实验22：远程技术

Posted 2020-10-17 钟桂耀

六、远程技术

1、远程交换技术

 

第一种类型:

 

 优点:只属于一个公司所有,独享带宽,
缺点:价格高昂,不是所有的公司都能承受得起




第二种类型:

电路交换的最大优势就是成本低。在端到端连接之前不能传输数据。电路交换使用拨号调制解调或ISDN，用于低带宽数据传输。

 

第三种类型:

 

 包交换 ：允许和其他公司共向带宽以节省资金。如果需要经常传输数据，则不要考虑这种类型，应当使用租用线路

 

 2、PPP multilink．

 

 

 

 PPP Multilink原理:把单个PPP连接分割为两条独立的物理链路，然后以正确的顺序重新组合它们。要实现这一点的话必须在链路的两端都有一个遵从MP协议的硬件设备或软件程序。
    MP是这样来执行以上功能的：
    ·\\~源端的MP收到数据包
    ·\\~把它们切割成碎片（可选）
    ·\\~决定下一条可用的链路
    ·\\~添加一个包含顺序号和其它信息的PPP Multilink包头
    ·\\~把数据包或碎片转发到可用的链路上
    ·\\~接受端的MP收到数据包或数据包碎片
    ·\\~移去MP包头
    ·\\~重新把碎片组合成完整的包
    ·\\~转发数据包到相应的IP地址
    结果是，不管这些链路在容量上有多大的差别，也不管可用带宽浮动得多么厉害，也能在可用的链路上平滑地分配流量。

MLPPP配置过程：
第1步　建立一个逻辑的MLPPP接口，使用interface multilink multilink_interface_number
第2步　给MLPPP接口分配IP地址，
第3步　把相应的PPP链路配置到相应的MLPPP group
         Ppp Multilink   配置启用MLPPP
　　　　Multilink-group multilink_group_number 分配进相应的multilink group
xdbr_ccna:

xdbr_ccna(config)#interface multilink 1 \\*先开启一个虚拟的接口,multilink
xdbr_ccna(config-if)#ip add 12.1.1.1 255.255.255.252 \\*给虚拟接口配置地址
xdbr_ccna(config-if)#ppp multilink group 1 \\*此接口加入组1中
xdbr_ccna(config-if)#int s2/0
xdbr_ccna(config-if)#encapsulation ppp \\*进入物理口下不配置地址,直接封装为PPP
xdbr_ccna(config-if)#ppp multilink group 1 \\*加入到虚拟接口所在的组
xdbr_ccna(config-if)#no shutdown \\*记得把物理端口打开
xdbr_ccna(config-if)#int s2/1
xdbr_ccna(config-if)#encapsulation ppp \\*封装为PPP.其它几个接口与第一个相同配置
xdbr_ccna(config-if)#ppp multilink group 1
xdbr_ccna(config-if)#no sh
xdbr_ccna(config-if)#int s2/2
xdbr_ccna(config-if)#encapsulation ppp
xdbr_ccna(config-if)#ppp multilink group 1
xdbr_ccna(config-if)#no sh
xdbr_ccna(config-if)#int s2/3
xdbr_ccna(config-if)#encapsulation ppp
xdbr_ccna(config-if)#ppp multilink group 1
xdbr_ccna(config-if)#no sh

xdbr_ccnp:

xdbr_ccnp(config)#interface multilink 1 \\*在此台路由器上一样也要起个虚拟接口
xdbr_ccnp(config-if)#ip add 12.1.1.2 255.255.255.252 \\*地址配置在虚拟接口上
xdbr_ccnp(config-if)#ppp multilink group 1 \\*加入到一个组
xdbr_ccnp(config-if)#int s2/0
xdbr_ccnp(config-if)#encapsulation ppp
xdbr_ccnp(config-if)#ppp multilink group 1
xdbr_ccnp(config-if)#no sh
xdbr_ccnp(config-if)#int s2/1
xdbr_ccnp(config-if)#encapsulation ppp
xdbr_ccnp(config-if)#ppp multilink group 1
xdbr_ccnp(config-if)#no sh
xdbr_ccnp(config-if)#int s2/2
xdbr_ccnp(config-if)#encapsulation ppp
xdbr_ccnp(config-if)#ppp multilink group 1
xdbr_ccnp(config-if)#no sh
xdbr_ccnp(config-if)#int s2/3
xdbr_ccnp(config-if)#encapsulation ppp
xdbr_ccnp(config-if)#ppp multilink group 1
xdbr_ccnp(config-if)#no sh


