OSPF 综合实验

于 2025-04-23 15:43:51 发布
阅读量716 收藏 9
点赞数 9
文章标签： 网络 智能路由器
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/aaa__wsk/article/details/147446018
版权

 1,R5为ISP，其上只能配置IP地址； 
R5与其他所有直连设备间均使用公有IP；环回地址为100.1.1.1/32
2,R4设备为企业出口路由器
3，整个oSPF环境IP基于172.16.0.0/16划分； 
4，所有设备均可访问R5的环回: 
5，减少LSA的更新量，加快收敛，保障更新安全: 
6，全网可达

 

二 实验需求

1子网划分与OSPF配置

       基于IP地址划分OSPF邻居ID：

       根据IP地址172.16.0.8/16划分OSPF区域，确保每个邻居ID唯一。

        配置OSPF路由协议，并在每个路由器上配置相应的网络命令。

  2配置R5作为ISP

  3网络优化

    减少LSA数量：

      通过合理规划OSPF区域，使用区域划分来减少LSA的数量。

      使用路由汇总来减少LSA的数量。

    加快收敛：

     配置OSPF的快速收敛特性，如调整Hello和Dead间隔。

     确保网络中无环路，避免不必要的路由更新。

    保障更新安全：

      使用OSPF的认证功能，如明文认证或MD5认证，来保障路由更新安全。

 4配置NAT保证私网能正常访问公网

5确保全网可达

    测试连通性：

      使用Ping命令测试网络中每个设备之间的连通性。

      确认所有设备均能访问R5的环回接口。

子网划分与OSPF配置

三 配置 

子网划分

172.16.0.0/16

172.16.0.0/19 ----area0

  172.16.0.0/24----骨干

  172.16.0.0/30----R3-R4

  172.16.0.4/30----R4-R6

  172.16.0.8/30----R4-R7

  45.0.0.0/30----R4-R5

  100.1.1.0/24----R5环回

172.16.32.0/19----area1

  172.16.32.0/24----R1

  172.16.33.0/24----R2

  172.16.34.0/24----R3

  172.16.35.0/24----骨干

    172.16.35.0/29

  172.16.64.0/19----area2

  172.16.64.0/24----R6环回

  172.16.66.0/30----R6-R11

  172.16.65.0/24----R11环回

  172.16.66.4/30----R11-R12

172.16.96.0/19----area3

  172.16.96.0/24----R7环回

  172.16.98.0/30----R7-R8

  172.16.97.0/24----R8环回

  172.16.98.4/30----R8-R9

172.16.128.0/19----area4

  172.16.128.0/24----R9环回

  172.16.130.0/30----R9-R10

  172.16.129.0/24----R10环回

rip

10.1.1.0/24

10.1.2.0/24

 配置IP并进行ospf宣告

r1

[r1]int g 0/0/0
[r1-GigabitEthernet0/0/0]ip add 172.16.35.1.29
                                ^
Error: Wrong parameter found at '^' position.
[r1-GigabitEthernet0/0/0]ip add               	
[r1-GigabitEthernet0/0/0]ip address  172.16.35.1 29
Apr 23 2025 12:38:40-08:00 r1 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r1-GigabitEthernet0/0/0]int l 0
[r1-LoopBack0]ip add	
[r1-LoopBack0]ip address 172.16.32.1 24
[r1-LoopBack0]ospf net	
[r1-LoopBack0]ospf network-type b	
[r1-LoopBack0]ospf network-type broadcast 
[r1-LoopBack0]

r2

[r2]int g0/0/0
[r2-GigabitEthernet0/0/0]ip add	
[r2-GigabitEthernet0/0/0]ip address 172.16.35.2 29
Apr 23 2025 12:42:16-08:00 r2 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r2-GigabitEthernet0/0/0]int l 0
[r2-LoopBack0]ip add	
[r2-LoopBack0]ip address 172.16.33.1 24
[r2-LoopBack0]ospf n	
[r2-LoopBack0]ospf network-type b	
[r2-LoopBack0]ospf network-type broadcast

r3

[r3]int g 0/0/0
[r3-GigabitEthernet0/0/0]ip add	
[r3-GigabitEthernet0/0/0]ip address 172.16.35.3 29
[r3-GigabitEthernet0/0/0]
Apr 23 2025 12:46:34-08:00 r3 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r3-GigabitEthernet0/0/0]int g 0/0/1
[r3-GigabitEthernet0/0/1]ip add	
[r3-GigabitEthernet0/0/1]ip address 172.16.0.1 30
Apr 23 2025 12:47:03-08:00 r3 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP 
on the interface GigabitEthernet0/0/1 has entered the UP state. 
[r3-GigabitEthernet0/0/1]int l 0
[r3-LoopBack0]ip add	
[r3-LoopBack0]ip address 172.16.34.1 24
[r3-LoopBack0]ospf n	
[r3-LoopBack0]ospf network-type b	
[r3-LoopBack0]ospf network-type broadcast

r4

[r4]int g 0/0/0
[r4-GigabitEthernet0/0/0]ip add	
[r4-GigabitEthernet0/0/0]ip address 172.16.0.9 30
Apr 23 2025 12:48:50-08:00 r4 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r4-GigabitEthernet0/0/0]int g 0/0/1
[r4-GigabitEthernet0/0/1]ip add	
[r4-GigabitEthernet0/0/1]ip address 172.16.0.2 30
Apr 23 2025 12:49:16-08:00 r4 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP 
on the interface GigabitEthernet0/0/1 has entered the UP state. 
[r4-GigabitEthernet0/0/1]int g 0/0/2
[r4-GigabitEthernet0/0/2]ip add	
[r4-GigabitEthernet0/0/2]ip address 172.16.0.5 30
[r4-GigabitEthernet0/0/2]
Apr 23 2025 12:49:58-08:00 r4 %%01IFNET/4/LINK_STATE(l)[2]:The line protocol IP 
on the interface GigabitEthernet0/0/2 has entered the UP state. 
[r4-GigabitEthernet0/0/2]int s 4/0/1
[r4-Serial4/0/1]ip add	
[r4-Serial4/0/1]ip address 45.0.0.1 30

