ospf实验

实验拓扑图如下

1、R4为ISP，其上只配置IP地址；R4与其他所直连设备间均使用公有IP；
2、R3-R5、R6、R7为MGRE环境，R3为中心站点；
3、整个OSPF环境IP基于172.16.0.0/16划分；除了R12有两个环回，其他路由器均有一个环回IP
4、所有设备均可访问R4的环回；
5、减少LSA的更新量，加快收敛，保障更新安全；
6、全网可达；

第一步，先对ip进行划分，划分地址如下

• ip地址配置完成后，接下来进行公网通
• R3:ip route-static 0.0.0.0 34.0.0.4
• R5ip route-static 0.0.0.0 45.0.0.4
• R6:ip route-static 0.0.0.0 46.0.0.4
• R7:ip route-static 0.0.0.0 47.0.0.4
• 接下来进行私网通，配置ospf协议，
• R1：ospf 1 router-id 1.1.1.1
• R1:aera 1
• R1:network 192.16.33.0  0.0.0.255
• R2：ospf 1 router-id 2.2.2.2
• R2:aera 1
• R2:network 192.16.33.0  0.0.0.255
• R3：ospf 1 router-id 3.3.3.3
• R3:aera 1
• R3:network 192.16.33.0  0.0.0.255
• R3:network 192.16.36.0  0.0.0.255
• R6：ospf 1 router-id 6.6.6.6
• R6:aera 0
• R6:network 192.16.4.0 0.0.0.255
• R6:area 2
• R6:network 172.16.64.0 0.0.31.255
• R11：ospf 1 router-id 11.11.11.11
• R11:aera 2
• R11:network 172.16.64.0 0.0.31.255
• R11:network 172.16.66.0 0.0.0.255
• R12：ospf 1 router-id 12.12.12.12
• R12:aera 2
• R12:network 192.16.65.6 0.0.0.0
• R12:rip 1
• R12:V 2
• R12:undo summary
• R12:network 172.16.0.0
• 此时需要进行重发送
• R12：ospf 1
• R12:import-route rip
• R7:ospf 1 router-id 7.7.7.7
• R7:aera 0
• R7:network 192.16.5.0 0.0.0.255
• R7:area 3
• network 172.16.97.1 0.0.0.0
• R8:ospf 1 router-id 8.8.8.8
• R8:area 3
• R8:network 172.16.96.0 0.0.31.255
• R8:network172.16.98.0 0.0.0.255
• R9:ospf 1 router-id 9.9.9.9
• R9:area 3
• R9:network 172.16.96.0 0.0.31.255
• R9:area 4
• R9:ospf 2 router-id 9.9.9.9
• R9:network 172.16.128.0 0.0.31.255
• R10:ospf 2 router-id 10.10.10.10
• R10:area 4
• R10:network 172.16.128.0 0.0.31.255
• 然后再进行重发布
• R9：ospf 1
• R9:import-route ospf 2
• R9：ospf 2
• R9:import-route ospf 1
• 
• 此时R7路径已全，完成私网通
• 接下来配置MGRE环境
• R3：int tunnel 0/0/0
• R3:ip add 172.16.6.3 24
• R3:tunnel-protocol gre p2mp 
• R3：source 34.0.0.3
• R3:nhrp network-id 100
• R3:nhrp entry multicast dynamic
• R5：int tunnel 0/0/0
• R5:ip add 172.16.6.5 24
• R5:tunnel-protocol gre p2mp 
• R5：source s4/0/0
• R5:nhrp entry 172.16.6.3 34.0.0.3 register
• R5:nhrp network-id 100
• R6：int tunnel 0/0/0
• R6:ip add 172.16.6.6 24
• R6:tunnel-protocol gre p2mp 
• R6：source s4/0/0
• R6:nhrp entry 172.16.6.3 34.0.0.3 register
• R6:nhrp network-id 100
• R7：int tunnel 0/0/0
• R7:ip add 172.16.6.7 24
• R7:tunnel-protocol gre p2mp 
• R7：source g0/0/0
• R7:nhrp entry 172.16.6.3 34.0.0.3 register
• R7:nhrp network-id 100
• 此时nhrp环境构建成功
• 然后再进行全网通配置，传递私网路由
• R3：ospf 1 
• R3:area 0
• R3:network 172.16.6.0 0.0.0.255
• R5：ospf 1 
• R5:area 0
• R5:network 172.16.6.0 0.0.0.255
• R5:network 172.16.3.0 0.0.0.255
• R6：ospf 1 
• R6:area 0
• R6:network 172.16.6.0 0.0.0.255
• R6:network 172.16.4.0 0.0.0.255
• R7：ospf 1 
• R7:area 0
• R7:network 172.16.6.0 0.0.0.255
• 然后再更改接口类型
• R3：int tunnel 0/0/0
• R3：ospf network-type broadcast
• R5：int tunnel 0/0/0
• R5：ospf network-type broadcast
• R6：int tunnel 0/0/0
• R6：ospf network-type broadcast
• R7：int tunnel 0/0/0
• R7：ospf network-type broadcast