xdbr_ccna#sh int s2/0
Serial1/0 is up, line protocol is down
  Hardware is M4T
  MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation PPP, LCP Listen, multilink Closed


xdbr_ccnp#sh interfaces multilink 1
Multilink1 is up, line protocol is up
  Hardware is multilink group interface
  Internet address is 12.1.1.2/30
  MTU 1500 bytes, BW 4632 Kbit, DLY 100000 usec,
reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation PPP, LCP Open, multilink Open

xdbr_ccnp#sh ppp multilink

Multilink1, bundle name is xdbr_ccna
  Bundle up for 00:03:12, 1/255 load
  Receive buffer limit 48768 bytes, frag timeout 1000 ms
    0/0 fragments/bytes in reassembly list
    0 lost fragments, 0 reordered
    0/0 discarded fragments/bytes, 0 lost received
    0xC received sequence, 0xA sent sequence
  Member links: 4 active, 0 inactive (max not set, min not set)
    Se2/0, since 00:03:12
    Se2/1, since 00:02:54
    Se2/2, since 00:02:46
    Se2/3, since 00:02:36
如果其中的一个物理口down 了,则multilink接口的带宽也会跟着下降

xdbr_ccnp#debug ppp multilink fragments \\*调试,查看MLP帧的情况
Multilink fragments debugging is on
xdbr_ccnp#
*Mar  1 00:18:50.339: Se2/0 MLP: I frag 8000000C size 90 encsize 4
*Mar  1 00:18:50.339: Se2/1 MLP: I frag 0000000D size 90 encsize 4
*Mar  1 00:18:50.339: Se2/2 MLP: I frag 0000000E size 90 encsize 4
*Mar  1 00:18:50.339: Se2/3 MLP: I frag 4000000F size 94 encsize 4
xdbr_ccnp#
*Mar  1 00:18:58.615: Se2/0 MLP: I frag 80000010 size 58 encsize 4
*Mar  1 00:18:58.615: Se2/1 MLP: I frag 40000011 size 60 encsize 4
*Mar  1 00:18:58.615: Se2/2 MLP: O frag 8000000E size 58 encsize 4
*Mar  1 00:18:58.615: Se2/3 MLP: O frag 4000000F size 60 encsize 4
*Mar  1 00:18:58.655: Se2/2 MLP: I frag 80000012 size 58 encsize 4
*Mar  1 00:18:58.655: Se2/3 MLP: I frag 40000013 size 60 encsize 4
*Mar  1 00:18:58.655: Se2/0 MLP: O frag 80000010 size 58 encsize 4
*Mar  1 00:18:58.655: Se2/1 MLP: O frag 40000011 size 60 encsize 4
*Mar  1 00:18:58.707: Se2/0 MLP: I frag 80000014 size 58 encsize 4
*Mar  1 00:18:58.707: Se2/1 MLP: I frag 40000015 size 60 encsize 4

现在做如下测试,让xdbr_ccna去ping xdbr_ccnp,这时间把xdbr_ccnp 上的任意一个接口给断开
xdbr_ccna#ping 12.1.1.2 repeat 10000

Type escape sequence to abort.
Sending 10000, 100-byte ICMP Echos to 12.1.1.2, timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!.!....!..!..!..!..!..!..!..!..!..!..!..!.!!!!!!!!!!!!!!!!!!!!!!
可以发现,ping走丢几个,走一个,一分钟左右恢复正常,绑定的物理口越多,丢包越少
xdbr_ccnp(config)#int s2/0
xdbr_ccnp(config-if)#sh \\*关掉s2/0看到上面的效果


3、PPP认证
实验目的:测试WAN连接之间的接口认证情况
设备需求:2500或2600等系列路由器二台
实验过程:

 

