OSPF + VLAN 综合实验

1、实验要求

1、R1-3为区域0，R3-R4为区域1，R3 的用户设备也在区域0，R1-R2个有一个环回
2、R1-R3为DR设备，没有BDR
3、R4环回地址以固定，其他所有网段使用192.168.1.0 24进行合理分配
4、R4环回不能宣告，全网可达，保障更新安全，避免环路，减少路由条目

2、实验分析

1、子网划分

2、配置环回地址，使用缺省路由对R4，接口不能宣告

3、ospf划分区域，进行手工配置

4、ospf 密文认证

3、子网划分

192.168.1.0/24

首先有俩个区域，划分俩个网段

192.168.1.0/25

192.168.1.128/25:

区域0需要5个网段，一分为三

区域0：192.168.1.0/25

192.168.1.0/28

192.168.1.16/28

192.168.1.32/28

192.168.1.48/28

192.168.1.64/28

192.168.1.80/28

192.168.1.96/28

192.168.1.112/28

注：绿色部分为备用网段

R1环回：192.168.1.0/28

R2环回：192.168.1.16/28

R1-3接口：192.168.1.32/28

VLAN1：192.168.1.48/28

VLAN2：192.168.1.64/28

区域1：192.168.1.128/30

只需要俩个

4、基本配置

SW1

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sys SW2
[SW2]
//创建vlan2 vlan3
[SW2]vlan 2
[SW2-vlan2]q
[SW2]
[SW2]vlan 3
[SW2-vlan3]q
[SW2]
[SW2]int g 0/0/2	
[SW2-GigabitEthernet0/0/2]port link-type access 
[SW2-GigabitEthernet0/0/2]po	
[SW2-GigabitEthernet0/0/2]port d	
[SW2-GigabitEthernet0/0/2]port  default v	
[SW2-GigabitEthernet0/0/2]port  default vlan 2
[SW2-GigabitEthernet0/0/2]
[SW2-GigabitEthernet0/0/2]dis	
[SW2-GigabitEthernet0/0/2]display th	
[SW2-GigabitEthernet0/0/2]display this 
#
interface GigabitEthernet0/0/2
 port link-type access
 port default vlan 2
#
return
[SW2-GigabitEthernet0/0/2]
[SW2-GigabitEthernet0/0/2]q
[SW2]int g 0/0/3
[SW2-GigabitEthernet0/0/3]po	
[SW2-GigabitEthernet0/0/3]port li	
[SW2-GigabitEthernet0/0/3]port link-	
[SW2-GigabitEthernet0/0/3]port link-type ac	
[SW2-GigabitEthernet0/0/3]port link-type access 
[SW2-GigabitEthernet0/0/3]po	
[SW2-GigabitEthernet0/0/3]port de	
[SW2-GigabitEthernet0/0/3]port default v	
[SW2-GigabitEthernet0/0/3]port default vlan 3	
[SW2-GigabitEthernet0/0/3]int g 0/0/1
[SW2-GigabitEthernet0/0/1]po	
[SW2-GigabitEthernet0/0/1]port l	
[SW2-GigabitEthernet0/0/1]port link-	
[SW2-GigabitEthernet0/0/1]port link-flap	
[SW2-GigabitEthernet0/0/1]port link-type t	
[SW2-GigabitEthernet0/0/1]port link-type trunk 
[SW2-GigabitEthernet0/0/1]po	
[SW2-GigabitEthernet0/0/1]port	
[SW2-GigabitEthernet0/0/1]port t	
[SW2-GigabitEthernet0/0/1]port trunk a	
[SW2-GigabitEthernet0/0/1]port trunk allow-pass v	
[SW2-GigabitEthernet0/0/1]port trunk allow-pass vlan all	
[SW2-GigabitEthernet0/0/1]port trunk allow-pass vlan all 
[SW2-GigabitEthernet0/0/1]