• 接下来，由于dr和bdr的选举混乱，需要更改优先级来解决
• R5：int tunnel 0/0/0
• R5:ospf dr-priority 0
• R6：int tunnel 0/0/0
• R6:ospf dr-priority 0
• R7：int tunnel 0/0/0
• R7:ospf dr-priority 0
• MGRE隧道已搭建成功
• 接下来访问R4环回，配easy ip 
• R3：acl 2000
• R3:rule permit source 172.16.0.0 0.0.255.255
• R3:int s 4/0/0
• R3：nat outbound 2000
• R6：acl 2000
• R6:rule permit source 172.16.0.0 0.0.255.255
• R6:int s 4/0/0
• R6：nat outbound 2000
• R7：acl 2000
• R7:rule permit source 172.16.0.0 0.0.255.255
• R7:int g 0/0/0
• R7：nat outbound 2000
• 接下来进行第四个要求，先聚合区域和域外路由
• [R3]ospf 1
  [R3-ospf-1]a 1
  [R3-ospf-1-area-0.0.0.1]abr-summary 172.16.32.0 255.255.224.0
  [R3-ospf-1-area-0.0.0.1]
• [R7]ospf 1
  [R7-ospf-1]a 3
  [R7-ospf-1-area-0.0.0.3]abr-summary 172.16.96.0 255.255.224.0
• [R9]ospf 1
  [R9-ospf-1]asbr-summary 172.16.128.0 255.255.224.0
  [R9-ospf-1]
• [R12]ospf 1
  [R12-ospf-1]asbr-summary 172.16.160.0 255.255.224.0
  [R12-ospf-1]
• 聚合成功
• 汇总后进行防环
• [R3]ip route-static 172.16.32.0 19 null 0
  [R6]ip route-static 172.16.64.0 19 null 0
• [R7]ip route-static 172.16.96.0 19 null 0
• [R12]ip route-static 172.16.160.0 19 null 0
• [R9]ip route-static 192.16.128.0 19 null 0
• 接下来配置特殊区域
• [R1]ospf 1
  [R1-ospf-1]a 1
  [R1-ospf-1-area-0.0.0.1]stub no-summary
• [R2-ospf-1]a 1
  [R2-ospf-1-area-0.0.0.1]stub no-summary
• [R3]ospf 1
  [R3-ospf-1]a 1
  [R3-ospf-1-area-0.0.0.1]stub no-summary
• [R6]ospf 1
  [R6-ospf-1]a 2
  [R6-ospf-1-area-0.0.0.2]nssa no-summary
• [R11]ospf 1
  [R11-ospf-1]a 2
  [R11-ospf-1-area-0.0.0.2]nssa no-summary
• [R12]ospf 1
  [R12-ospf-1]a 2
  [R12-ospf-1-area-0.0.0.2]nssa no-summary
• [R7]ospf 1
  [R7-ospf-1]a 3
  [R7-ospf-1-area-0.0.0.3]nssa no-summary
  [R8]ospf 1
  [R8-ospf-1]a 3
• [R8-ospf-1-area-0.0.0.3]nssa no-summary
• [R9]ospf 1
  [R9-ospf-1]a 3
  [R9-ospf-1-area-0.0.0.3]nssa no-summary
• 
• 已达最精简
• [R9]ospf 2
  [R9-ospf-2]default-route-advertise
• 再下发缺省路由
• 加下来更改收敛
• [R3]int g0/0/0
  [R3-GigabitEthernet0/0/0]ospf timer hello 5
  [R3-GigabitEthernet0/0/0]
• [R2]int g0/0/0
  [R2-GigabitEthernet0/0/0]ospf timer hello 5
  [R2-GigabitEthernet0/0/0]
• [R1]int g0/0/0
  [R1-GigabitEthernet0/0/0]ospf timer hello 5
  [R1-GigabitEthernet0/0/0]
• [R6]int g0/0/0
  [R6-GigabitEthernet0/0/0]ospf timer hello 5
  [R6-GigabitEthernet0/0/0]
• [R11]int g0/0/0
  [R11-GigabitEthernet0/0/0]ospf timer hello 5
  [R11-GigabitEthernet0/0/0]
• [R12]int g0/0/0
  [R12-GigabitEthernet0/0/0]ospf timer hello 5
  [R12-GigabitEthernet0/0/0]
• [R7]int g0/0/0
  [R7-GigabitEthernet0/0/0]ospf timer hello 5
  [R7-GigabitEthernet0/0/0]
• [R8]int g0/0/0
  [R8GigabitEthernet0/0/0]ospf timer hello 5
  [R8-GigabitEthernet0/0/0]
• [R9]int g0/0/0
  [R9-GigabitEthernet0/0/0]ospf timer hello 5
  [R9-GigabitEthernet0/0/0]
• 在做安全配置
• [R12]ospf 1
  [R12-ospf-1]a 2
  [R12-ospf-1-area-0.0.0.2]authentication-mode md5 1 cipher wdy12345
• [R6]ospf 1
  [R6-ospf-1]a 2
  [R6-ospf-1-area-0.0.0.2]authentication-mode md5 1 cipher wdy12345
• 安全配置完成后，实验成功