 A:PAP认证:
口令认证协议：(Password Authentication Protocol,PAP),在认证协议中安全性比CHAP(Challenge Authentication Protocol，问答握手认证协议)低，口令是以明文发送，并且PAP只在初始链路建立时执行，在PPP链路首次建立时，远程结点向发送路由器回送路由器用户名和口令直到获得认证。（比较执着）

XDBR_CCNA：

hostname XDBR_CCNA

username XDBR2 password 0 cisco \\*建立一个数据库，NP到NA做认证用
!
interface Serial1/0
 ip address 12.1.1.1 255.255.255.0
 encapsulation ppp \\*把封装类型改为PPP,默认是HDLC

 ppp authentication pap \\*PPP的认证类型设置为明文密码认证协议
 ppp pap sent-username XDBR1 password 0 cisco \\*发送自己的用户名和密码
!


XDBR_CCNP：

hostname XDBR_CCNP
!
username XDBR1 password 0 cisco \\*建立一个数据库，NA到NP做认证用
!
interface Serial1/0
 ip address 12.1.1.2 255.255.255.0
 encapsulation ppp  \\*把封装类型改为PPP,默认是HDLC

 ppp authentication pap  \\*PPP的认证类型设置为明文密码认证协议
 ppp pap sent-username XDBR2 password 0 cisco \\*对方对应的是数据库里信息


XDBR_CCNP#debug ppp authentication \\*调试查看PPP(PAP)的认证过程
PPP authentication debugging is on
XDBR_CCNP#
*Mar  1 00:21:21.751: Se1/0 PPP: Authorization required
*Mar  1 00:21:21.859: Se1/0 PAP: Using hostname from interface PAP
*Mar  1 00:21:21.859: Se1/0 PAP: Using password from interface PAP
*Mar  1 00:21:21.859: Se1/0 PAP: O AUTH-REQ id 3 len 13 from "XDBR_CCNP"
*Mar  1 00:21:21.859: Se1/0 PAP: I AUTH-REQ id 3 len 13 from "XDBR_CCNA"
*Mar  1 00:21:21.863: Se1/0 PAP: Authenticating peer XDBR_CCNA
*Mar  1 00:21:21.863: Se1/0 PPP: Sent PAP LOGIN Request
*Mar  1 00:21:21.867: Se1/0 PPP: Received LOGIN Response PASS
*Mar  1 00:21:21.867: Se1/0 PPP: Sent LCP AUTHOR Request
*Mar  1 00:21:21.867: Se1/0 PPP: Sent IPCP AUTHOR Request
*Mar  1 00:21:21.871: Se1/0 LCP: Received AAA AUTHOR Response PASS
XDBR_CCNP#
*Mar  1 00:21:21.871: Se1/0 IPCP: Received AAA AUTHOR Response PASS
*Mar  1 00:21:21.875: Se1/0 PAP: O AUTH-ACK id 3 len 5
*Mar  1 00:21:21.959: Se1/0 PAP: I AUTH-ACK id 3 len 5
*Mar  1 00:21:21.959: Se1/0 PPP: Sent CDPCP AUTHOR Request
*Mar  1 00:21:21.963: Se1/0 PPP: Sent IPCP AUTHOR Request
*Mar  1 00:21:21.967: Se1/0 CDPCP: Received AAA AUTHOR Response PASS

备注:上述为认证成功的情况,假如认证失败,会一直发认证请求

B:CHAP认证:
CHAP,也是在链路初始启动，但周期性链路检查。

1. 链路建立阶段结束之后，认证者向对端点发送“challenge”消息。

2. 对端点用经过单向哈希函数计算出来的值做应答。

3. 认证者根据它自己计算的哈希值来检查应答，如果值匹配，认证得到承认；否则，连接应该终止。

4. 经过一定的随机间隔，认证者发送一个新的 challenge 给端点，重复步骤 1 到 3 。

xdbr_ccna:
hostname xdbr_ccna
username xdbr_ccnp password 0 cisco \\*也是建立一个数据库供认证使用
interface Serial1/0
 ip address 12.1.1.1 255.255.255.0
 encapsulation ppp\\*这里先封装为PPP
 serial restart-delay 0
 ppp authentication chap \\*把认证方式设置为CHAP,这里不会发用户名和密码的.

xdbr_ccnp:

hostname xdbr_ccnp
username xdbr_ccna password 0 cisco
interface Serial1/0
 ip address 12.1.1.2 255.255.255.0
 encapsulation ppp
 serial restart-delay 0
 ppp authentication chap



认证成功的情况：


*Mar  1 00:08:14.123: Se1/0 PPP: Authorization required
*Mar  1 00:08:14.183: Se1/0 CHAP: O CHALLENGE id 2 len 23 from "xdbr_ccnp"
*Mar  1 00:08:14.235: Se1/0 CHAP: I CHALLENGE id 3 len 23 from "xdbr_ccna"
*Mar  1 00:08:14.239: Se1/0 CHAP: Using hostname from unknown source
*Mar  1 00:08:14.239: Se1/0 CHAP: Using password from AAA
*Mar  1 00:08:14.239: Se1/0 CHAP: O RESPONSE id 3 len 23 from "xdbr_ccnp"
*Mar  1 00:08:14.295: Se1/0 CHAP: I RESPONSE id 2 len 23 from "xdbr_ccna"
*Mar  1 00:08:14.295: Se1/0 PPP: Sent CHAP LOGIN Request
*Mar  1 00:08:14.299: Se1/0 PPP: Received LOGIN Response PASS
*Mar  1 00:08:14.299: Se1/0 PPP: Sent LCP AUTHOR Request
xdbr_ccnp#
*Mar  1 00:08:14.303: Se1/0 PPP: Sent IPCP AUTHOR Request
*Mar  1 00:08:14.303: Se1/0 LCP: Received AAA AUTHOR Response PASS
*Mar  1 00:08:14.307: Se1/0 IPCP: Received AAA AUTHOR Response PASS
*Mar  1 00:08:14.307: Se1/0 CHAP: O SUCCESS id 2 len 4
*Mar  1 00:08:14.331: Se1/0 CHAP: I SUCCESS id 3 len 4
*Mar  1 00:08:14.331: Se1/0 PPP: Sent CDPCP AUTHOR Request
*Mar  1 00:08:14.335: Se1/0 CDPCP: Received AAA AUTHOR Response PASS
*Mar  1 00:08:14.403: Se1/0 PPP: Sent IPCP AUTHOR Request


认证失败，会一定认证下去。（比较执着）

xdbr_ccnp#debug ppp authentication
PPP authentication debugging is on

*Mar  1 00:11:27.379: Se1/0 PPP: Authorization required
*Mar  1 00:11:27.503: Se1/0 CHAP: O CHALLENGE id 4 len 23 from "xdbr_ccnp"
*Mar  1 00:11:27.551: Se1/0 CHAP: I CHALLENGE id 5 len 23 from "xdbr_ccna"
*Mar  1 00:11:27.551: Se1/0 CHAP: Unable to authenticate for peer
*Mar  1 00:11:28.379: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/0, changed state to down
xdbr_ccnp(config)#
*Mar  1 00:11:29.659: Se1/0 PPP: Authorization required
*Mar  1 00:11:29.723: Se1/0 CHAP: O CHALLENGE id 5 len 23 from "xdbr_ccnp"
*Mar  1 00:11:29.779: Se1/0 CHAP: I CHALLENGE id 6 len 23 from "xdbr_ccna"
*Mar  1 00:11:29.779: Se1/0 CHAP: Unable to authenticate for peer
xdbr_ccnp(config)#
*Mar  1 00:11:31.899: Se1/0 PPP: Authorization required
*Mar  1 00:11:31.967: Se1/0 CHAP: O CHALLENGE id 6 len 23 from "xdbr_ccnp"
*Mar  1 00:11:32.055: Se1/0 CHAP: I CHALLENGE id 7 len 23 from "xdbr_ccna"
*Mar  1 00:11:32.059: Se1/0 CHAP: Unable to authenticate for peer

备注:CHAP不会发用户名和密码,它所对比的是hash值

4、帧中继技术（直联_基础）
实验目的:了解帧中继的工作原理及方式
设备需求:三台2600
实验过程:

 

 

 

 

 

 R1
!
interface Serial2/0
 ip address 12.1.1.1 255.255.255.252
 encapsulation frame-relay
 \\*R1进入s2/0接口,封装为FR,配置地址,LMI和DLCI号都可以自动学到
R2:
!
interface Serial2/0
 ip address 12.1.1.2 255.255.255.252
 encapsulation frame-relay
 \\*R2进入s2/0接口,封装为FR,配置地址,LMI和DLCI号都可以自动学到

FR
frame-relay switching \\*把中间的路由器封装为FR_SW,这是配置FR的关键
!
!
interface Serial2/1
encapsulation frame-relay \\*把接口封装为FR
clock rate 64000 \\*配置时钟,不配置不通,并且只能在DCE端配置
frame-relay lmi-type cisco \\*定义LMI的类型,有三种,cisco,ansi,q933a,两边必须一致
frame-relay intf-type dce \\*定义些设备为DCE设备
frame-relay route 102 interface Serial2/2 201 \\*设置FR的路由,从102进,s2/2出,对方为201
!         
interface Serial2/2
encapsulation frame-relay
clock rate 64000
frame-relay lmi-type cisco
frame-relay intf-type dce
frame-relay route 201 interface Serial2/1 102
备注:DLCI为R1和R2的标记,并不是指帧中继交换的接口
查看帧中继路由:
FR#show frame-relay route
Input Intf      Input Dlci      Output Intf     Output Dlci     Status
Serial2/1       102             Serial2/2       201             active
Serial2/2       201             Serial2/1       102             active
两条PVC,一条R1到R2,一条R2到R1,最终目的使不在同一地方的R1和R2像是直连一样.
在R1上查看帧中继中映射情况:
R1#sh frame-relay map \\*查看map映射表
Serial2/0 (up): ip 12.1.1.2 dlci 102(0x66,0x1860), dynamic,
              broadcast,, status defined, active
注:映射表格式为,对方的IP地址加自己的DLCI,此表为动态学习到的,学到的信息包括DLCI,LMI类型等.
R1#ping 12.1.1.2 \\*在R1上ping R2测试

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 12.1.1.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 16/36/52 ms

R1#sh frame-relay lmi \\*查看本地管理接口类型.R1和R2都为DTE设备

LMI Statistics for interface Serial2/0 (Frame Relay DTE) LMI TYPE = CISCO
  Invalid Unnumbered info 0             Invalid Prot Disc 0
  Invalid dummy Call Ref 0              Invalid Msg Type 0
  Invalid Status Message 0              Invalid Lock Shift 0
  Invalid Information ID 0              Invalid Report IE Len 0
  Invalid Report Request 0              Invalid Keep IE Len 0
  Num Status Enq. Sent 105              Num Status msgs Rcvd 102
  Num Update Status Rcvd 0              Num Status Timeouts 4
  Last Full Status Req 00:00:57         Last Full Status Rcvd 00:00:57

5、帧中继技术（全互联）
实验目的：掌握FR的全互联模型，使得在不同地域的设备能够相互通信。
设备需求：四台3640
实验过程:

 

 

在成都地区的路由器:
R1#sh run
Building configuration...
!
hostname R1
!
no ip domain lookup
interface Loopback0
 ip address 1.1.1.1 255.255.255.0 \\*用来测试路由学习情况
!
interface Serial2/0
 ip address 10.1.1.1 255.255.255.0
 encapsulation frame-relay  \\*把此接口的类型封装为FR,默认是HDLC
 serial restart-delay 0
 no frame-relay inverse-arp \\*关掉逆向ARP
!
 frame-relay map ip 10.1.1.2 102 broadcast \\*手动映射到R2,方对方的IP加自己的DLCI
 frame-relay map ip 10.1.1.3 103 broadcast \\*手动映射到R3,方对方的IP加自己的DLCI
!
!
router eigrp 1  \\*运行一个动态路由协议,让各个路由器相互学到路由条目
 network 0.0.0.0
no  auto-summary
!


