IGP实验3小蚯蚓

1、需要：使用图中的dicl号，不允许使用静态路由，不允许有32位主机路由出现。全网全通。1、 r1的环回口一访问r3的loopback 1时，使用帧中继线路，不使用nat。2、 r1的环回口二访问r3的环回口一时，使用以太网线路，使用nat。（做pat）3、 r3的路由表中，不允许有r1的环回口二的地址。r3的以太接口通过dhcp的地址。dhcp服务器为r2，每次获得的地址为相同。4、 r1、r2的串口为ppp封装的安全验证，密码为小写cisco。5、 ospf采用安全的区域验证，密码为小写openlab。6、 r2、r3使用的帧中继使用rip的安全验证，密码为大写的cisco。封装ppp会产生

2、32位的主机路由，要用no peer nei-router解法：r1username r2 password 0 ciscointerface loopback1 ip address 1.1.1.1 255.255.255.0 ip ospf network point-to-point!interface loopback2 ip address 2.2.2.2 255.255.255.0 ip ospf network point-to-point!interface serial1/2 ip address 170.1.12.1 255.255.255.0 encapsulation

3、ppp ip ospf message-digest-key 1 md5 openlab no peer neighbor-route serial restart-delay 0 ppp authentication chaprouter ospf 100 router-id 1.1.1.1 log-adjacency-changes area 0 authentication message-digest network 1.1.1.0 0.0.0.255 area 0 network 2.2.2.0 0.0.0.255 area 0 network 170.1.12.0 0.0.0.25

4、5 area 0=r2no ip dhcp use vrf connectedip dhcp excluded-address 170.1.32.1 170.1.32.2ip dhcp excluded-address 170.1.32.4 170.1.32.255! ip dhcp pool cisco network 170.1.32.0 255.255.255.0key chain r2 key 1 key-string cisco username r1 password 0 ciscointerface ethernet0/0 ip address 170.1.32.2 255.25

5、5.255.0 ip nat outside ip virtual-reassembly full-duplex!interface serial1/0 ip address 170.1.23.2 255.255.255.0 ip rip authentication mode md5 ip rip authentication key-chain r1 encapsulation frame-relay serial restart-delay 0 frame-relay map ip 170.1.23.2 203 broadcast frame-relay map ip 170.1.23.

6、3 203 broadcast no frame-relay inverse-arp!interface serial1/3 ip address 170.1.12.2 255.255.255.0 ip nat inside ip virtual-reassembly encapsulation ppp ip ospf message-digest-key 1 md5 openlab ip policy route-map pbr no peer neighbor-route serial restart-delay 0 ppp authentication chap!router ospf

7、100 router-id 2.2.2.2 log-adjacency-changes area 0 authentication message-digest redistribute rip subnets network 170.1.12.0 0.0.0.255 area 0!router rip version 2 redistribute ospf 100 metric 1 route-map otr passive-interface serial1/3 network 170.1.0.0 no auto-summaryip nat inside source list 1 int

8、erface ethernet0/0 overload!access-list 1 permit 2.2.2.0 0.0.0.255access-list 2 permit 1.1.1.0 0.0.0.255!route-map pbr permit 10 match ip address 2 set ip next-hop 170.1.23.3!route-map pbr permit 20 match ip address 1 set ip next-hop 170.1.32.3!route-map otr deny 10 match ip address 1!route-map otr

9、permit 20-r3key chain r3 key 1 key-string ciscointerface loopback1 ip address 3.3.3.3 255.255.255.0!interface ethernet0/0 ip address dhcp full-duplex interface serial1/0 ip address 170.1.23.3 255.255.255.0 ip rip authentication mode md5 ip rip authentication key-chain r3 encapsulation frame-relay serial restart-delay 0 frame-relay map ip 170.1.23.2 302 broad