新版CCNP-iscw中文实验手册

1CCNP-ISCW实验手册CCNP-ISCW实验手册..................................................................................................................1实验一：MPLS配置...............................................................................................................2实验二：ipsecsite-to-siteVPN配置........................................................................................8实验三：GREVPN的配置...................................................................................................16实验四：Ezvpn的配置.........................................................................................................20实验五：本地AAA的配置..................................................................................................28实验六：CBAC配置.............................................................................................................312实验一：MPLS配置实验环境：三台路由器Ethernet接口相连，接口配置如图要求：在三台路由器相连的接口分别启用MPLS,查看相应的结果，在启用前使其在OSPF下互通。步骤一：接口配置连通性，启用OSPF路由协议R1(config-if)#inte0/1R1(config-if)#ipadd10.1.1.1255.255.255.0R1(config-if)#noshutdownR1(config)#inte0/0R1(config-if)#ipadd20.1.1.1255.255.255.0R1(config-if)#noshR1(config)#routerospf100启用路由协议，发布接口R1(config-router)#net10.1.1.00.0.0.255area0R1(config-router)#net20.1.1.00.0.0.255area0R2(config)#inte0/1R2(config-if)#ipadd20.1.1.2255.255.255.0R2(config-if)#noshR2(config-if)#inte0/0R2(config-if)#ipadd30.1.1.1255.255.255.0R2(config-if)#noshR2(config)#routerospf100R2(config-router)#net20.1.1.00.0.0.255area0R2(config-router)#net30.1.1.00.0.0.255area0R3(config)#inte0/13R3(config-if)#ipadd30.1.1.2255.255.255.0R3(config-if)#noshR3(config-if)#inte0/0R3(config-if)#ipadd40.1.1.1255.255.255.0R3(config-if)#noshR3(config-if)#exitR3(config)#routerospf100R3(config-router)#net30.1.1.00.0.0.255area0R3(config-router)#net30.1.1.00.0.0.255area0步骤二：查看路由，并测试连通性R1#showiproute查看路由表20.0.0.0/24issubnetted,1subnetsC20.1.1.0isdirectlyconnected,Ethernet0/040.0.0.0/24issubnetted,1subnetsO40.1.1.0[110/30]via20.1.1.2,00:00:15,Ethernet0/010.0.0.0/24issubnetted,1subnetsC10.1.1.0isdirectlyconnected,Ethernet0/130.0.0.0/24issubnetted,1subnetsO30.1.1.0[110/20]via20.1.1.2,00:00:15,Ethernet0/0R2#showiproute20.0.0.0/24issubnetted,1subnetsC20.1.1.0isdirectlyconnected,Ethernet0/140.0.0.0/24issubnetted,1subnetsO40.1.1.0[110/20]via30.1.1.2,00:00:23,Ethernet0/010.0.0.0/24issubnetted,1subnetsO10.1.1.0[110/20]via20.1.1.1,00:00:23,Ethernet0/130.0.0.0/24issubnetted,1subnetsC30.1.1.0isdirectlyconnected,Ethernet0/0R3#showiproute查看路由表，都也学到相关路由20.0.0.0/24issubnetted,1subnetsO20.1.1.0[110/20]via30.1.1.1,00:00:06,Ethernet0/140.0.0.0/24issubnetted,1subnetsC40.1.1.0isdirectlyconnected,Ethernet0/010.0.0.0/24issubnetted,1subnetsO10.1.1.0[110/30]via30.1.1.1,00:00:06,Ethernet0/130.0.0.0/24issubnetted,1subnetsC30.1.1.0isdirectlyconnected,Ethernet0/14R1#ping40.1.1.1测试连通性Typeescapesequencetoabort.Sending5,100-byteICMPEchosto40.1.1.1,timeoutis2seconds:!!!!!Successrateis100percent(5/5),round-tripmin/avg/max=4/4/4msR3#ping10.1.1.1Typeescapesequencetoabort.Sending5,100-byteICMPEchosto10.1.1.1,timeoutis2seconds:!!!!!Successrateis100percent(5/5),round-tripmin/avg/max=4/4/4ms步骤三：启用相关接口的MPLS,及快速转发功能R1(config)#ipcef启用快速转发功能R1(config)#inte0/0R1(config-if)#mplsip接口启用MPLSR2(config)#ipcefR2(config)#inte0/1R2(config-if)#mplsipR2(config-if)#inte0/0R2(config-if)#mplsipR3(config)#ipcefR3(config)#inte0/1R3(config-if)#mplsip步骤四：查看MPLS状态R1#showmplsforwarding-table查看MPLS转发表LocalOutgoingPrefixBytestagOutgoingNextHoptagtagorVCorTunnelIdswitchedinterface161640.1.1.0/240Et0/020.1.1.217Poptag30.1.1.0/240Et0/020.1.1.2R2#showmplsforwarding-tableLocalOutgoingPrefixBytestagOutgoingNextHoptagtagorVCorTunnelIdswitchedinterface16Poptag40.1.1.0/240Et0/030.1.1.217Poptag10.1.1.0/240Et0/120.1.1.15R3#showmplsforwarding-tableLocalOutgoingPrefixBytestagOutgoingNextHoptagtagorVCorTunnelIdswitchedinterface16Poptag20.1.1.0/240Et0/130.1.1.1171710.1.1.0/240Et0/130.1.1.1R1#showipcefsummary查看CEF转发汇总信息及标记信息IPCEFwithswitching(TableVersion16),flags=0x016routes,0reresolve,0unresolved(0old,0new),peak016leaves,18nodes,20896bytes,21inserts,5invalidations0loadsharingelements,0bytes,0referencesuniversalper-destinationloadsharingalgorithm,id86C8F0BF3(0)CEFresets,0revisionsofexistingleavesResolutionTimer:Exponential(currently1s,peak1s)0in-place/0abortedmodificationsrefcounts:4877leaf,4864nodeTableepoch:0(16entriesatthisepoch)AdjacencyTablehas2adjacenciesR2#showipcefsummaryIPCEFwithswitching(TableVersion17),flags=0x017routes,0reresolve,0unresolved(0old,0new),peak017leaves,18nodes,21032bytes,22inserts,5invalidations0loadsharingelements,0bytes,0referencesuniversalper-destinationloadsharingalgorithm,idFCD3DE863(0)CEFresets,0revisionsofexistingleavesResolutionTimer:Exponential(currently1s,peak1s)0in-place/0abortedmodificationsrefcounts:4879leaf,4864nodeTableepoch:0(17entriesatthisepoch)AdjacencyTablehas4adjacenciesR3#showipcefsummaryIPCEFwithswitching(TableVersion16),flags=0x016routes,0reresolve,0unresolved(0old,0new),peak016leaves,18nodes,20896bytes,21inserts,5invalidations0loadsharingelements,