学习目标：

实验思路：

R1-R2-R3-R4-R5 运行RIPV2
R6-R7运行RIPV1

加快网络收敛(按比例修改计时器)，减少路由条目数量（手工汇总），增加路由传递安全性（路由认证）

要求R3通过R2访问R1
那就是在接口上改cost值
在R3出接口上把cost值调大
然后在R1两个接口将R1的环回路由汇总
在R2做端口映射，R7上做telnet
 

实验配置：

R1配置

<Huawei>sy
[Huawei]int l0
[Huawei-LoopBack0]ip add 1.1.1.1 24
[Huawei-LoopBack0]int l1
[Huawei-LoopBack1]ip add 172.16.1.1 24
[Huawei-LoopBack1]int l2
[Huawei-LoopBack2]ip add 172.16.2.1 24
[Huawei-LoopBack2]int l3
[Huawei-LoopBack3]ip add 172.16.3.1 24
[Huawei-LoopBack3]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 12.0.0.1 24
[Huawei-GigabitEthernet0/0/0]int g 0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 14.0.0.1 24

R2配置

<Huawei>sy
[Huawei]int l0
[Huawei-LoopBack0]ip add 2.2.2.2 24
[Huawei-LoopBack0]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 12.0.0.2 24
[Huawei-GigabitEthernet0/0/0]int g 0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 23.0.0.1 24

R3配置

<Huawei>sy
[Huawei]int l0
[Huawei-LoopBack0]ip add 3.3.3.3 24
[Huawei-LoopBack0]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 23.0.0.2 24
[Huawei-GigabitEthernet0/0/0]int g 0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 34.0.0.2 24

R4配置

<Huawei>sy
[Huawei]int l0
[Huawei-LoopBack0]ip add 4.4.4.4 24
[Huawei-LoopBack0]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 14.0.0.2 24
[Huawei-GigabitEthernet0/0/0]int g 0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 34.0.0.1 24
[Huawei-GigabitEthernet0/0/1]int g 0/0/2
[Huawei-GigabitEthernet0/0/2]ip add 45.0.0.1 24
[Huawei-GigabitEthernet0/0/2]int g 4/0/0
[Huawei-GigabitEthernet4/0/0]ip add 46.0.0.1 24

R5配置

<Huawei>sy
[Huawei]int l0
[Huawei-LoopBack0]ip add 5.5.5.5 24
[Huawei-LoopBack0]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 45.0.0.2 24

 R6配置

<Huawei>sy
[Huawei]int l0
[Huawei-LoopBack0]ip add 6.6.6.6 24
[Huawei-LoopBack0]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 46.0.0.2 24
[Huawei-GigabitEthernet0/0/0]int g 0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 67.0.0.1 24

R7配置

<Huawei>sy
[Huawei]int l0
[Huawei-LoopBack0]ip add 7.7.7.7 24
[Huawei-LoopBack0]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 67.0.0.2 24

宣告

R1宣告

[Huawei]rip
	[Huawei-rip-1]version 2
[Huawei-rip-1]network 1.0.0.0
[Huawei-rip-1]network 172.16.0.0
[Huawei-rip-1]network 12.0.0.0
[Huawei-rip-1]network 14.0.0.0

 R2宣告

[Huawei]rip
[Huawei-rip-1]version 2
[Huawei-rip-1]network 2.0.0.0
[Huawei-rip-1]network 12.0.0.0
[Huawei-rip-1]network 23.0.0.0

 R3宣告

[Huawei]rip
[Huawei-rip-1]version 2
[Huawei-rip-1]network 3.0.0.0
[Huawei-rip-1]network 23.0.0.0
[Huawei-rip-1]network 34.0.0.0

 R4宣告

[Huawei]rip
[Huawei-rip-1]version 2	
[Huawei-rip-1]network 34.0.0.0
[Huawei-rip-1]network 14.0.0.0
[Huawei-rip-1]network 45.0.0.0
[Huawei-rip-1]network 46.0.0.0
[Huawei-rip-1]network 4.0.0.0

 R5宣告

[Huawei]rip
[Huawei-rip-1]version 2
[Huawei-rip-1]network 45.0.0.0
[Huawei-rip-1]network 5.0.0.0

 R6宣告

[Huawei]rip
[Huawei-rip-1]version 1
[Huawei-rip-1]network 6.0.0.0
[Huawei-rip-1]network 46.0.0.0
[Huawei-rip-1]network 67.0.0.0

R7宣告

[Huawei]rip
[Huawei-rip-1]version 1
[Huawei-rip-1]network 7.0.0.0
[Huawei-rip-1]network 67.0.0.0

 R1环回汇总和加密认证

[Huawei]int g 0/0/0	
[Huawei-GigabitEthernet0/0/0]rip summary-address 172.16.0.0 255.255.252.0
[Huawei-GigabitEthernet0/0/0]int g 0/0/1
[Huawei-GigabitEthernet0/0/1]rip summary-address 172.16.0.0 255.255.252.0
[Huawei-GigabitEthernet0/0/1]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]rip authentication-mode md5 usual cipher 123456

 R2设置nat，加密认证

[Huawei]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]nat server protocol tcp global interface loopback 0
 23 inside 7.7.7.7 23
Warning:The port 23 is well-known port. If you continue it may cause function fa
ilure.
Are you sure to continue?[Y/N]:y
[Huawei-GigabitEthernet0/0/0]acl 2000
[Huawei-acl-basic-2000]rule permit source 7.0.0.0 0
[Huawei-acl-basic-2000]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]rip metricin 2000 5
[Huawei-GigabitEthernet0/0/0]rip authentication-mode md5 usual cipher 123456

R3接口设置ACL和COST值

[Huawei]acl 2000
[Huawei-acl-basic-2000]rule permit source 172.16.0.0 0
[Huawei-acl-basic-2000]rule permit source 1.1.1.0 0
[Huawei-acl-basic-2000]int g 0/0/1	
[Huawei-GigabitEthernet0/0/1]rip metricin 2000 10

 R4配置缺省路由，增大cost值

[Huawei]ip route-static 0.0.0.0 0 45.0.0.2
[Huawei]rip
[Huawei-rip-1]default-route originate 
[Huawei-rip-1]q
[Huawei]acl 2000
[Huawei-acl-basic-2000]rule permit source 12.0.0.0 0
[Huawei-acl-basic-2000]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]rip metricin 2000 10

 R6配置RIPV2

[Huawei]int g 0/0/0	
[Huawei-GigabitEthernet0/0/0]rip version 2

 R7上创建用户并开启telnet服务

[Huawei]aaa
[Huawei-aaa]local-user bai privilege level 15 password cipher 123456
Info: Add a new user.
[Huawei-aaa]local-user bai service-type telnet
[Huawei-aaa]user-interface vty 0 4
[Huawei-ui-vty0-4]authentication-mode aaa

 R6-R7路由器不能学习到达R1环回路由

[Huawei]acl 2000
[Huawei-acl-basic-2000]rule deny source 1.1.1.0 0
[Huawei-acl-basic-2000]rule permit source any
[Huawei-acl-basic-2000]rule deny source 172.16.0.0 0.0.255.255
[Huawei-acl-basic-2000]rip
[Huawei-rip-1]filter-policy 2000 import

R1登录telnet

R6