1、需求
1、R1-3为区域0,R3到R4为区域1,其中R3的环回也在区域0
2、R1,2也有环回,R1-3 R3为DR设备,没有BDR
3、R4环回地址已固定,其他所有网段使用192.168.1.0/24进行合理分配
4、R4环回不能宣告,全网可达,保障更新安全,避免环路,减少路由条目数量
2、拓扑
3、分析
1、划分ip地址
2、配置ospf
3、验证
4、配置
1、划分ip
2、配置环回以及接口ip
R1:
[r1]int lo0
[r1-LoopBack0]ip add 192.168.1.129 27
[r1-LoopBack0]q
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip add 192.168.1.209 29
R2:
[r2]int lo0
[r2-LoopBack0]ip add 192.168.1.193 27
[r2-LoopBack0]q
[r2]int g0/0/0
[r2-GigabitEthernet0/0/0]ip add 192.168.1.210 29
R3:
[r3]int lo0
[r3-LoopBack0]ip add 192.168.1.161 27
[r3-LoopBack0]q
[r3]int g0/0/0
[r3-GigabitEthernet0/0/0]ip add 192.168.1.211 29
[r3-GigabitEthernet0/0/0]int g0/0/1
[r3-GigabitEthernet0/0/1]ip add 192.168.1.1 25
R4:
[r4]int lo0
[r4-LoopBack0]ip add 4.4.4.4 24
[r4-LoopBack0]q
[r4]int g0/0/0
[r4-GigabitEthernet0/0/0]ip add 192.168.1.2 25
3、ospf配置以及缺省路由和优先级设置
R1:
[r1]ospf 1 router-id 1.1.1.1
[r1-ospf-1]area 0
[r1-ospf-1-area-0.0.0.0]network 192.168.1.129 0.0.0.0
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ospf dr-priority 0
R2:
[r2]ospf 1
[r2]ospf 1 router-id 2.2.2.2
[r2-ospf-1]area 0
[r2-ospf-1-area-0.0.0.0]network 192.168.1.193 0.0.0.0
[r2-ospf-1-area-0.0.0.0]network 192.168.1.210 0.0.0.0
[r2]int g0/0/0
[r2-GigabitEthernet0/0/0]ospf dr-priority 0
R3:
[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1]area 0
[r3-ospf-1-area-0.0.0.0]network 192.168.1.161 0.0.0.0
[r3-ospf-1-area-0.0.0.0]network 192.168.1.211 0.0.0.0
[r3]ospf 1
[r3-ospf-1]area 1
[r3-ospf-1-area-0.0.0.1]network 192.168.1.1 0.0.0.0
[r3]int g0/0/0
[r3-GigabitEthernet0/0/0]ospf dr
[r3-GigabitEthernet0/0/0]ospf dr-priority 255
R4:
[r4]ospf 1 router-id 4.4.4.4
[r4-ospf-1]area 1
[r4-ospf-1-area-0.0.0.1]network 192.168.1.2 0.0.0.255
[r4-ospf-1-area-0.0.0.1]network 192.168.1.2 0.0.0.0
[r4]int g 0/0/0
[r4-ospf-1]default-route-advertise always
4、加密
R1:
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ospf authentication-mode md5 1 cipher 123456
R2:
[r2]int g0/0/0
[r2-GigabitEthernet0/0/0]ospf authentication-mode md5 1 cipher 123456
R3:
[r3]int g0/0/0
[r3-GigabitEthernet0/0/0]ospf authentication-mode md5 1 cipher 123456
[r3-GigabitEthernet0/0/0]int g0/0/1
[r3-GigabitEthernet0/0/1]ospf authentication-mode md5 1 cipher 123456
R4:
[r4]int g 0/0/0
[r4-ospf-1]ospf authentication-mode md5 1 cipher 123456
5、验证
验证全网通