MGRE实验

一·实验拓扑图

二·实验需求

1. 按照图示配置IP地址
2. 配置静态路由协议，搞通公网
3. 配置MGRE VPN
4. NHRP的配置
5. 配置RIP路由协议来传递两端私网路由
6. 测试全网通

三·需求分析

1. 按照图示配置IP地址
2. 配置静态路由协议，搞通公网
3. 配置MGRE VPN
4. NHRP的配置
5. 配置RIP路由协议来传递两端私网路由
6. 测试全网通

四·实验过程

配置路由接口

AR1

[R1]int l0
[R1-LoopBack0]ip address 192.168.1.1 24[R1-LoopBack0]int g 0/0/0
[R1-GigabitEthernet0/0/0]ip address 15.0.0.1 24

AR2

[R2]int g 0/0/0
[R2-GigabitEthernet0/0/0]ip address 25.0.0.2 24
[R2-GigabitEthernet0/0/0]q[R2]int l0
[R2-LoopBack0]ip address 192.168.2.2 24

AR3

[R3]int g 0/0/0
[R3-GigabitEthernet0/0/0]ip address 35.0.0.3 24
[R3-GigabitEthernet0/0/0]q[R3]int l0
[R3-LoopBack0]ip address 192.168.3.3 24

AR4

[R4]int g 0/0/0
[R4-GigabitEthernet0/0/0]ip address 45.0.0.4 24
[R4-GigabitEthernet0/0/0]q[R4]int l0
[R4-LoopBack0]ip address 192.168.4.4 24

AR5

[ISP]int g 0/0/0
[ISP-GigabitEthernet0/0/0]ip address 15.0.0.5 24[ISP-GigabitEthernet0/0/0]int g 0/0/1
[ISP-GigabitEthernet0/0/1]ip address 25.0.0.5 24[ISP-GigabitEthernet0/0/1]int g 0/0/2
[ISP-GigabitEthernet0/0/2]ip address 45.0.0.5 24[ISP-GigabitEthernet0/0/2]int g 4/0/0
[ISP-GigabitEthernet4/0/0]ip address 35.0.0.5 24

配置静态路由

AR1

[R1]ip route-static 0.0.0.0 0 15.0.0.5

AR2

[R2]ip route-static 0.0.0.0 0 25.0.0.5

AR3

[R3]ip route-static 0.0.0.0 0 35.0.0.5

AR4

[R4]ip route-static 0.0.0.0 0 45.0.0.5

建立隧道

AR1

[R1]int Tunnel 0/0/0
[R1-Tunnel0/0/0]ip address 192.168.5.1 24[R1-Tunnel0/0/0]tunnel-protocol gre p2mp 
[R1-Tunnel0/0/0]source 15.0.0.1

AR2

[R2]int Tunnel 0/0/0
[R2-Tunnel0/0/0]ip address 192.168.5.2 24
[R2-Tunnel0/0/0]tunnel-protocol gre p2mp 
[R2-Tunnel0/0/0]source GigabitEthernet 0/0/0

AR3

[R3]int Tunnel 0/0/0
[R3-Tunnel0/0/0]ip address 192.168.5.3 24
[R3-Tunnel0/0/0]tunnel-protocol gre p2mp 
[R3-Tunnel0/0/0]source GigabitEthernet 0/0/0

AR4

[R4]int Tunnel 0/0/0
[R4-Tunnel0/0/0]ip address 192.168.5.4 24
[R4-Tunnel0/0/0]tunnel-protocol gre p2mp 
[R4-Tunnel0/0/0]source g 0/0/0

NHRP的配置，中心站点AR1

AR1

[R1]int Tunnel 0/0/0
[R1-Tunnel0/0/0]nhrp network-id 100

AR2

[R2]int Tunnel 0/0/0
[R2-Tunnel0/0/0]nhrp network-id 100  
[R2-Tunnel0/0/0]nhrp entry 192.168.5.1 15.0.0.1 register   

AR3

[R3]int Tunnel 0/0/0
[R3-Tunnel0/0/0]nhrp network-id 100
[R3-Tunnel0/0/0]nhrp entry 192.168.5.1 15.0.0.1 register 

AR4

[R4]int Tunnel 0/0/0	
[R4-Tunnel0/0/0]nhrp network-id 100
[R4-Tunnel0/0/0]nhrp entry 192.168.5.1 15.0.0.1 register

配置RIP路由协议动态路由

AR1

[R1]rip 1
[R1-rip-1]undo summary 
[R1-rip-1]version 2
[R1-rip-1]network 192.168.1.0
[R1-rip-1]network 192.168.5.0

AR2

[R2]rip 1
[R2-rip-1]undo summary 
[R2-rip-1]version 2	
[R2-rip-1]network 192.168.2.0
[R2-rip-1]network 192.168.5.0

AR3

[R3]rip 1
[R3-rip-1]undo summary 
[R3-rip-1]version 2
[R3-rip-1]network 192.168.3.0
[R3-rip-1]network 192.168.5.0

AR4

[R4]rip 1
[R4-rip-1]undo summary 	
[R4-rip-1]version 2
[R4-rip-1]network 192.168.4.0
[R4-rip-1]network 192.168.5.0

在AR1上开启伪广播

[R1-Tunnel0/0/0]nhrp entry multicast dynamic 

关闭RIP的水平分割机制

AR1

[R1-Tunnel0/0/0]undo rip split-horizon

AR2

[R2-Tunnel0/0/0]undo rip split-horizon

AR3

[R3-Tunnel0/0/0]undo rip split-horizon

AR4

[R4-Tunnel0/0/0]undo rip split-horizon

五·实验结果

全网可通