R1

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sys R1
[R1]int g 0/0/0
[R1-GigabitEthernet0/0/0]in add	
[R1-GigabitEthernet0/0/0]ip address 192.168.1.33 28
[R1-GigabitEthernet0/0/0]int lo0
[R1-LoopBack0]ip ad	
[R1-LoopBack0]ip address 192.168.1.1 28
[R1-LoopBack0]
//ospf进行宣告
[R1]os	
[R1]ospf 1 r	
[R1]ospf 1 router-id 1.1.1.1
[R1-ospf-1]ar	
[R1-ospf-1]area 0	
[R1-ospf-1-area-0.0.0.0]net	
[R1-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.15
[R1-ospf-1-area-0.0.0.0]ne	
[R1-ospf-1-area-0.0.0.0]network 192.168.1.33 0.0.0.0

R2

[Huawei]sys R2
[R2]int g 0/0/0
[R2-GigabitEthernet0/0/0]ip add	
[R2-GigabitEthernet0/0/0]ip address 192.168.1.34 28
[R2-GigabitEthernet0/0/0]int lo0
[R2-LoopBack0]ip add	
[R2-LoopBack0]ip address 192.168.1.17 28
//宣告
[R2]os	
[R2]ospf 1 r	
[R2]ospf 1 router-id 2.2.2.2
[R2-ospf-1]ae	
[R2-ospf-1]ar	
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]ne	
[R2-ospf-1-area-0.0.0.0]network 12.168.1.16 0.0.0.15
[R2-ospf-1-area-0.0.0.0]ne	
[R2-ospf-1-area-0.0.0.0]network 192.168.1.34 0.0.0.0
//查验
[R2-ospf-1-area-0.0.0.0]dis	
[R2-ospf-1-area-0.0.0.0]display 
Jul 15 2023 18:22:31-08:00 R2 %%01OSPF/4/NBR_CHANGE_E(l)[0]:Neighbor changes eve
nt: neighbor status changed. (ProcessId=256, NeighborAddress=33.1.168.192, Neigh
borEvent=HelloReceived, NeighborPreviousState=Down, NeighborCurrentState=Init) 
[R2-ospf-1-area-0.0.0.0]display 
Jul 15 2023 18:22:31-08:00 R2 %%01OSPF/4/NBR_CHANGE_E(l)[1]:Neighbor changes eve
nt: neighbor status changed. (ProcessId=256, NeighborAddress=33.1.168.192, Neigh
borEvent=2WayReceived, NeighborPreviousState=Init, NeighborCurrentState=2Way) 
[R2-ospf-1-area-0.0.0.0]display 
Jul 15 2023 18:22:31-08:00 R2 %%01OSPF/4/NBR_CHANGE_E(l)[2]:Neighbor changes eve
nt: neighbor status changed. (ProcessId=256, NeighborAddress=33.1.168.192, Neigh
borEvent=AdjOk?, NeighborPreviousState=2Way, NeighborCurrentState=ExStart) 
[R2-ospf-1-area-0.0.0.0]display 
Jul 15 2023 18:22:31-08:00 R2 %%01OSPF/4/NBR_CHANGE_E(l)[3]:Neighbor changes eve
nt: neighbor status changed. (ProcessId=256, NeighborAddress=33.1.168.192, Neigh
borEvent=NegotiationDone, NeighborPreviousState=ExStart, NeighborCurrentState=Ex
change) 
[R2-ospf-1-area-0.0.0.0]display 
Jul 15 2023 18:22:31-08:00 R2 %%01OSPF/4/NBR_CHANGE_E(l)[4]:Neighbor changes eve
nt: neighbor status changed. (ProcessId=256, NeighborAddress=33.1.168.192, Neigh
borEvent=ExchangeDone, NeighborPreviousState=Exchange, NeighborCurrentState=Load
ing) 
[R2-ospf-1-area-0.0.0.0]display 
Jul 15 2023 18:22:31-08:00 R2 %%01OSPF/4/NBR_CHANGE_E(l)[5]:Neighbor changes eve
nt: neighbor status changed. (ProcessId=256, NeighborAddress=33.1.168.192, Neigh
borEvent=LoadingDone, NeighborPreviousState=Loading, NeighborCurrentState=Full) 

