论坛徽章:: 0

1楼 [报告]

发表于 2009-02-14 21:49 |只看该作者

等了一段时间后，在spoke路由器上ping对端保护的网络
spoke#ping 192.168.1.2 so 10.0.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds:
Packet sent with a source address of 10.0.0.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 232/261/292 ms
spoke#
此时R2已经有了注入的静态路由
r2#show ip ro
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
   D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
   N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
   E1 - OSPF external type 1, E2 - OSPF external type 2
   i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
   ia - IS-IS inter area, * - candidate default, U - per-user static route
   o - ODR, P - periodic downloaded static route

Gateway of last resort is 10.4.4.4 to network 0.0.0.0

   10.0.0.0/24 is subnetted, 2 subnets
C    10.4.4.0 is directly connected, FastEthernet0/0
S    10.0.0.0 [1/0] via 10.4.4.4
C 192.168.1.0/24 is directly connected, FastEthernet1/0
S* 0.0.0.0/0 [1/0] via 10.4.4.4
r2#show cry is sa
dst          src          state       conn-id slot status
10.4.4.3       10.1.1.1       QM_IDLE             1 0 ACTIVE

r2#show cry en conn ac

  ID Interface          IP-Address    State  Algorithm          Encrypt  Decrypt
1 FastEthernet0/0    10.4.4.2       set HMAC_SHA+DES_56_CB       0       0
2001 FastEthernet0/0    10.4.4.3       set 3DES+SHA                0    14
2002 FastEthernet0/0    10.4.4.3       set 3DES+SHA                5       0

r2#telnet 192.168.1.5
Trying 192.168.1.5 ... Open

User Access Verification

Password:
r5>en
Password:
r5#show ip rou
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
   D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
   N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
   E1 - OSPF external type 1, E2 - OSPF external type 2
   i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
   ia - IS-IS inter area, * - candidate default, U - per-user static route
   o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

   5.0.0.0/24 is subnetted, 1 subnets
C    5.5.5.0 is directly connected, Loopback0
   10.0.0.0/24 is subnetted, 1 subnets
O E2 10.0.0.0 [110/20] via 192.168.1.2, 00:03:16, FastEthernet1/0
C 192.168.1.0/24 is directly connected, FastEthernet1/0
r5#
r5#ping 10.0.0.1 so 192.168.1.5

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.1, timeout is 2 seconds:
Packet sent with a source address of 192.168.1.5
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 336/392/456 ms
r5#
而R1上没有该路由
r1#show ip rou
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
   D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
   N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
   E1 - OSPF external type 1, E2 - OSPF external type 2
   i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
   ia - IS-IS inter area, * - candidate default, U - per-user static route
   o - ODR, P - periodic downloaded static route

Gateway of last resort is 10.4.4.4 to network 0.0.0.0

   10.0.0.0/24 is subnetted, 1 subnets
C    10.4.4.0 is directly connected, FastEthernet0/0
S* 0.0.0.0/0 [1/0] via 10.4.4.4
至此，切换成功。

由于网络上的资料不是很多，所以把自己的实验过程贴了出来，希望对大家有帮助，一起进步。