OSPF综合实验

[r3]ip route-static 0.0.0.0 0 172.16.32.3
[r3]acl 2000	
[r3-acl-basic-2000]rule permit source 172.16.32.0 0.0.31.255
[r3-acl-basic-2000]int s 4/0/0
[r3-Serial4/0/0]nat outbound 2000

R3,R5/6/7为MGRE环境,R3为中心站点

[r3]int t 0/0/0
[r3-Tunnel0/0/0]ip ad 172.16.24.1 21
[r3-Tunnel0/0/0]tunnel-protocol gre p2mp
[r3-Tunnel0/0/0]source 34.0.0.1
[r3-Tunnel0/0/0]nhrp network-id 100
[r3-Tunnel0/0/0]nhrp entry b d

[r5]int t 0/0/0
[r5-Tunnel0/0/0]ip ad 172.16.24.2 21
[r5-Tunnel0/0/0]tunnel-protocol gre p2mp
[r5-Tunnel0/0/0]source s 4/0/0
[r5-Tunnel0/0/0]nhrp entry 172.16.24.1 34.0.0.1 register 
 
[r6]int t 0/0/0
[r6-Tunnel0/0/0]ip ad 172.16.24.3 21
[r6-Tunnel0/0/0]tunnel-protocol gre p2mp
[r6-Tunnel0/0/0]source s 4/0/0
[r6-Tunnel0/0/0]nhrp entry 172.16.24.1 34.0.0.1 register 
 
[r7]int t 0/0/0
[r7-Tunnel0/0/0]ip ad 172.16.24.4 21
[r7-Tunnel0/0/0]tunnel-protocol gre p2mp
[r7-Tunnel0/0/0]source s 4/0/0
[r7-Tunnel0/0/0]nhrp entry 172.16.24.1 34.0.0.1 register 

OSPF基于172.16.0.0/16划分

[r1]ospf 1r	
[r1]ospf 1 r	
[r1]ospf 1 router-id 1.1.1.1
[r1-ospf-1]a 1
[r1-ospf-1-area-0.0.0.1]net 172.16.32.0 0.0.31.255
 
 
[r2]ospf 1 r	
[r2]ospf 1 router-id 2.2.2.2
[r2-ospf-1]a 1
[r2-ospf-1-area-0.0.0.1]net	
[r2-ospf-1-area-0.0.0.1]network 172.16.32.0 0.0.31.255
 
[r3]ospf
[r3-ospf-1]a 0
[r3-ospf-1-area-0.0.0.0]net 172.16.24.0 0.0.7.255
	
[r4]ospf 1 router-id 4.4.4.4
[r4-ospf-1]a 0
[r4-ospf-1-area-0.0.0.0]net	
[r4-ospf-1-area-0.0.0.0]network 4.4.4.4 0.0.0.0
[r4-ospf-1-area-0.0.0.0]net 47.0.0.2 0.0.0.0
[r4-ospf-1-area-0.0.0.0]network 4.4.4.4 0.0.0.255
 
R5-R12配置均相似

[r3]int t 0/0/0
[r3-Tunnel0/0/0]ospf network-type P2MP
 
[r3]ospf 1
[r3-ospf-1]a 0
[r3-ospf-1-area-0.0.0.0]ospf timer hello 5

减少LSA的更新量

区域1配置（完全末梢区域）
[r1-ospf-1-area-0.0.0.1]stub
[r2-ospf-1-area-0.0.0.1]stub
 
[r3-ospf-1-area-0.0.0.1]abr-summary 172.16.32.0 255.255.224.0
[r3-ospf-1-area-0.0.0.1]stub no-summary
[r3]ip route-static 172.16.32.0 19 NULL 0
 
 
区域2
[r6]ospf
[r6-ospf-1]a 2
[r6-ospf-1-area-0.0.0.2]nssa no-summary
 
 
[r11-ospf-1-area-0.0.0.2]nssa
[r12-ospf-1-area-0.0.0.2]nssa
 
 
区域3也是NSSA区域，配置同上
 
 
区域4
[r9-ospf-1]import ospf 1
[r9-ospf-2]default-route-advertise

1.修改hello包时间，见上

2.修改接口类型，让其无需进行DR/BDR选举

3.保障更新安全（区域认证或者接口认证，这里展示区域认证）

[r3-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher 123456

[r1]ospf 1
[r1]ospf 100
[r1-ospf-100] silent-interface l 0