1CCNP-ISCWCCNP-ISCW 实验手册实验手册实验一：实验一：MPLSMPLS 配置配置实验二：实验二：ipsecipsec site-to-siteVPNsite-to-siteVPN 配置配置实验三：实验三：GREGRE VPNVPN 的配置的配置实验四：实验四：EzvpnEzvpn 的配置的配置实验五：本地实验五：本地 AAAAAA 的配置的配置实验六：实验六：CBACCBAC 配置配置2实验一：实验一：MPLSMPLS 配置配置实验环境：三台路由器实验环境：三台路由器 Ethernet 接口相连，接口配置如图接口相连，接口配置如图要求：在三台路由器相连的接口分别启用要求：在三台路由器相连的接口分别启用 MPLS,查看相应的结查看相应的结果，在启用前使其在果，在启用前使其在 OSPF 下互通。下互通。步骤一：接口配置连通性，启用步骤一：接口配置连通性，启用 OSPF 路由协议路由协议 R1(config-if)#int e0/1 R1(config-if)#ip add 10.1.1.1 255.255.255.0 R1(config-if)#no shutdown R1(config)#int e0/0 R1(config-if)#ip add 20.1.1.1 255.255.255.0 R1(config-if)#no sh R1(config)#router ospf 100 启用路由协议，发布接口启用路由协议，发布接口 R1(config-router)#net 10.1.1.0 0.0.0.255 area 0 R1(config-router)#net 20.1.1.0 0.0.0.255 area 0R2(config)#int e0/1 R2(config-if)#ip add 20.1.1.2 255.255.255.0 R2(config-if)#no sh R2(config-if)#int e0/0 R2(config-if)#ip add 30.1.1.1 255.255.255.0 R2(config-if)#no sh R2(config)#router ospf 1003R2(config-router)#net 20.1.1.0 0.0.0.255 area 0 R2(config-router)#net 30.1.1.0 0.0.0.255 area 0R3(config)#int e0/1 R3(config-if)#ip add 30.1.1.2 255.255.255.0 R3(config-if)#no sh R3(config-if)#int e0/0 R3(config-if)#ip add 40.1.1.1 255.255.255.0 R3(config-if)#no sh R3(config-if)#exit R3(config)#router ospf 100 R3(config-router)#net 30.1.1.0 0.0.0.255 area 0 R3(config-router)#net 30.1.1.0 0.0.0.255 area 0步骤二：查看路由，并测试连通性步骤二：查看路由，并测试连通性R1#show ip route 查看路由表查看路由表20.0.0.0/24 is subnetted, 1 subnets C 20.1.1.0 is directly connected, Ethernet0/040.0.0.0/24 is subnetted, 1 subnets O 40.1.1.0 110/30 via 20.1.1.2, 00:00:15, Ethernet0/010.0.0.0/24 is subnetted, 1 subnets C 10.1.1.0 is directly connected, Ethernet0/130.0.0.0/24 is subnetted, 1 subnets O 30.1.1.0 110/20 via 20.1.1.2, 00:00:15, Ethernet0/0R2#show ip route20.0.0.0/24 is subnetted, 1 subnets C 20.1.1.0 is directly connected, Ethernet0/140.0.0.0/24 is subnetted, 1 subnets O 40.1.1.0 110/20 via 30.1.1.2, 00:00:23, Ethernet0/010.0.0.0/24 is subnetted, 1 subnets O 10.1.1.0 110/20 via 20.1.1.1, 00:00:23, Ethernet0/130.0.0.0/24 is subnetted, 1 subnets C 30.1.1.0 is directly connected, Ethernet0/0R3#show ip route 查看路由表，都也学到相关路由查看路由表，都也学到相关路由20.0.0.0/24 is subnetted, 1 subnets O 20.1.1.0 110/20 via 30.1.1.1, 00:00:06, Ethernet0/140.0.0.0/24 is subnetted, 1 subnets C 40.1.1.0 is directly connected, Ethernet0/0410.0.0.0/24 is subnetted, 1 subnets O 10.1.1.0 110/30 via 30.1.1.1, 00:00:06, Ethernet0/130.0.0.0/24 is subnetted, 1 subnets C 30.1.1.0 is directly connected, Ethernet0/1R1#ping 40.1.1.1 测试连通性测试连通性Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 40.1.1.1, timeout is 2 seconds: ! Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 msR3#ping 10.1.1.1Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds: ! Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 ms步骤三：启用相关接口的步骤三：启用相关接口的 MPLS,及快速转发功能及快速转发功能R1(config)#ip cef 启用快速转发功能启用快速转发功能 R1(config)#int e0/0 R1(config-if)#mpls ip 接口启用接口启用 MPLSR2(config)#ip cef R2(config)#int e0/1 R2(config-if)#mpls ip R2(config-if)#int e0/0 R2(config-if)#mpls ipR3(config)#ip cef R3(config)#int e0/1 R3(config-if)#mpls ip步骤四：查看步骤四：查看 MPLS 状态状态R1#show mpls forwarding-table 查看查看 MPLS 转发表转发表 Local Outgoing Prefix Bytes tag Outgoing Next Hop tag tag or VC or Tunnel Id switched interface 16 16 40.1.1.0/24 0 Et0/0 20.1.1.2 17 Pop tag 30.1.1.0/24 0 Et0/0 20.1.1.2R2#show mpls forwarding-table5Local Outgoing Prefix Bytes tag Outgoing Next Hop tag tag or VC or Tunnel Id switched interface 16 Pop tag 40.1.1.0/24 0 Et0/0 30.1.1.2 17 Pop tag 10.1.1.0/24 0 Et0/1 20.1.1.1R3#show mpls forwarding-table Local Outgoing Prefix Bytes tag Outgoing Next Hop tag tag or VC or Tunnel Id switched interface 16 Pop tag 20.1.1.0/24 0 Et0/1 30.1.1.1 17 17 10.1.1.0/24 0 Et0/1 30.1.1.1R1#show ip cef summary 查看查看 CEF 转发汇总信息及标记信息转发汇总信息及标记信息 IP CEF with switching (Table Version 16), flags=0x016 routes, 0 reresolve, 0 unresolved (0 old, 0 new), peak 016 leaves, 18 nodes, 20896 bytes, 21 inserts, 5 invalidations0 load sharing elements, 0 bytes, 0 referencesuniversal per-destination load sharing algorithm, id 86C8F0BF3(0) CEF resets, 0 revisions of existing leavesResolution Timer: Exponential (currently 1s, peak 1s)0 in-place/0 aborted modificationsrefcounts: 4877 leaf, 4864 nodeTable epoch: 0 (16 entries at this epoch)Adjacency Table has 2 adjacenciesR2#show ip cef summary IP CEF with switching (Table Version 17), flags=0x017 routes, 0 reresolve, 0 unresolved (0 old, 0 new), peak 017 leaves, 18 nodes, 21032 bytes, 22 inserts, 5 invalidations0 load sharing elements, 0 bytes, 0 referencesuniversal pe