实验2 RIP综合实验

 配置接口IP地址

AR1

 AR2

 AR3

 AR4

 AR5

 AR6

AR7

配置路由AR1-AR7

[r1]rip
[r1-rip-1]version 2
[r1-rip-1]network 12.0.0.0
[r1-rip-1]network 14.0.0.0
[r1-rip-1]network 1.0.0.0
[r1-rip-1]network 172.16.0.0

[r1]display ip routing-table protocol rip 查看路由表信息

在AR1接口上对三个环回进行汇总

[r1]int g 0/0/0
[r1-GigabitEthernet0/0/0]rip summary-address 172.16.0.0 255.255.252.0
[r1-GigabitEthernet0/0/0]int g 0/0/1
[r1-GigabitEthernet0/0/1]rip summary-address 172.16.0.0 255.255.252.0

 空接口防环
 [r1]ip route-static 172.16.0.0 22 null 0

R3使用R2访问R1环回

[r3]acl 2000
[r3-acl-basic-2000]rule permit source 172.16.0.0 0
[r3-acl-basic-2000]rule permit source 1.1.1.0 0

[r3]int g 0/0/1
[r3-GigabitEthernet0/0/1]rip metricin 2000 2  
[r3]display ip routing-table protocol rip

 增加路由传递安全性----手工认证

此处只展示r1-r2的认证

全网可达-----解决1.两个路由器使用不同RIP互通2.能ping通5.5.5.5，由AR5下发缺省路由

[r6]int g 0/0/0
[r6-GigabitEthernet0/0/0]rip version 2
[r6-GigabitEthernet0/0/0]q
[r6]display ip routing-table protocol rip    

[r5]rip 
[r5-rip-1]default-route originate 

路由过滤---- AR6 AR7不能学习到AR1的环回

[r6]acl 2000
[r6-acl-basic-2000]rule deny source 172.16.0.0 0
[r6-acl-basic-2000]rule deny source 1.1.1.0 0
[r6-acl-basic-2000]rule permit source any
[r6-acl-basic-2000]q
[r6]rip
[r6-rip-1]filter-policy 2000 import
[r6-rip-1]q
[r6]display ip routing-table protocol rip

R1 telnet R2环回实际telnet R7上

[r7]aaa    
[r7-aaa]local-user admin privilege level 15 password cipher 123456
[r7-aaa]local-user admin service-type telnet
[r7-aaa]q
[r7]user-interface vty 0 4 
[r7-ui-vty0-4]authentication-mode aaa
[r7-ui-vty0-4]q

[r2]int g 0/0/0
[r2-GigabitEthernet0/0/0]nat server protocol tcp global interface loopback 0 23 
inside 7.7.7.7 23
Are you sure to continue?[Y/N]:y

[r2]acl 2000
[r2-acl-basic-2000]rule permit source 7.0.0.0 0
[r2-acl-basic-2000]q
[r2]int g 0/0/0
[r2-GigabitEthernet0/0/0]rip metricin 2000 10
[r2-GigabitEthernet0/0/0]q
[r2]display ip routing-table protocol rip

 [r4]acl 2000
[r4-acl-basic-2000]rule permit source 12.0.0.0 0
[r4-acl-basic-2000]q
[r4]int g 0/0/0
[r4-GigabitEthernet0/0/0]rip metricin 2000 10
[r4-GigabitEthernet0/0/0]q
[r4]display ip routing-table protocol rip