45.0.0.2
 [r4-Tunnel0/0/0]destination 15.0.0.2
R1/R2/R3构建一个MGRE环境(点到多点),R1为中心站点
 【R1】
 [r1]interface t0/0/1
 [r1-Tunnel0/0/0]ip address 192.168.6.1 24
 [r1-Tunnel0/0/0]tunnel-protocol gre p2mp
 [r1-Tunnel0/0/0]source 15.0.0.2
 [r1-Tunnel0/0/0]nhrp network-id 100
 [r1-Tunnel0/0/0]nhrp entry multicast dynamic(伪广播)
 【R2】
 [r2]interface t0/0/1
 [r2-Tunnel0/0/0]ip address 192.168.6.2 24
 [r2-Tunnel0/0/0]tunnel-protocol gre p2mp
 [r2-Tunnel0/0/0]source Serial 4/0/0
 [r2-Tunnel0/0/0]nhrp network-id 100
 [r2-Tunnel0/0/0]nhrp entry 192.168.6.1 15.0.0.2 register (
 【R3】
 [r3]interface t0/0/1
 [r3-Tunnel0/0/0]ip address 192.168.6.3 24
 [r3-Tunnel0/0/0]tunnel-protocol gre p2mp
 [r3-Tunnel0/0/0]source s4/0/0
 [r3-Tunnel0/0/0]nhrp network-id 100
 [r3-Tunnel0/0/0]nhrp entry 192.168.6.1 15.0.0.2 register
私网网络基于RIP全网可达
 【R1】
 [r1]rip
 [r1-rip-1]v 2
 [r1-rip-1]network 192.168.1.0
 [r1-rip-1]network 192.168.5.0
 [r1-rip-1]network 192.168.6.0
 【R2】
 [r2]rip
 [r2-rip-1]v 2
 [r2-rip-1]network 192.168.2.0
 [r2-rip-1]network 192.168.6.0
 【R3】
 [r3]rip
 [r3-rip-1]v 2
 [r3-rip-1]network 192.168.3.0
 [r3-rip-1]network 192.168.6.0
 【R4】
 [r4]rip
 [r4-rip-1]v 2
 [r4-rip-1]network 192.168.4.0
 [r4-rip-1]network 192.168.5.0
问题:R2和R3只获得了1.0和6.0的网段
 原因是在MGRE中R1会把路由信息发给R2和R3,但因为RIP水平分割机制导致信息发送不全
 解决:进中心站点Tunnel口关闭RIP的水平分割机制
 [r1-Tunnel0/0/1]undo rip split-horizon

PC配IP且可以访问R5的环回

[r2]acl 2000
 [r2-acl-basic-2000]rule permit source 192.168.2.0 0.0.0.255
 [r2]interface s4/0/0
 [r2-Serial4/0/0]nat outbound 2000
 其余类似
