rip ospf 加密 路由图 综合实验
青青版本
需求
1.
使用图中的DICL号，不允许使用静态路由，不允许有32位主机路由出现。全网全通
.
2.
R1的环回口一访问R3的 Loopback 1 时，使用帧中继线路
，
R1的环回口二访问R3的 Loopback 1 时，使用以太网线路
.
3.
R3的以太接口通过DHCP的地址。DHCP服务器为R2，每次获得的地址为相同。
4.
R1、R2的串口为PPP封装的安全验证，密码为小写surpasslab。
5.
OSPF采用安全的区域验证，密码为小写surpasslab。
6.
R2、R3使用的帧中继使用RIP的安全验证，密码为大写的SURPASSLAB。
环境：
配置如下：
在R1上
hostname R1
!
ip cef
no ip domain lookup
username R2 password 0 surpasslab
!
interface Loopback1
ip address 1.1.1.1 255.255.255.0
ip ospf network point-to-point
!
interface Loopback2
ip address 2.2.2.2 255.255.255.0
ip ospf network point-to-point
!
interface Serial0/0
ip address 170.1.12.1 255.255.255.0
encapsulation ppp
ip ospf message-digest-key 1 md5 surpasslab
clock rate 64000
ppp authentication chap
!
router ospf 1
router-id 1.1.1.1
log-adjacency-changes
area 0 authentication message-digest
network 1.1.1.1 0.0.0.0 area 0
network 2.2.2.2 0.0.0.0 area 0
network 170.1.12.1 0.0.0.0 area 0
!
line con 0
exec-timeout 0 0
logging synchronous
在R2上：
hostname R2
ip cef
no ip domain lookup
no ip dhcp use vrf connected
no ip dhcp conflict logging
ip dhcp excluded-address 170.1.32.1
!
ip dhcp pool cisco
network 170.1.32.0 255.255.255.0
default-router 170.1.32.1
dns-server 1.1.1.1
domain-name pzh
key chain cisco
key 1
key-string SURPASSLAB
username R1 password 0 surpasslab
interface Loopback1
ip address 22.22.22.22 255.255.255.0
ip ospf network point-to-point
!
interface Serial0/0
ip address 170.1.12.2 255.255.255.0
encapsulation ppp
ip ospf message-digest-key 1 md5 surpasslab
ip policy route-map pzh
clock rate 64000
ppp authentication chap
!
interface Serial0/2
ip address 170.1.23.1 255.255.255.0
ip rip authentication mode md5
ip rip authentication key-chain cisco
encapsulation frame-relay
serial restart-delay 0
clock rate 64000
frame-relay map ip 170.1.23.2 203 broadcast
no frame-relay inverse-arp
!
interface FastEthernet1/0
no switchport
ip address 170.1.32.1 255.255.255.0
router ospf 1
router-id 22.22.22.22
log-adjacency-changes
area 0 authentication message-digest
redistribute rip subnets
network 22.22.22.22 0.0.0.0 area 0
network 170.1.12.2 0.0.0.0 area 0
!
router rip
version 2
redistribute ospf 1 metric 1 route-map pzh
network 170.1.0.0
no auto-summary
!
access-list 1 permit 1.1.1.1
access-list 2 permit 2.2.2.2
!
route-map pzh permit 10
match ip address 1
set ip next-hop 172.1.23.2
!
route-map pzh permit 20
match ip address 2
set ip next-hop 170.1.32.2
!
line con 0
exec-timeout 0 0
logging synchronous
在R3上：
!
hostname R3
ip cef
no ip domain lookup
key chain cisco
key 1
key-string SURPASSLAB
interface Loopback1
ip address 3.3.3.3 255.255.255.0
!
interface Serial0/2
ip address 170.1.23.2 255.255.255.0
ip rip authentication mode md5
ip rip authentication key-chain cisco
encapsulation frame-relay
serial restart-delay 0
clock rate 64000
frame-relay map ip 170.1.23.1 302 broadcast
no frame-relay inverse-arp
!
interface FastEthernet1/0
no switchport
ip address 170.1.32.2 255.255.255.0
router rip
version 2
network 3.0.0.0
network 170.1.0.0
no auto-summary
!
line con 0
exec-timeout 0 0
logging synchronous
实验效果：
R1#traceroute 3.3.3.3 source 1.1.1.1
Type escape sequence to abort.
Tracing the route to 3.3.3.3
1 170.1.12.2 72 msec 96 msec 96 msec
2 170.1.23.2 312 msec * 264 msec
R1#traceroute 3.3.3.3 source 2.2.2.2
Type escape sequence to abort.
Tracing the route to 3.3.3.3
1 170.1.12.2 148 msec 96 msec 96 msec
2 170.1.32.2 168 msec * 144 msec
达到上面的要求。