MGRE网络的chap认证--ppp认证--tunnel 隧道综合实验
一.要求：
1.R5为Ips只能配置地址。
2.R1--R3建立MGRE环境且用EIGRP学习各自环回。
3.R4 可以正常访问R5环回。
4.R1和R5 进行chap认证，R5为主认证方（不基于主机名）。
二.地址规划：
三.拓扑图
四.配置
R1
**R1配置**r1#show running-config Building configuration...Current configuration : 1934 bytes!! Last configuration change at 05:01:14 CET Sun Dec 16 version 15.2service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname r1!boot-start-markerboot-end-marker!!no aaa new-modelclock timezone CET 1 0mmi polling-interval 60no mmi auto-configureno mmi pvcmmi snmp-timeout 180!no ip domain lookupip cef no ipv6 cef! multilink bundle-name authenticatedinterface Loopback0ip address 1.1.1.1 255.255.255.0! interface Tunnel0ip address 20.1.1.1 255.255.255.0no ip redirectsip nhrp map multicast dynamicip nhrp network-id 100tunnel source Serial0/1tunnel mode gre multipoint! interface Serial0/0ip address 192.168.1.2 255.255.255.0ip nat insideip virtual-reassembly inserial restart-delay 0! interface Serial0/1ip address 10.1.1.1 255.255.255.0ip nat outsideip virtual-reassembly inencapsulation pppppp chap hostname R5ppp chap password 0 123serial restart-delay 0! interface Serial0/2no ip addressip nat outsideip virtual-reassembly inshutdown serial restart-delay 0! interface Serial0/3no ip addressshutdown serial restart-delay 0! interface Serial1/0no ip addressshutdown serial restart-delay 0! interface Serial1/1no ip addressshutdown serial restart-delay 0! interface Serial1/2no ip addressshutdown serial restart-delay 0! interface Serial1/3no ip addressshutdown serial restart-delay 0! ! router eigrp 100network 20.0.0.0network 192.168.1.0! ip forward-protocol ndno ip http serverno ip http secure-serverip nat inside source list 1 interface Serial0/1 overloadip route 0.0.0.0 0.0.0.0 10.1.1.2! access-list 1 permit 192.168.0.0 0.0.255.255! control-planeline con 0exec-timeout 0 0logging synchronousline aux 0line vty 0 4login transport input all! ! end
R2
**R2配置**r2#show running-config Building configuration...Current configuration : 1666 bytes!! Last configuration change at 04:34:52 CET Sun Dec 16 version 15.2service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname r2!boot-start-markerboot-end-marker!!!no aaa new-modelclock timezone CET 1 0mmi polling-interval 60no mmi auto-configureno mmi pvcmmi snmp-timeout 180!ip cef no ipv6 cef! multilink bundle-name authenticated! redundancy! interface Loopback0ip address 192.168.2.1 255.255.255.0! interface Tunnel0ip address 20.1.1.2 255.255.255.0no ip redirectsip nhrp map 20.1.1.1 10.1.1.1ip nhrp map multicast 10.1.1.1ip nhrp network-id 100ip nhrp nhs 20.1.1.1tunnel source Serial0/0tunnel mode gre multipoint! interface Serial0/0ip address 10.1.2.2 255.255.255.0serial restart-delay 0! interface Serial0/1no ip addressshutdown serial restart-delay 0! interface Serial0/2no ip addressshutdown serial restart-delay 0! interface Serial0/3no ip addressshutdown serial restart-delay 0! interface Serial1/0no ip addressshutdown serial restart-delay 0! interface Serial1/1no ip addressshutdown serial restart-delay 0! interface Serial1/2no ip addressshutdown serial restart-delay 0! interface Serial1/3no ip addressshutdown serial restart-delay 0! ! router eigrp 100network 20.0.0.0network 192.168.2.0! ip forward-protocol nd! ! no ip http serverno ip http secure-serverip route 0.0.0.0 0.0.0.0 10.1.2.1! control-plane! line con 0exec-timeout 0 0logging synchronousline aux 0line vty 0 4login transport input all! end
R3
