两个异地私有网络通过各自的静态公网地址配置GRE，实现两个跨区域内网互通

                                                                     网络拓扑图

 解释：pc1和pc2分别属于一个公司的两个地区的不同私网，pc1所属的区域出口为静态公网地址1.1.1.1，pc2所属的区域出口为静态公网地址2.2.2.2。

 

需求：

1.实现pc1所在网段可以访问外网；

2.实现pc2所在网段可以访问外网；

3.实现pc1所在网段可以直接通过内网地址访问pc2所在网络。

4.实现pc2所在网段可以直接通过内网地址访问pc1所在网络。

配置步骤：

1.配置路由器和pc机的端口IP。

2.AR1、AR2、AR3直接通过ospf实现路由互通。

3.分别在AR1的ge0/0/1和AR3的ge0/0/2做nat，实现内网访问互联网。

3.分别在AR1和AR3配置GRE。

4.分别在AR1和AR3上配置两个私网到对端内网的路由，使其走gre隧道。

 

 

路由器和pc配置如下。

 

PC1：

 

 

AR1：

 

[AR1]display current-configuration 
[V200R003C00]
#
 sysname AR1
#
 snmp-agent local-engineid 800007DB03000000000000
 snmp-agent 
#
 clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
 drop illegal-mac alarm
#
 wlan ac-global carrier id other ac id 0
#
 set cpu-usage threshold 80 restore 75
#
acl number 2000  
 rule 5 permit 
#
aaa 
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default 
 domain default_admin 
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ip address 192.168.1.254 255.255.255.0 
#
interface GigabitEthernet0/0/1
 ip address 1.1.1.1 255.255.255.0 
 nat outbound 2000
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface Tunnel0/0/1
 ip address 10.0.0.1 255.255.255.0 
 tunnel-protocol gre
 source 1.1.1.1
 destination 2.2.2.2
#
ospf 1 router-id 1.1.1.1 
 area 0.0.0.0 
  network 1.1.1.1 0.0.0.0 
#
ip route-static 192.168.2.0 255.255.255.0 Tunnel0/0/1
#
user-interface con 0
 authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return

AR2：

[AR2]display current-configuration 
[V200R003C00]
#
 sysname AR2
#
 snmp-agent local-engineid 800007DB03000000000000
 snmp-agent 
#
 clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
 drop illegal-mac alarm
#
 wlan ac-global carrier id other ac id 0
#
 set cpu-usage threshold 80 restore 75
#
aaa 
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default 
 domain default_admin 
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
#
interface GigabitEthernet0/0/1
 ip address 1.1.1.2 255.255.255.0 
#
interface GigabitEthernet0/0/2
 ip address 2.2.2.1 255.255.255.0 
#
interface NULL0
#
ospf 1 router-id 2.2.2.2 
 area 0.0.0.0 
  network 1.1.1.2 0.0.0.0 
  network 2.2.2.1 0.0.0.0 
#
user-interface con 0
 authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return

　AR3：

[AR3]display current-configuration 
[V200R003C00]
#
 sysname AR3
#
 snmp-agent local-engineid 800007DB03000000000000
 snmp-agent 
#
 clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
 drop illegal-mac alarm
#
 wlan ac-global carrier id other ac id 0
#
 set cpu-usage threshold 80 restore 75
#
acl number 2000  
 rule 5 permit 
#
aaa 
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default 
 domain default_admin 
 local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
 local-user admin service-type http
#
firewall zone Local
 priority 15
#
interface GigabitEthernet0/0/0
 ip address 192.168.2.254 255.255.255.0 
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
 ip address 2.2.2.2 255.255.255.0 
 nat outbound 2000
#
interface NULL0
#
interface Tunnel0/0/1
 description 1.1.1.1
 ip address 10.0.0.2 255.255.255.0 
 tunnel-protocol gre
 source 2.2.2.2
 destination 1.1.1.1
#
ospf 1 router-id 3.3.3.3 
 area 0.0.0.0 
  network 2.2.2.2 0.0.0.0 
#
ip route-static 192.168.1.0 255.255.255.0 Tunnel0/0/1
#
user-interface con 0
 authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return

PC2:

 

实验结果：