一、实验需求
R1-3为区域0,R3-R4为区域1;其中R3的用户的设备也在区域0,R1-R2各有一个环回
R1-R3 R3为DR设备,没有BDR
R4环回地址以固定,其他所有网段使用192.168.1.0/24进行合理的分配
R4环回不能宣告,全网可达,保障更新安全,避免环路,减少路由条目
二、实验步骤
1.二层-交换配置
1.创建VLAN
[sw2]vlan 2
[sw2-vlan2]q
[sw2]vlan 3
[sw2-vlan3]q
2.配置链路
[sw2]interface GigabitEthernet 0/0/2
[sw2-GigabitEthernet0/0/2]port link-type access
[sw2-GigabitEthernet0/0/2]port default vlan 2
[sw2]int GigabitEthernet 0/0/3
[sw2-GigabitEthernet0/0/3]port link-type access
[sw2-GigabitEthernet0/0/3]port default vlan 3
[sw2]interface GigabitEthernet 0/0/1
[sw2-GigabitEthernet0/0/1]port link-type trunk
[sw2-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[sw2-GigabitEthernet0/0/1]display this
2.配置IP
R1的环回: 192.168.1.0/28
R2的环回: 192.168.1.16/28
R1,2,3的0/0/0 接口: 192.168.1.32/28
R3-4:1区域: 192.168.1.128/30
VLAN2: 192.168.1.48/28
VLAN3 :192.168.1.64/28
0区域: 192.168.1.9/25
1区域: 192.168.1.128/25
192.168.1.0/25
192.168.00000001. 0000 0000 192.168.1.0/28
192.168.00000001.0001 0000 192.168.1.0/28
192.168.00000001.0010 0000 192.168.1.32/28
192.168.00000001.0011 0000 192.168.1.32/28
192.168.00000001.0100 0000 192.168.1.64/28
R4固定环回: 4.4.4.0 24
配置接口:
[r3]int GigabitEthernet 0/0/0
[r3-GigabitEthernet0/0/0]ip address 192.168.1.35 28
[r3]interface GigabitEthernet 0/0/2.1
[r3-GigabitEthernet0/0/2.1]dot1q termination vid 2
[r3-GigabitEthernet0/0/2.1]arp broadcast enable
[r3-GigabitEthernet0/0/2.1]q
[r3-GigabitEthernet0/0/2.2]ip address 192.168.1.65 28
[r3-GigabitEthernet0/0/2.2]dot1q termination vid 3
[r3-GigabitEthernet0/0/2.2]arp broadcast enable
[r3]int G 0/0/1
[r3-GigabitEthernet0/0/1]ip address 192.168.1.129 30
同理对r1,r2,r4进行配置
3.配置OSPF
配置r1:
[r1]ospf 1 router-id 1.1.1.1
[r1-ospf-1]area 0
[r1-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.15
[r1-ospf-1-area-0.0.0.0]network 192.168.1.33 0.0.0.0
配置r2:
[r2]ospf 1 router-id 2.2.2.2
[r2-ospf-1]area 0
[r2-ospf-1-area-0.0.0.0]network 192.168.1.16 0.0.0.15
[r2-ospf-1-area-0.0.0.0]network 192.168.1.34 0.0.0.0
配置r3:
[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1]area 0
[r3-ospf-1-area-0.0.0.0]network 192.168.1.35 0.0.0.0
[r3-ospf-1-area-0.0.0.0]network 192.168.1.49 0.0.0.0
[r3-ospf-1-area-0.0.0.0]network 192.168.1.65 0.0.0.0
[r3-ospf-1]area 1
[r3-ospf-1-area-0.0.0.1]network 192.168.1.129 0.0.0.0
配置r4:
[r4]ospf 1 router-id 4.4.4.4
[r4-ospf-1]area 1[
r4-ospf-1-area-0.0.0.1]network 192.168.1.130 0.0.0.0
4.进入PC端查看
5.拓展配置
1.修改接口(让R3成为DR)
[r1-GigabitEthernet0/0/0]ospf dr-priority 0
[r2-GigabitEthernet0/0/0]ospf dr-priority 0
2.缺省(让R4环回不能宣告)
[r4-ospf-1]default-route-advertise always
3.接口认证
[r3-GigabitEthernet0/0/1]ospf authentication-mode md5 1 cipher 123456
[r4-GigabitEthernet0/0/0]ospf authentication-mode md5 1 cipher 123456
4.手工汇总
[r3-ospf-1-area-0.0.0.0]abr-summary 192.168.1.0 255.255.255.128
5.避免成环
[r3]ip route-static 192.168.1.0 25 NULL 0
测试: