IGP實(shí)驗(yàn)3--小蚯蚓參考模板

1、需要：使用圖中的DICL號，不允許使用靜態(tài)路由，不允許有32位主機(jī)路由出現(xiàn)。全網(wǎng)全通。1、 R1的環(huán)回口一訪問R3的Loopback 1時(shí)，使用幀中繼線路，不使用NAT。2、 R1的環(huán)回口二訪問R3的環(huán)回口一時(shí)，使用以太網(wǎng)線路，使用NAT。（做PAT）3、 R3的路由表中，不允許有R1的環(huán)回口二的地址。R3的以太接口通過DHCP的地址。DHCP服務(wù)器為R2，每次獲得的地址為相同。4、 R1、R2的串口為PPP封裝的安全驗(yàn)證，密碼為小寫cisco。5、 OSPF采用安全的區(qū)域驗(yàn)證，密碼為小寫openlab。6、 R2、R3使用的幀中繼使用RIP的安全驗(yàn)證，密碼為大寫的CISCO。封裝PPP會產(chǎn)生

2、32位的主機(jī)路由，要用no peer nei-router解法：R1username R2 password 0 ciscointerface Loopback1 ip address 1.1.1.1 255.255.255.0 ip ospf network point-to-point!interface Loopback2 ip address 2.2.2.2 255.255.255.0 ip ospf network point-to-point1 / 5!interface Serial1/2 ip address 170.1.12.1 255.255.255.0 encapsula

3、tion ppp ip ospf message-digest-key 1 md5 openlab no peer neighbor-route serial restart-delay 0 ppp authentication chaprouter ospf 100 router-id 1.1.1.1 log-adjacency-changes area 0 authentication message-digest network 1.1.1.0 0.0.0.255 area 0 network 2.2.2.0 0.0.0.255 area 0 network 170.1.12.0 0.0

4、.0.255 area 0=R2no ip dhcp use vrf connectedip dhcp excluded-address 170.1.32.1 170.1.32.2ip dhcp excluded-address 170.1.32.4 170.1.32.255! ip dhcp pool cisco network 170.1.32.0 255.255.255.0key chain R2 key 1 key-string CISCO username R1 password 0 ciscointerface Ethernet0/0 ip address 170.1.32.2 2

5、55.255.255.0 ip nat outside ip virtual-reassembly full-duplex!interface Serial1/0 ip address 170.1.23.2 255.255.255.0 ip rip authentication mode md5 ip rip authentication key-chain R1 encapsulation frame-relay serial restart-delay 0 frame-relay map ip 170.1.23.2 203 broadcast frame-relay map ip 170.

6、1.23.3 203 broadcast no frame-relay inverse-arp!interface Serial1/3 ip address 170.1.12.2 255.255.255.0 ip nat inside ip virtual-reassembly encapsulation ppp ip ospf message-digest-key 1 md5 openlab ip policy route-map PBR no peer neighbor-route serial restart-delay 0 ppp authentication chap!router

7、ospf 100 router-id 2.2.2.2 log-adjacency-changes area 0 authentication message-digest redistribute rip subnets network 170.1.12.0 0.0.0.255 area 0!router rip version 2 redistribute ospf 100 metric 1 route-map OTR passive-interface Serial1/3 network 170.1.0.0 no auto-summaryip nat inside source list

8、1 interface Ethernet0/0 overload!access-list 1 permit 2.2.2.0 0.0.0.255access-list 2 permit 1.1.1.0 0.0.0.255!route-map PBR permit 10 match ip address 2 set ip next-hop 170.1.23.3!route-map PBR permit 20 match ip address 1 set ip next-hop 170.1.32.3!route-map OTR deny 10 match ip address 1!route-map

9、 OTR permit 20-R3key chain R3 key 1 key-string CISCOinterface Loopback1 ip address 3.3.3.3 255.255.255.0!interface Ethernet0/0 ip address dhcp full-duplex interface Serial1/0 ip address 170.1.23.3 255.255.255.0 ip rip authentication mode md5 ip rip authentication key-chain R3 encapsulation frame-relay serial restart-delay 0 frame-relay map ip 170.1.23.2 302 broad