**R3配置**r3#show running-config Building configuration...Current configuration : 1648 bytes!! Last configuration change at 04:40:51 CET Sun Dec 16 version 15.2service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname r3!boot-start-markerboot-end-marker!!!no aaa new-modelclock timezone CET 1 0mmi polling-interval 60no mmi auto-configureno mmi pvcmmi snmp-timeout 180!ip cef no ipv6 cef! multilink bundle-name authenticated! ! redundancy! interface Loopback0ip address 192.168.3.1 255.255.255.0! interface Tunnel0ip address 20.1.1.3 255.255.255.0no ip redirectsip nhrp map 20.1.1.1 10.1.1.1ip nhrp map multicast 10.1.1.1ip nhrp network-id 100ip nhrp nhs 20.1.1.1tunnel source Serial0/0tunnel mode gre multipoint! interface Serial0/0ip address 10.1.3.2 255.255.255.0serial restart-delay 0! interface Serial0/1no ip addressshutdown serial restart-delay 0! interface Serial0/2no ip addressshutdown serial restart-delay 0! interface Serial0/3no ip addressshutdown serial restart-delay 0! interface Serial1/0no ip addressshutdown serial restart-delay 0! interface Serial1/1no ip addressshutdown serial restart-delay 0! interface Serial1/2no ip addressshutdown serial restart-delay 0! interface Serial1/3no ip addressshutdown serial restart-delay 0! ! router eigrp 100network 20.0.0.0network 192.168.3.0! ip forward-protocol nd! ! no ip http serverno ip http secure-serverip route 0.0.0.0 0.0.0.0 10.1.3.1! control-plane! line cosice 0 logging synchronousline aux 0line vty 0 4login transport input all! ! end
R4
**R4配置**r4#show running-config Building configuration...Current configuration : 1423 bytes!! Last configuration change at 04:42:51 CET Sun Dec 16 version 15.2service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname r4!boot-start-markerboot-end-marker!no aaa new-modelclock timezone CET 1 0mmi polling-interval 60no mmi auto-configureno mmi pvcmmi snmp-timeout 180! ip cef no ipv6 cef! multilink bundle-name authenticated! redundancy! interface Loopback0ip address 192.168.4.1 255.255.255.0! interface Serial0/0ip address 192.168.1.1 255.255.255.0serial restart-delay 0! interface Serial0/1no ip addressshutdown serial restart-delay 0! interface Serial0/2no ip addressshutdown serial restart-delay 0! interface Serial0/3no ip addressshutdown serial restart-delay 0! interface Serial1/0no ip addressshutdown serial restart-delay 0! interface Serial1/1no ip addressshutdown serial restart-delay 0! interface Serial1/2no ip addressshutdown serial restart-delay 0! interface Serial1/3no ip addressshutdown serial restart-delay 0! ! router eigrp 100network 192.168.1.0network 192.168.4.0! ip forward-protocol nd! ! no ip http serverno ip http secure-serverip route 0.0.0.0 0.0.0.0 192.168.1.2! control-plane! line con 0logging synchronousline aux 0line vty 0 4login transport input all! !
R5
**R5配置**r5#show running-config Building configuration...Current configuration : 1425 bytes!! Last configuration change at 05:02:14 CET Sun Dec 16 version 15.2service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname r5!boot-start-markerboot-end-marker!no aaa new-modelclock timezone CET 1 0mmi polling-interval 60no mmi auto-configureno mmi pvcmmi snmp-timeout 180!ip cef no ipv6 cef! multilink bundle-name authenticated! username R5 password 0 123! redundancy! interface Loopback0ip address 5.5.5.5 255.255.255.0! interface Serial0/0ip address 10.1.1.2 255.255.255.0encapsulation pppppp authentication chapserial restart-delay 0! interface Serial0/1ip address 10.1.2.1 255.255.255.0serial restart-delay 0! interface Serial0/2ip address 10.1.3.1 255.255.255.0serial restart-delay 0! interface Serial0/3no ip addressshutdown serial restart-delay 0! interface Serial1/0no ip addressshutdown serial restart-delay 0! interface Serial1/1no ip addressshutdown serial restart-delay 0! interface Serial1/2no ip addressshutdown serial restart-delay 0! interface Serial1/3no ip addressshutdown serial restart-delay 0! ip forward-protocol nd! ! no ip http serverno ip http secure-server! control-plane! line con 0exec-timeout 0 0logging synchronousline aux 0line vty 0 4login transport input all! ! end
五.总结
1.路由器之间不能使用Ethernet接口，Ethernet接口不能改封装模式为PPP.
2.Tunnel隧道地址不能和公网配置在同一网段，EIGRP宣告后会造成Tunnel超时而路由翻滚。
3.模拟器GNS3不支持NAT和Tunnel在同一接口。（1以下版本，1以上未尝试。欢迎评论求解）