上海地区路由器：
R2# sh run
no ip domain lookup

interface Loopback0
 ip address 2.2.2.2 255.255.255.0

interface Serial2/0
 ip address 10.1.1.2 255.255.255.0
 encapsulation frame-relay  \\*把此接口的类型封装为FR,默认是HDLC
 serial restart-delay 0
 no frame-relay inverse-arp \\*关掉逆向ARP
!
 frame-relay map ip 10.1.1.1 201 broadcast \\*手动映射到R1,方对方的IP加自己的DLCI
 frame-relay map ip 10.1.1.3 203 broadcast \\*手动映射到R3,方对方的IP加自己的DLCI

!
router eigrp 1
 network 0.0.0.0
 no auto-summary
!
成都地区路由器：

R3#sh run
!
interface Serial2/0
 ip address 10.1.1.3 255.255.255.0
 encapsulation frame-relay  \\*把此接口的类型封装为FR,默认是HDLC
 serial restart-delay 0
 no frame-relay inverse-arp \\*关掉逆向ARP
!
 frame-relay map ip 10.1.1.1 301 broadcast \\*手动映射到R1,方对方的IP加自己的DLCI
 frame-relay map ip 10.1.1.2 302 broadcast \\*手动映射到R2,方对方的IP加自己的DLCI

router eigrp 1
 network 0.0.0.0
 no auto-summary


帧中继交换机配置
FR：

!
frame-relay switching \\* 把路由器封装为帧中继交换机
!
interface Serial2/1
 no ip address
 encapsulation frame-relay \\*把接口的封闭类型改为FR
 serial restart-delay 0
 clock rate 64000   \\*配置接口的时钟速率
 frame-relay lmi-type q933a \\*设置LMI的类型
 frame-relay intf-type dce \\*把此接口规定为数据传输设备
 frame-relay route 102 interface Serial2/2 201 \\*设置FR的路由,从102进,s2/2 201出
 frame-relay route 103 interface Serial2/3 301 \\*设备FR的路由,从103进,s2/3 301 出
!
interface Serial2/2
 no ip address
 encapsulation frame-relay
 serial restart-delay 0
 clock rate 64000
 frame-relay lmi-type q933a
 frame-relay intf-type dce
 frame-relay route 201 interface Serial2/1 102 \\*设置FR的路由,从201进,s2/1 102出
 frame-relay route 203 interface Serial2/3 302 \\*设置FR的路由,从203进,s2/3 302出
!
interface Serial2/3
 no ip address
 encapsulation frame-relay
 serial restart-delay 0
 clock rate 64000
 frame-relay lmi-type q933a
 frame-relay intf-type dce
 frame-relay route 301 interface Serial2/1 103 \\*设置FR的路由,从301进,s2/1 103出
 frame-relay route 302 interface Serial2/2 203 \\*设置FR的路由,从302进,s2/3 203出

在R1上查看互联情况，及路由学习情况
R1#sh frame-relay map
Serial2/0 (up): ip 10.1.1.2 dlci 102(0x66,0x1860), static
              broadcast,, status defined, active
Serial2/0 (up): ip 10.1.1.3 dlci 103(0x67,0x1870), static,
              broadcast,, status defined, active

R1#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

     1.0.0.0/24 is subnetted, 1 subnets
C       1.1.1.0 is directly connected, Loopback0
     2.0.0.0/24 is subnetted, 1 subnets
D       2.2.2.0 [90/2297856] via 10.1.1.2, 00:00:49, Serial2/0\\*已经学到2网段的路由
     3.0.0.0/24 is subnetted, 1 subnets
D       3.3.3.0 [90/2297856] via 10.1.1.3, 00:00:39, Serial2/0\\*已经学到3网段的路由
     10.0.0.0/24 is subnetted, 1 subnets
C       10.1.1.0 is directly connected, Serial2/0

在帧中继交换机上查看PＶＣ状态及路由
FR#show frame-relay pvc \\*查看ＰＶＣ，一共有六条，这里只拿其中的两条举例

PVC Statistics for interface Serial2/1 (Frame Relay DCE)

              Active     Inactive      Deleted       Static
  Local          0            0            0            0
  Switched       2            0            0            0
  Unused         0            0            0            0

