五十八、配置 GRE VPN 实验组网

1、实验拓扑图

2、实验目的

R1和R3建立了一条GRE隧道，从R1的G0/0/0接口出发的报文TTL为127，则R3的G0/0/1接口所携带的TTL为127

3、实验配置

R1:

[r1]display current-configuration  

[V200R003C00]

#

sysname r1

#

snmp-agent local-engineid 800007DB03000000000000

snmp-agent  

#

clock timezone China-Standard-Time minus 08:00:00

#

portal local-server load portalpage.zip

#

drop illegal-mac alarm

#

set cpu-usage threshold 80 restore 75

#

aaa  

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default  

domain default_admin  

local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$

local-user admin service-type http

#

firewall zone Local

priority 15

#

interface GigabitEthernet0/0/0

ip address 12.1.1.1 255.255.255.0  

#

interface GigabitEthernet0/0/1

#

interface GigabitEthernet0/0/2

ip address 192.168.1.1 255.255.255.0  

#

interface NULL0

#

interface LoopBack0

ip address 1.1.1.1 255.255.255.255  

#

interface Tunnel0/0/0

ip address 100.1.1.1 255.255.255.0  

tunnel-protocol gre

source 12.1.1.1

destination 23.1.1.3

#

ip route-static 0.0.0.0 0.0.0.0 12.1.1.2

ip route-static 2.2.2.2 255.255.255.255 Tunnel0/0/0

ip route-static 172.16.1.0 255.255.255.0 Tunnel0/0/0

#

user-interface con 0

authentication-mode password

idle-timeout 0 0

user-interface vty 0 4

user-interface vty 16 20

#

wlan ac

#

return

[r1]

R2:

[r2]display current-configuration  

[V200R003C00]

#

sysname r2

#

snmp-agent local-engineid 800007DB03000000000000

snmp-agent  

#

clock timezone China-Standard-Time minus 08:00:00

#

portal local-server load portalpage.zip

#

drop illegal-mac alarm

#

set cpu-usage threshold 80 restore 75

#

aaa  

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default  

domain default_admin  

local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$

local-user admin service-type http

#

firewall zone Local

priority 15

#

interface GigabitEthernet0/0/0

ip address 12.1.1.2 255.255.255.0  

#

interface GigabitEthernet0/0/1

ip address 23.1.1.2 255.255.255.0  

#

interface GigabitEthernet0/0/2

#

interface NULL0

#

user-interface con 0

authentication-mode password

idle-timeout 0 0

user-interface vty 0 4

user-interface vty 16 20

#

wlan ac

#

return

[r2]

R3:

[r3]display current-configuration  

[V200R003C00]

#

sysname r3

#

snmp-agent local-engineid 800007DB03000000000000

snmp-agent  

#

clock timezone China-Standard-Time minus 08:00:00

#

portal local-server load portalpage.zip

#

drop illegal-mac alarm

#

set cpu-usage threshold 80 restore 75

#

aaa  

authentication-scheme default

authorization-scheme default

accounting-scheme default

domain default  

domain default_admin  

local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$

local-user admin service-type http

#

firewall zone Local

priority 15

#

interface GigabitEthernet0/0/0

#

interface GigabitEthernet0/0/1

ip address 23.1.1.3 255.255.255.0  

#

interface GigabitEthernet0/0/2

ip address 172.16.1.1 255.255.255.0  

#

interface NULL0

#

interface LoopBack0

ip address 2.2.2.2 255.255.255.255  

#

interface Tunnel0/0/0 //配置接口

ip address 100.1.1.2 255.255.255.0  

tunnel-protocol gre //调用协议

source 23.1.1.3 //源ip

destination 12.1.1.1//目的ip

#

ip route-static 0.0.0.0 0.0.0.0 23.1.1.2

ip route-static 1.1.1.1 255.255.255.255 Tunnel0/0/0

ip route-static 192.168.1.0 255.255.255.0 Tunnel0/0/0

#

user-interface con 0

authentication-mode password

idle-timeout 0 0

user-interface vty 0 4

user-interface vty 16 20

#

wlan ac

#

return

[r3]

4、实验结果

5、知识

穿过隧道：TTL不会减少