[R2-ospf-1-area-0.0.0.0]display th	
[R2-ospf-1-area-0.0.0.0]display this 
[V200R003C00]
#
 area 0.0.0.0 
  network 192.168.1.34 0.0.0.0 
  network 192.168.1.16 0.0.0.15 
#
return
[R2-ospf-1-area-0.0.0.0]

R3

[Huawei]sys R3
[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]ip add	
[R3-GigabitEthernet0/0/0]ip address 192.168.1.35 28
[R3-GigabitEthernet0/0/0]int lo0	
[R3-LoopBack0]int g 0/0/1
[R3-GigabitEthernet0/0/1]ip add	
[R3-GigabitEthernet0/0/1]ip address 192.168.1.129 30
//创建俩个虚拟接口
[R3]int g 0/0/2.1
[R3-GigabitEthernet0/0/2.1]ip add	
[R3-GigabitEthernet0/0/2.1]ip address 192.168.1.49 28
[R3-GigabitEthernet0/0/2.1]do	
[R3-GigabitEthernet0/0/2.1]dot1q t	
[R3-GigabitEthernet0/0/2.1]dot1q termination v	
[R3-GigabitEthernet0/0/2.1]dot1q termination vid 2	
[R3-GigabitEthernet0/0/2.1]arp b	
[R3-GigabitEthernet0/0/2.1]arp broadcast e	
[R3-GigabitEthernet0/0/2.1]arp broadcast enable 
[R3-GigabitEthernet0/0/2.1]int g 0/0/2.2
[R3-GigabitEthernet0/0/2.2]ip add	
[R3-GigabitEthernet0/0/2.2]ip address 192.168.1.65 28
[R3-GigabitEthernet0/0/2.2]do	
[R3-GigabitEthernet0/0/2.2]dot1q t	
[R3-GigabitEthernet0/0/2.2]dot1q termination v	
[R3-GigabitEthernet0/0/2.2]dot1q termination vid 3
[R3-GigabitEthernet0/0/2.2]
[R3-GigabitEthernet0/0/2.2]arp	
[R3-GigabitEthernet0/0/2.2]arp broadcast e	
[R3-GigabitEthernet0/0/2.2]arp broadcast enable 
//宣告 0区域
[R3]os	
[R3]ospf 1	
[R3]ospf 1 r	
[R3]ospf 1 router-id 3.3.3.3
[R3-ospf-1]ar	
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]net	
[R3-ospf-1-area-0.0.0.0]network 192.168.1.35 0.0.0.0
[R3-ospf-1-area-0.0.0.0]net	
[R3-ospf-1-area-0.0.0.0]network 192.168.1.49 0.0.0.0
[R3-ospf-1-area-0.0.0.0]net	
[R3-ospf-1-area-0.0.0.0]network 192.168.1.65 0.0.0.0
[R3-ospf-1-area-0.0.0.0]
//宣告1区域
[R3]os	
[R3]ospf 1 r	
[R3]ospf 1 router-id 3.3.3.3
[R3-ospf-1]ar	
[R3-ospf-1]area 1
[R3-ospf-1-area-0.0.0.1]net	
[R3-ospf-1-area-0.0.0.1]network 192.168.1.129 0.0.0.0
[R3-ospf-1-area-0.0.0.1]

R4

[Huawei]sys R4
[R4]int g 0/0/0
[R4-GigabitEthernet0/0/0]ip add	
[R4-GigabitEthernet0/0/0]ip address 192.168.1.130 30 
[R4-GigabitEthernet0/0/0]int lo0
[R4-LoopBack0]ip add	
[R4-LoopBack0]ip address 4.4.4.1 24
[R4-LoopBack0]q
//宣告
[R4]os	
[R4]ospf 1 r	
[R4]ospf 1 router-id 4.4.4.4
[R4-ospf-1]ar	
[R4-ospf-1]area 1
[R4-ospf-1-area-0.0.0.1]net	
[R4-ospf-1-area-0.0.0.1]network 192.168.1.130 0.0.0.0

