HCIP回顾（2）

实验拓扑图

实验准备

首先对192.168.1.0/24进行子网划分 

基础配置

R1
[r1]int lo0
[r1-LoopBack0]ip a 172.16.1.1 24
[r1-LoopBack0]q
[r1]int lo1
[r1-LoopBack1]ip a 172.16.2.1 24
[r1-LoopBack1]q
[r1]int lo2
[r1-LoopBack2]ip a 172.16.3.1 24
[r1-LoopBack2]q
[r1]int lo3
[r1-LoopBack3]ip a 192.168.1.33 27
[r1-LoopBack3]q
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip a 192.168.1.1 30
[r1-GigabitEthernet0/0/0]q
[r1]int g 0/0/1
[r1-GigabitEthernet0/0/1]ip a 192.168.1.13 30
[r1-GigabitEthernet0/0/1]q
R2
[r2]int lo0
[r2-LoopBack0]ip a 192.168.1.65 27
[r2-LoopBack0]q
[r2]int g 0/0/0
[r2-GigabitEthernet0/0/0]ip a 192.168.1.2 30
[r2-GigabitEthernet0/0/0]q
[r2]int g 0/0/1
[r2-GigabitEthernet0/0/1]ip a 192.168.1.5 30
[r2-GigabitEthernet0/0/1]q
R3
[r3]int lo0
[r3-LoopBack0]ip a 192.168.1.97 27
[r3-LoopBack0]q
[r3]int g 0/0/0
[r3-GigabitEthernet0/0/0]ip a 192.168.1.6 30
[r3-GigabitEthernet0/0/0]q
[r3]int g 0/0/1
[r3-GigabitEthernet0/0/1]ip a 192.168.1.10 30
[r3-GigabitEthernet0/0/1]q
R4
[r4]int lo0
[r4-LoopBack0]ip a 192.168.1.129 27
[r4-LoopBack0]q
[r4]int g0/0/0
[r4-GigabitEthernet0/0/0]ip a 192.168.1.14 30
[r4-GigabitEthernet0/0/0]q
[r4]int g0/0/1
[r4-GigabitEthernet0/0/1]ip a 192.168.1.9 30
[r4-GigabitEthernet0/0/1]q
[r4]int g 0/0/2
[r4-GigabitEthernet0/0/2]ip a 12.0.0.1 24
[r4-GigabitEthernet0/0/2]q
[r4]int g 4/0/0
[r4-GigabitEthernet4/0/0]ip a 192.168.1.17 30
[r4-GigabitEthernet4/0/0]q
R5
[r5]int lo0
[r5-LoopBack0]ip a 5.5.5.5 24
[r5-LoopBack0]q
[r5]int g 0/0/0
[r5-GigabitEthernet0/0/0]ip a 12.0.0.2 24
[r5-GigabitEthernet0/0/0]q
R6
[r6]int lo0
[r6-LoopBack0]ip a 192.168.1.161 27
[r6-LoopBack0]q
[r6]int g 0/0/0
[r6-GigabitEthernet0/0/0]ip a 192.168.1.18 30
[r6-GigabitEthernet0/0/0]q
[r6]int g 0/0/1
[r6-GigabitEthernet0/0/1]ip a 192.168.1.21 30
[r6-GigabitEthernet0/0/1]q
R7
[r7]int lo0
[r7-LoopBack0]ip a 192.168.1.193 27
[r7-LoopBack0]q
[r7]int g 0/0/0
[r7-GigabitEthernet0/0/0]ip a 192.168.1.22 30
[r7-GigabitEthernet0/0/0]q

RIP相关配置

R1
[r1]rip 1
[r1-rip-1]ver 2
[r1-rip-1]net	
[r1-rip-1]network 192.168.1.0
[r1-rip-1]network 172.16.0.0
[r1-rip-1]q
R2
[r2]rip 1
[r2-rip-1]ve 2
[r2-rip-1]network 192.168.1.0
[r2-rip-1]q
R3
[r3]rip 1
[r3-rip-1]ver 2
[r3-rip-1]network 192.168.1.0
[r3-rip-1]q
R4
[r4]rip 1
[r4-rip-1]ver 2
[r4-rip-1]network 192.168.1.0
[r4-rip-1]network 12.0.0.0
[r4-rip-1]q
R5
[r5]rip 1
[r5-rip-1]ver 2
[r5-rip-1]network 12.0.0.0
R6
[r6]rip 2
[r6-rip-1]ver 1
[r6-rip-1]network 192.168.1.0
[r6-rip-1]q
R7
[r7]rip 2
[r7-rip-1]ver 1
[r7-rip-1]network 192.168.1.0
[r7-rip-1]q

R5上做缺省

[r5-rip-1]default-route originate

R1上汇总

[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]rip summary-address 192.16.0.0 255.255.252.0
[r1-GigabitEthernet0/0/0]q
[r1]int g 0/0/1
[r1-GigabitEthernet0/0/1]rip summary-address 192.16.0.0 255.255.252.0
[r1-GigabitEthernet0/0/1]q
[r1]ip route-static 192.16.0.0 22 NULL0

使version 1和version 2可以相互访问

[r6]int g 0/0/0
[r6-GigabitEthernet0/0/0]rip ver 2
[r4]int g4/0/0
[r4-GigabitEthernet4/0/0]rip ver 1

R6-R7路由器不能学习到达R1环回路由

[r6]acl 2000
[r6-acl-basic-2000]rule permit source 192.168.1.33 0
[r6-acl-basic-2000]
[r6-acl-basic-2000]rule permit source 172.16.0.0 0
[r6-acl-basic-2000]
[r6-acl-basic-2000]q
[r6-GigabitEthernet0/0/0]rip metricin 2000 15

手工认证

[r1]int g 0/0/0
[r1-GigabitEthernet0/0/0]rip authentication-mode md5 nonstandard huawei 10
[r1-GigabitEthernet0/0/0]q
[r2]int g 0/0/0
[r2-GigabitEthernet0/0/0]rip authentication-mode md5 nonstandard huawei 10
[r2-GigabitEthernet0/0/0]q

R1 telnet R2环回实际telnet到R7上

[r7]aaa
[r7-aaa]local-user soul privilege level 15 password cipher 123456
[r7-aaa]local-user soul service-type telnet
[r7-aaa]q
[r7]user-interface vty 0 4
[r7-ui-vty0-4]authentication-mode aaa
[r7-ui-vty0-4]q
[r2]int g0/0/1
[r2-GigabitEthernet0/0/0]nat server protocol tcp global current-interface 23 ins
ide 192.168.1.193 23

测试