DLCI = 102, DLCI USAGE = SWITCHED, PVC STATUS = ACTIVE, INTERFACE = Serial2/1

  input pkts 44            output pkts 43           in bytes 2824      
  out bytes 2764           dropped pkts 0           in pkts dropped 0         
  out pkts dropped 0                out bytes dropped 0         
  in FECN pkts 0           in BECN pkts 0           out FECN pkts 0         
  out BECN pkts 0          in DE pkts 0             out DE pkts 0         
  out bcast pkts 0         out bcast bytes 0         
  30 second input rate 0 bits/sec, 0 packets/sec
  30 second output rate 0 bits/sec, 0 packets/sec
  switched pkts 44        
  Detailed packet drop counters:
  no out intf 0            out intf down 0          no out PVC 0         
  in PVC down 0            out PVC down 0           pkt too big 0         
  shaping Q full 0         pkt above DE 0           policing drop 0         
  pvc create time 00:08:50, last time pvc status changed 00:07:19

PVC Statistics for interface Serial2/2 (Frame Relay DCE)

              Active     Inactive      Deleted       Static
  Local          0            0            0            0
  Switched       2            0            0            0
  Unused         0            0            0            0

DLCI = 201, DLCI USAGE = SWITCHED, PVC STATUS = ACTIVE, INTERFACE = Serial2/2

  input pkts 44            output pkts 44           in bytes 2798      
  out bytes 2824           dropped pkts 2           in pkts dropped 2         
  out pkts dropped 0                out bytes dropped 0         
  in FECN pkts 0           in BECN pkts 0           out FECN pkts 0         
  out BECN pkts 0          in DE pkts 0             out DE pkts 0         
  out bcast pkts 0         out bcast bytes 0         
  30 second input rate 0 bits/sec, 0 packets/sec
  30 second output rate 0 bits/sec, 0 packets/sec
  switched pkts 43        
  Detailed packet drop counters:
  no out intf 0            out intf down 0          no out PVC 0         
  in PVC down 0            out PVC down 2           pkt too big 0         
  shaping Q full 0         pkt above DE 0           policing drop 0         
  pvc create time 00:08:51, last time pvc status changed 00:07:36
注:PVC状态,三种,一:active说明正常,二:inactive,自己到FR的连接没有问题,三,delete,接口错了,或者帧中继没有交费,被管理员删除了maping

FR#show frame-relay route
Input Intf      Input Dlci      Output Intf     Output Dlci     Status
Serial2/1       102             Serial2/2       201             active
Serial2/1       103             Serial2/3       301             active
Serial2/2       201             Serial2/1       102             active
Serial2/2       203             Serial2/3       302             active
Serial2/3       301             Serial2/1       103             active
Serial2/3       302             Serial2/2       203             active

FR#show frame-relay lmi

＼*三种类型如果全是思科设备可选择cisco，如果有其它设备，可选择Q933a或者ANSI

LMI Statistics for interface Serial2/1 (Frame Relay DCE) LMI TYPE = CISCO
  Invalid Unnumbered info 0             Invalid Prot Disc 0
  Invalid dummy Call Ref 0              Invalid Msg Type 0
  Invalid Status Message 0              Invalid Lock Shift 0
  Invalid Information ID 0              Invalid Report IE Len 0
  Invalid Report Request 0              Invalid Keep IE Len 0
  Num Status Enq. Rcvd 67               Num Status msgs Sent 67
  Num Update Status Sent 0              Num St Enq. Timeouts 2
          
LMI Statistics for interface Serial2/2 (Frame Relay DCE) LMI TYPE = CISCO
  Invalid Unnumbered info 0             Invalid Prot Disc 0
  Invalid dummy Call Ref 0              Invalid Msg Type 0
  Invalid Status Message 0              Invalid Lock Shift 0
  Invalid Information ID 0              Invalid Report IE Len 0
  Invalid Report Request 0              Invalid Keep IE Len 0
  Num Status Enq. Rcvd 64               Num Status msgs Sent 64
  Num Update Status Sent 0              Num St Enq. Timeouts 4
          
LMI Statistics for interface Serial2/3 (Frame Relay DCE) LMI TYPE = CISCO
  Invalid Unnumbered info 0             Invalid Prot Disc 0
  Invalid dummy Call Ref 0              Invalid Msg Type 0
  Invalid Status Message 0              Invalid Lock Shift 0
  Invalid Information ID 0              Invalid Report IE Len 0
  Invalid Report Request 0              Invalid Keep IE Len 0
  Num Status Enq. Rcvd 61               Num Status msgs Sent 61
  Num Update Status Sent 0              Num St Enq. Timeouts 6
          
