rip实验

R1-R7上配地址
[r1]int lo0
[r1-LoopBack0]ip add 1.1.1.1 24
[r1-LoopBack1]ip add 172.16.1.1 24
[r1-LoopBack2]ip add 172.16.2.1 24
[r1-LoopBack3]ip add 172.16.3.1 24
[r1-GigabitEthernet0/0/1]ip add 12.1.1.1 24
[r1-GigabitEthernet0/0/2]ip add 14.1.1.1 24

R2
[r2-LoopBack0]ip add 2.2.2.2 24
[r2-GigabitEthernet0/0/0]ip add 12.1.1.2 24 
[r2-GigabitEthernet0/0/1]ip add 23.1.1.1 24

R3
[r3-LoopBack0]ip add 3.3.3.3 24
[r3-GigabitEthernet0/0/0]ip add 23.1.1.2 24
[r3-GigabitEthernet0/0/1]ip add 34.1.1.1 24

R4
[r4-LoopBack0]ip add 4.4.4.4 24
 [r4-GigabitEthernet0/0/0]ip add 34.1.1.2 24
 [r4-GigabitEthernet0/0/2]ip add 14.1.1.2 24
 
[r4-GigabitEthernet0/0/1]ip add 45.1.1.1 24
[r4-GigabitEthernet4/0/0]ip add 46.1.1.1 24

R5
[r5-LoopBack0]ip add 5.5.5.5 24
[r5-GigabitEthernet0/0/0]ip add 45.1.1.2 24

R6
[r6-LoopBack0]ip add 6.6.6.6 24
[r6-GigabitEthernet0/0/0]ip add 46.1.1.2 24
[r6-GigabitEthernet0/0/1]ip add 67.1.1.1 24

R7
[r7-LoopBack0]ip add 7.7.7.7 24
[r7-GigabitEthernet0/0/0]ip add 67.1.1.2 24

R1-R7上配置RIP协议
[r1-rip-1]version 2
[r1-rip-1]network 1.0.0.0
[r1-rip-1]network 12.0.0.0
[r1-rip-1]network 14.0.0.0
[r1-rip-1]network 172.16.0.0
R2
[r2-rip-1]ver 2
[r2-rip-1]network 2.0.0.0 
[r2-rip-1]network 12.0.0.0
[r2-rip-1]network 23.0.0.0

R3
[r3-rip-1]version 2
[r3-rip-1]net	
[r3-rip-1]network 3.0.0.0
[r3-rip-1]net	
[r3-rip-1]network 23.0.0.0
[r3-rip-1]net	
[r3-rip-1]network 34.0.0.0

R4
rip 1
 version 2
 network 4.0.0.0
 network 14.0.0.0
 network 34.0.0.0
 network 45.0.0.0

r5
[r5-rip-1]version 2
[r5-rip-1]network 45.0.0.0

R6
[r6-rip-1]version 1
[r6-rip-1]network 6.0.0.0
[r6-rip-1]network 67.0.0.0
[r6-rip-1]network 46.0.0.0

R7
[r7-rip-1]version 1
[r7-rip-1]network 7.0.0.0
[r7-rip-1]network 67.0.0.0

减少路由条目：
[r1-GigabitEthernet0/0/1]rip summary-address 172.16.0.0 255.255.252.0
[r1-GigabitEthernet0/0/2]rip summary-address 172.16.0.0 255.255.252.0
[r1]ip route-static 172.16.0.0 22 NULL 0（避免环路）

R3使用R2访问R1环回
[r3]acl 2000	
[r3-acl-basic-2000]rule permit source 172.16.0.0 0.0.0.0
[r3-acl-basic-2000]rule permit source 1.0.0.0 0.0.0.0
[r3-GigabitEthernet0/0/0]rip metricin 2000 3

加快网络收敛
[r3-rip-1]timers rip 15 180 120(减少更新时间)

提高链路使用率
在R1和R4上做被动接口（现象抓包可看）
silent-interface GigabitEthernet0/0/2
silent-interface GigabitEthernet0/0/2

保证更新安全
在R1和R2上做认证
[r2-GigabitEthernet0/0/0]rip authentication-mode md5 nonstandard cipher huawei 1
[r1-GigabitEthernet0/0/1]rip authentication-mode md5 nonstandard cipher huawei 1

R1telnet R2到R7上
[r6-GigabitEthernet0/0/0]rip version 2 multicast（ripv1接受ripv2）

(1)	[r2-GigabitEthernet0/0/0]nat server protocol tcp global current-interface telnet inside 7.7.7.7 telnet
(2)	[r2-GigabitEthernet0/0/0]nat server protocol tcp global interface loopback 0  telnet inside 7.7.7.7 telnet
(3)	[r2-GigabitEthernet0/0/0]nat static protocol tcp global interface loopback 0 telnet inside 7.7.7.7 telnet
Warning:The port 23 is well-known port. If you continue it may cause function fa
ilure.
Are you sure to continue?[Y/N]:y

[r7-ui-vty0-4]set authentication password cipher huawei（r7上开启nat）

[r4-acl-basic-2000]rule pe	
[r4-acl-basic-2000]rule permit so	
[r4-acl-basic-2000]rule permit source 12.1.1.0 0
[r4-acl-basic-2000]int g0/0/2
[r4-GigabitEthernet0/0/2]rip me	
[r4-GigabitEthernet0/0/2]rip metricin 2000 4

[r2]acl 2000
[r2-acl-basic-2000]rule permit source 7.0.0.0 0
[r2-acl-basic-2000]q
[r2]int g0/0/0
[r2-GigabitEthernet0/0/0]rip metricin 2000 3

R6上不能学到R1的环回（增加跳数）
[r6]acl 2000
[r6-acl-basic-2000]rule permit source 172.16.0.0 0
[r6-acl-basic-2000]rule permit source 1.1.1.0 0
[r6-GigabitEthernet0/0/0]rip metricin 2000 15

[r5-rip-1]default-route originate