要求:
1、按照图示配置IP地址
2、R1,R2,R3 运行 ospF使内网互通,所有接口(公网接口除外)全部宣告进 Area 0﹔要求使用环回口作为Router-id
3、业务网段不允许出现协议报文
4、R4模拟互联网,内网通过R1 连接互联网,在R1上配置默认路由
5、R1上配置 EASY IP,只允许业务网段访问互联网
6、要求业务网段访问互联网流量经过R3,R2,R1
一、配置路由器ip
R1:
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip add 200.1.1.1 24
[R1-GigabitEthernet0/0/0]int g0/0/1
[R1-GigabitEthernet0/0/1]ip add 10.1.1.1 24
[R1-GigabitEthernet0/0/1]int g0/0/2
[R1-GigabitEthernet0/0/2]ip add 10.2.2.1 24
[R1]int L0
[R1-LoopBack0]ip add 1.1.1.1 32
R2
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip add 10.1.1.2 24
[R2-GigabitEthernet0/0/0]int g0/0/1
[R2-GigabitEthernet0/0/1]ip add 10.3.3.2 24
[R2]int L0
[R2-LoopBack0]ip add 2.2.2.2 32
R3
[R3]int g0/0/1
[R3-GigabitEthernet0/0/1]ip add 10.2.2.2 24
[R3-GigabitEthernet0/0/1]int g0/0/0
[R3-GigabitEthernet0/0/0]ip add 10.3.3.3 24
[R3-GigabitEthernet0/0/0]int g0/0/2
[R3-GigabitEthernet0/0/2]ip add 192.168.1.1 24
[R3]int L0
[R3-LoopBack0]ip add 3.3.3.3 24
R4
[R4]int g0/0/0
[R4-GigabitEthernet0/0/0]ip add 200.1.1.2 24
2、在内网路由器上配置ospf协议
[R1]OSPF 1 ROUTER-ID 1.1.1.1
[R1-ospf-1]AREA 0
[R1-ospf-1-area-0.0.0.0]NETWORK 10.1.1.1 0.0.0.0
[R1-ospf-1-area-0.0.0.0]NETWORK 10.2.2.1 0.0.0.0
[R2]OSPF ROUTER-ID 2.2.2.2
[R2-ospf-1]AREA 0
[R2-ospf-1-area-0.0.0.0]NETWORK 10.1.1.2 0.0.0.0
[R2-ospf-1-area-0.0.0.0]NETWORK 10.3.3.2 0.0.0.0
[R3]OSPF 1 ROUTER-ID 3.3.3.3
[R3-ospf-1]AREA 0
[R3-ospf-1-area-0.0.0.0]NETWORK 10.3.3.3 0.0.0.0
[R3-ospf-1-area-0.0.0.0]NETWORK 192.168.1.1 0.0.0.0
[R3-ospf-1-area-0.0.0.0]NETWORK 10.2.2.2 0.0.0.0
3、R1通静态路由
[R1]OSPF 1
[R1-ospf-1]DEFAULT-ROUTE-ADVERTISE ALWAYS
4、取消R3 g0/0/2接口通ospf协议
[R3]OSPF 1
[R3-ospf-1]SILENT-INTERFACE G0/0/2
5、在R1上进行acl协议
[R1]ACL 2000
[R1-acl-basic-2000]RULE PERMIT SOURCE 192.168.1.0 0.0.0.255
[R1-acl-basic-2000]QUIT
[R1]INT G0/0/0
[R1-GigabitEthernet0/0/0]NAT OUTBOUND 2000
[R1-GigabitEthernet0/0/0]QUIT
6、修改优先级,使流量经过R3、R2、R1
[R1]INT G0/0/2
[R1-GigabitEthernet0/0/2]OSPF COST 1000
[R3]INT G0/0/1
[R3-GigabitEthernet0/0/1]OSPF COST 1000