IGP实验3--小蚯蚓

1、需要：使用图中的DICL号，不允许使用静态路由，不允许有32位主机路由出现。全网全通。1、 R1的环回口一访问R3的Loopback 1时，使用帧中继线路，不使用NAT。2、 R1的环回口二访问R3的环回口一时，使用以太网线路，使用NAT。（做PAT）3、 R3的路由表中，不允许有R1的环回口二的地址。R3的以太接口通过DHCP的地址。DHCP服务器为R2，每次获得的地址为相同。4、 R1、R2的串口为PPP封装的安全验证，密码为小写cisco。5、 OSPF采用安全的区域验证，密码为小写openlab。6、 R2、R3使用的帧中继使用RIP的安全验证，密码为大写的CISCO。封装PPP会产生

2、32位的主机路由，要用no peer nei-router解法：R1username R2 password 0 ciscointerface Loopback1 ip address 1.1.1.1 255.255.255.0 ip ospf network point-to-point!interface Loopback2 ip address 2.2.2.2 255.255.255.0 ip ospf network point-to-point!interface Serial1/2 ip address 170.1.12.1 255.255.255.0 encapsulation

3、ppp ip ospf message-digest-key 1 md5 openlab no peer neighbor-route serial restart-delay 0 ppp authentication chaprouter ospf 100 router-id 1.1.1.1 log-adjacency-changes area 0 authentication message-digest network 1.1.1.0 0.0.0.255 area 0 network 2.2.2.0 0.0.0.255 area 0 network 170.1.12.0 0.0.0.25

4、5 area 0=R2no ip dhcp use vrf connectedip dhcp excluded-address 170.1.32.1 170.1.32.2ip dhcp excluded-address 170.1.32.4 170.1.32.255! ip dhcp pool cisco network 170.1.32.0 255.255.255.0key chain R2 key 1 key-string CISCO username R1 password 0 ciscointerface Ethernet0/0 ip address 170.1.32.2 255.25

5、5.255.0 ip nat outside ip virtual-reassembly full-duplex!interface Serial1/0 ip address 170.1.23.2 255.255.255.0 ip rip authentication mode md5 ip rip authentication key-chain R1 encapsulation frame-relay serial restart-delay 0 frame-relay map ip 170.1.23.2 203 broadcast frame-relay map ip 170.1.23.

6、3 203 broadcast no frame-relay inverse-arp!interface Serial1/3 ip address 170.1.12.2 255.255.255.0 ip nat inside ip virtual-reassembly encapsulation ppp ip ospf message-digest-key 1 md5 openlab ip policy route-map PBR no peer neighbor-route serial restart-delay 0 ppp authentication chap!router ospf

7、100 router-id 2.2.2.2 log-adjacency-changes area 0 authentication message-digest redistribute rip subnets network 170.1.12.0 0.0.0.255 area 0!router rip version 2 redistribute ospf 100 metric 1 route-map OTR passive-interface Serial1/3 network 170.1.0.0 no auto-summaryip nat inside source list 1 int

8、erface Ethernet0/0 overload!access-list 1 permit 2.2.2.0 0.0.0.255access-list 2 permit 1.1.1.0 0.0.0.255!route-map PBR permit 10 match ip address 2 set ip next-hop 170.1.23.3!route-map PBR permit 20 match ip address 1 set ip next-hop 170.1.32.3!route-map OTR deny 10 match ip address 1!route-map OTR

9、permit 20-R3key chain R3 key 1 key-string CISCOinterface Loopback1 ip address 3.3.3.3 255.255.255.0!interface Ethernet0/0 ip address dhcp full-duplex interface Serial1/0 ip address 170.1.23.3 255.255.255.0 ip rip authentication mode md5 ip rip authentication key-chain R3 encapsulation frame-relay serial restart-delay 0 frame-relay map ip 170.1.23.2 302 broad