IGP實(shí)驗(yàn)3小蚯蚓

1、需要：使用圖中的dicl號(hào)，不允許使用靜態(tài)路由，不允許有32位主機(jī)路由出現(xiàn)。全網(wǎng)全通。1、 r1的環(huán)回口一訪問r3的loopback 1時(shí)，使用幀中繼線路，不使用nat。2、 r1的環(huán)回口二訪問r3的環(huán)回口一時(shí)，使用以太網(wǎng)線路，使用nat。（做pat）3、 r3的路由表中，不允許有r1的環(huán)回口二的地址。r3的以太接口通過dhcp的地址。dhcp服務(wù)器為r2，每次獲得的地址為相同。4、 r1、r2的串口為ppp封裝的安全驗(yàn)證，密碼為小寫cisco。5、 ospf采用安全的區(qū)域驗(yàn)證，密碼為小寫openlab。6、 r2、r3使用的幀中繼使用rip的安全驗(yàn)證，密碼為大寫的cisco。封裝ppp會(huì)產(chǎn)生

2、32位的主機(jī)路由，要用no peer nei-router解法：r1username r2 password 0 ciscointerface loopback1 ip address 1.1.1.1 255.255.255.0 ip ospf network point-to-point!interface loopback2 ip address 2.2.2.2 255.255.255.0 ip ospf network point-to-point!interface serial1/2 ip address 170.1.12.1 255.255.255.0 encapsulation

3、ppp ip ospf message-digest-key 1 md5 openlab no peer neighbor-route serial restart-delay 0 ppp authentication chaprouter ospf 100 router-id 1.1.1.1 log-adjacency-changes area 0 authentication message-digest network 1.1.1.0 0.0.0.255 area 0 network 2.2.2.0 0.0.0.255 area 0 network 170.1.12.0 0.0.0.25

4、5 area 0=r2no ip dhcp use vrf connectedip dhcp excluded-address 170.1.32.1 170.1.32.2ip dhcp excluded-address 170.1.32.4 170.1.32.255! ip dhcp pool cisco network 170.1.32.0 255.255.255.0key chain r2 key 1 key-string cisco username r1 password 0 ciscointerface ethernet0/0 ip address 170.1.32.2 255.25

5、5.255.0 ip nat outside ip virtual-reassembly full-duplex!interface serial1/0 ip address 170.1.23.2 255.255.255.0 ip rip authentication mode md5 ip rip authentication key-chain r1 encapsulation frame-relay serial restart-delay 0 frame-relay map ip 170.1.23.2 203 broadcast frame-relay map ip 170.1.23.

6、3 203 broadcast no frame-relay inverse-arp!interface serial1/3 ip address 170.1.12.2 255.255.255.0 ip nat inside ip virtual-reassembly encapsulation ppp ip ospf message-digest-key 1 md5 openlab ip policy route-map pbr no peer neighbor-route serial restart-delay 0 ppp authentication chap!router ospf

7、100 router-id 2.2.2.2 log-adjacency-changes area 0 authentication message-digest redistribute rip subnets network 170.1.12.0 0.0.0.255 area 0!router rip version 2 redistribute ospf 100 metric 1 route-map otr passive-interface serial1/3 network 170.1.0.0 no auto-summaryip nat inside source list 1 int

8、erface ethernet0/0 overload!access-list 1 permit 2.2.2.0 0.0.0.255access-list 2 permit 1.1.1.0 0.0.0.255!route-map pbr permit 10 match ip address 2 set ip next-hop 170.1.23.3!route-map pbr permit 20 match ip address 1 set ip next-hop 170.1.32.3!route-map otr deny 10 match ip address 1!route-map otr

9、permit 20-r3key chain r3 key 1 key-string ciscointerface loopback1 ip address 3.3.3.3 255.255.255.0!interface ethernet0/0 ip address dhcp full-duplex interface serial1/0 ip address 170.1.23.3 255.255.255.0 ip rip authentication mode md5 ip rip authentication key-chain r3 encapsulation frame-relay serial restart-delay 0 frame-relay map ip 170.1.23.2 302 broad