Cisco设备关于GRE的小案例
Cisco设备关于GRE的小案例
实验拓扑：
实验设备：
五台cisco路由器
有三台分别作r1、r2、r3
另两台作pc1、pc2
实验步骤：
为每个设备的各个端口配置正确的ip
在r1和r2上配置一条通往公共网的默认路由、创建gre隧道、配置通过隧道的路由
测试连通性
实验目的：
能使1.0网段的主机能通过gre隧道和2.0网段的主机通讯
参考配置：
r1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is 61.130.130.2 to network 0.0.0.0
C 192.168.4.0/24 is directly connected, Tunnel10
C 192.168.1.0/24 is directly connected, Serial1/1
S 192.168.2.0/24 is directly connected, Tunnel10
61.0.0.0/30 is subnetted, 1 subnets
C 61.130.130.0 is directly connected, Serial1/0
S* 0.0.0.0/0 [1/0] via 61.130.130.2
r1#show running-config
Building configuration...
Current configuration : 1003 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname r1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
!
interface Tunnel10
ip address 192.168.4.1 255.255.255.0
tunnel source 61.130.130.1
tunnel destination 61.130.132.1
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
ip address 61.130.130.1 255.255.255.252
serial restart-delay 0
!
interface Serial1/1
ip address 192.168.1.254 255.255.255.0
serial restart-delay 0
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
ip http server
ip route 0.0.0.0 0.0.0.0 61.130.130.2
ip route 192.168.2.0 255.255.255.0 Tunnel10
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
!
!
end
r2#show running-config
Building configuration...
Current configuration : 757 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname r2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
ip address 61.130.130.2 255.255.255.252
serial restart-delay 0
!
interface Serial1/1
ip address 61.130.132.2 255.255.255.252
serial restart-delay 0
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
ip http server
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
!
!
end
r3#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is 61.130.132.2 to network 0.0.0.0
C 192.168.4.0/24 is directly connected, Tunnel20
S 192.168.1.0/24 is directly connected, Tunnel20
C 192.168.2.0/24 is directly connected, Serial1/0
61.0.0.0/30 is subnetted, 1 subnets
C 61.130.132.0 is directly connected, Serial1/1
S* 0.0.0.0/0 [1/0] via 61.130.132.2
r3#show running-config
Building configuration...
Current configuration : 1018 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname r3
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
!
interface Tunnel20
ip address 192.168.4.2 255.255.255.0
tunnel source 61.130.132.1
tunnel destination 61.130.130.1
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/0
ip address 192.168.2.254 255.255.255.0
serial restart-delay 0
!
interface Serial1/1
ip address 61.130.132.1 255.255.255.252
serial restart-delay 0
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
ip http server
ip route 0.0.0.0 0.0.0.0 61.130.132.2
ip route 192.168.1.0 255.255.255.0 Tunnel20
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
!
!
End
测试：
Pc1ping pc2
pc1#ping 192.168.2.100
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 136/148/172 ms
Pc2pingpc1
pc2#ping 192.168.1.100
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 100/147/204 ms
跟踪一下路由：
pc1#traceroute ip
Target IP address: 192.168.2.100
Source address: 192.168.1.100
Numeric display [n]:
Timeout in seconds [3]:
Probe count [3]:
Minimum Time to Live [1]:
Maximum Time to Live [30]:
Port Number [33434]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Type escape sequence to abort.
Tracing the route to 192.168.2.1
1 192.168.1.254 68 msec 36 msec 52 msec
2 192.168.4.2 100 msec 136 msec 140 msec
3 192.168.2.100 188 msec 228 msec *
很显然ping包是从虚拟的隧道通过的