Ping 测试:
R1#ping 10.1.1.2 \\*ping路由器R2的直联接口

Tpe escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.1.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 12/17/24 ms
R1#ping 10.1.1.3 \\*ping路由器R3的直联接口

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.1.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/18/32 ms
R1#ping 2.2.2.2 \\*ping路由器R2后的网段

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 16/36/76 ms
R1#ping 3.3.3.3  \\*ping路由器R2后的网段

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/26/52 ms

6、帧中继技术（Hub & Spoke）
实验目的：路由器R2与R3相互必须通过R1才能通讯。也是一个经典的拓扑结构
设备需求：三台3640
实验过程：

 

 

 R1:
interface Loopback0
 ip address 1.1.1.1 255.255.255.0
!
interface Serial0
 no ip address
 encapsulation frame-relay
 no frame-relay inverse-arp
!
interface Serial0.102 point-to-point
 ip address 192.168.1.102 255.255.255.0
 ip ospf network point-to-point  \\*如果用ospf这条很不必要,不然起不了邻居关系
 frame-relay interface-dlci 102   \\*点到点时是指定的本地DLCI
!
interface Serial0.103 point-to-point
 ip address 192.168.2.103 255.255.255.0 \\*需要不同的网段
 ip ospf network point-to-point
 frame-relay interface-dlci 103   
!
router ospf 1
network 0.0.0.0 255.255.255.255 area 0

R2:
interface Loopback2
 ip address 2.2.2.2 255.255.255.0
interface Serial0
 ip address 192.168.1.2 255.255.255.0
 encapsulation frame-relay
 ip ospf network point-to-point
 fram map ip 192.168.1.102 201 b
 no frame-relay inverse-arp \\*关掉ARP解析功能，手动设备映射
!
router ospf 1
 network 0.0.0.0 255.255.255.255 area 0

R3:       
interface Loopback3
 ip address 3.3.3.3 255.255.255.0
!
interface Serial0
 ip address 192.168.2.3 255.255.255.0
 encapsulation frame-relay
 ip ospf network point-to-point
fram map ip 192.168.2.103 301 b
no frame-relay inverse-arp
router ospf 1
network 0.0.0.0 255.255.255.255 area 0

FR:
!
frame-relay switching
!
interface Serial1
 no ip address
 encapsulation frame-relay
 clockrate 64000
 frame-relay lmi-type cisco
 frame-relay intf-type dce
 frame-relay route 102 interface Serial2 201
 frame-relay route 103 interface Serial3 301
!
interface Serial2
 no ip address
 encapsulation frame-relay
 clockrate 64000
 frame-relay lmi-type cisco
 frame-relay intf-type dce
 frame-relay route 201 interface Serial1 102 \\*R2与R3上只需要一条PVC
!         
interface Serial3
 no ip address
 encapsulation frame-relay
 clockrate 64000
 frame-relay lmi-type cisco
 frame-relay intf-type dce
 frame-relay route 301 interface Serial1 103

在R2上检查配置运行情况:
R2#sh ip rou
     1.0.0.0/32 is subnetted, 1 subnets
O       1.1.1.1 [110/65] via 192.168.1.102, 00:27:25, Serial0
     2.0.0.0/24 is subnetted, 1 subnets
C       2.2.2.0 is directly connected, Loopback2
     3.0.0.0/32 is subnetted, 1 subnets \\*已经学到R3的路由,并且是通过R1转过来的.
O       3.3.3.3 [110/129] via 192.168.1.102, 00:27:25, Serial0
C    192.168.1.0/24 is directly connected, Serial0
O    192.168.2.0/24 [110/128] via 192.168.1.102, 00:27:25, Serial0
R2#p 3.3.3.3 \\测试R2与R3的连通性,中间必须经过R1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 112/115/120 ms
R2#p 192.168.2.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 112/112/116 ms
注意:如果使用RIP,EIGRP等协议,注意水平分割的问题.