PC1 PC2 配置

 

 

5、将R!-R2不参选，R3就成为BDR

R1

[R1]int g 0/0/0
[R1-GigabitEthernet0/0/0]os	
[R1-GigabitEthernet0/0/0]ospf dr	
[R1-GigabitEthernet0/0/0]ospf dr-priority 0

R2

[R2]int g 0/0/0
[R2-GigabitEthernet0/0/0]os	
[R2-GigabitEthernet0/0/0]ospfv3
[R2-GigabitEthernet0/0/0]ospf dr	
[R2-GigabitEthernet0/0/0]ospf dr-priority 0

6、配置缺省路由

R4环回不能宣告，所以配置缺省路由

[R4]os	
[R4]ospf 1
[R4-ospf-1]de	
[R4-ospf-1]default-route-advertise al	
[R4-ospf-1]default-route-advertise always 

测试：使用R1ping 4.4.4.1

7、保证更新安全

其实就是做认证

R3

[R3]int g 0/0/1 
[R3-GigabitEthernet0/0/1]osp	
[R3-GigabitEthernet0/0/1]ospf a	
[R3-GigabitEthernet0/0/1]ospf authentication-mode m	
[R3-GigabitEthernet0/0/1]ospf authentication-mode md5 c	
[R3-GigabitEthernet0/0/1]ospf authentication-mode md5 1	
[R3-GigabitEthernet0/0/1]ospf authentication-mode md5 1 c	
[R3-GigabitEthernet0/0/1]ospf authentication-mode md5 1 cipher 123456
[R3-GigabitEthernet0/0/1]

R4

[R4]int g 0/0/0

[R4-GigabitEthernet0/0/0]ospf authentication-mode md5 1 cipher 123456
Jul 15 2023 19:08:53-08:00 R4 %%01OSPF/3/NBR_CHG_DOWN(l)[0]:Neighbor event:neigh
bor state changed to Down. (ProcessId=256, NeighborAddress=3.3.3.3, NeighborEven
t=InactivityTimer, NeighborPreviousState=Full, NeighborCurrentState=Down) 
[R4-GigabitEthernet0/0/0]ospf authentication-mode md5 1 cipher 123456
Jul 15 2023 19:08:53-08:00 R4 %%01OSPF/3/NBR_DOWN_REASON(l)[1]:Neighbor state le
aves full or changed to Down. (ProcessId=256, NeighborRouterId=3.3.3.3, Neighbor
AreaId=16777216, NeighborInterface=GigabitEthernet0/0/0,NeighborDownImmediate re
ason=Neighbor Down Due to Inactivity, NeighborDownPrimeReason=Hello Not Seen, Ne
ighborChangeTime=2023-07-15 19:08:53-08:00) 

[R4-GigabitEthernet0/0/0]ospf authentication-mode md5 1 cipher 123456

8、减少路由条目

其实就是子网汇总

[R3]osp	
[R3]ospf 1
[R3-ospf-1]ar	
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]abr	
[R3-ospf-1-area-0.0.0.0]abr-summary 192.168.1.0 255.255.255.128
[R3-ospf-1-area-0.0.0.0]

查看

9、避免环路

缺省路由和路由黑洞相撞，必定或出现环路，所以那台路由器上会出现路由黑洞就在那台路由器上写空接口，这个实验是R3上会出现路由黑洞，所以在R3上写空接口

[R3]ip r	
[R3]ip rd-filter
[R3]ip relay
[R3]ip route
[R3]ip route-static 192.168.1.0 n	
[R3]ip route-static 192.168.1.0 25 n	
[R3]ip route-static 192.168.1.0 25 NULL 0
[R3]