ISP

[ISP]int s 4/0/0
[ISP-Serial4/0/0]ip add 45.0.0.2 30
[ISP-Serial4/0/0]
Apr 23 2025 12:53:54-08:00 ISP %%01IFNET/4/LINK_STATE(l)[0]:The line protocol PP
P IPCP on the interface Serial4/0/0 has entered the UP state. 
[ISP-Serial4/0/0]int l 0
[ISP-LoopBack0]ip add 100.1.1.1 32

r6

r6]int g 0/0/0
[r6-GigabitEthernet0/0/0]ip add 172.16.66.1 30
[r6-GigabitEthernet0/0/0]
Apr 23 2025 12:57:02-08:00 r6 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r6-GigabitEthernet0/0/0]int g 0/0/1
[r6-GigabitEthernet0/0/1]ip add 172.16.0.6 30
Apr 23 2025 12:57:30-08:00 r6 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP 
on the interface GigabitEthernet0/0/1 has entered the UP state. 
[r6-GigabitEthernet0/0/1]int l 0
[r6-LoopBack0]ip add 172.16.64.1 24
[r6-LoopBack0]ospf n	
[r6-LoopBack0]ospf network-type b	
[r6-LoopBack0]ospf network-type broadcast

r7

[r7]int g 0/0/0
[r7-GigabitEthernet0/0/0]ip add 172.16.0.10 30
Apr 23 2025 12:59:08-08:00 r7 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r7-GigabitEthernet0/0/0]int g 0/0/1
[r7-GigabitEthernet0/0/1]ip add 172.16.98.1 30
Apr 23 2025 12:59:27-08:00 r7 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP 
on the interface GigabitEthernet0/0/1 has entered the UP state. 
[r7-GigabitEthernet0/0/1]int l 0
[r7-LoopBack0]ip add 172.16.96.1 24	
[r7-LoopBack0]ospf n	
[r7-LoopBack0]ospf network-type  b	
[r7-LoopBack0]ospf network-type  broadcast

r8

[r8]int g 0/0/0
[r8-GigabitEthernet0/0/0]ip ad	
[r8-GigabitEthernet0/0/0]ip address 172.16.98.2 30
Apr 23 2025 13:46:33-08:00 r8 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r8-GigabitEthernet0/0/0]int g 0/0/1
[r8-GigabitEthernet0/0/1]ip ad 172.16.98.5 30
Apr 23 2025 13:47:03-08:00 r8 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP 
on the interface GigabitEthernet0/0/1 has entered the UP state. 
[r8-GigabitEthernet0/0/1]int l 0
[r8-LoopBack0]ip ad 172.16.97.1 24

r9

[r9]int g 0/0/0
[r9-GigabitEthernet0/0/0]ip add 172.16.98.6 30
Apr 23 2025 13:49:23-08:00 r9 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r9-GigabitEthernet0/0/0]int g 0/0/1
[r9-GigabitEthernet0/0/1]ip add 172.16.130.1 30
Apr 23 2025 13:49:50-08:00 r9 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP 
on the interface GigabitEthernet0/0/1 has entered the UP state. 
[r9-GigabitEthernet0/0/1]int l 0
[r9-LoopBack0]ip add 172.16.128.1 24
[r9-LoopBack0]ospf n	
[r9-LoopBack0]ospf network-type b	
[r9-LoopBack0]ospf network-type broadcast

r10

[r10]int g 0/0/0
[r10-GigabitEthernet0/0/0]ip add 172.16.130.2 30
Apr 23 2025 13:51:24-08:00 r10 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
 on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r10-GigabitEthernet0/0/0]int l 0
[r10-LoopBack0]ip add 172.16.129.1 24
[r10-LoopBack0]ospf n	
[r10-LoopBack0]ospf network-type  b
[r10-LoopBack0]ospf network-type b	
[r10-LoopBack0]ospf network-type broadcas

r11

[r11]int g 0/0/0
[r11-GigabitEthernet0/0/0]ip add 172.16.66.2 30
[r11-GigabitEthernet0/0/0]
Apr 23 2025 13:53:06-08:00 r11 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
 on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r11-GigabitEthernet0/0/0]int g 0/0/1
[r11-GigabitEthernet0/0/1]ip add 172.16.66.5 30
Apr 23 2025 13:53:34-08:00 r11 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP
 on the interface GigabitEthernet0/0/1 has entered the UP state. 
[r11-GigabitEthernet0/0/1]int l 0
[r11-LoopBack0]ip add 172.16.65.1 24
[r11-LoopBack0]ospf n	
[r11-LoopBack0]ospf network-type b	
[r11-LoopBack0]ospf network-type broadcast

r12 

[r12]int g 0/0/0
[r12-GigabitEthernet0/0/0]ip add 172.16.66.6 30
Apr 23 2025 13:55:26-08:00 r12 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
 on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r12-GigabitEthernet0/0/0]int l 0
[r12-LoopBack0]ip add 10.1.1.1 24
[r12-LoopBack0]int l 1
[r12-LoopBack1]ip add 10.1.2.1 24

OSPF配置

由于area 4 是远离骨干的特殊区域所以不能直接进行宣告，且由于area 3需要进行优化，所以让R9成为ASBR设备进行双向重发布

r1

r1]ospf 1 router-id 1.1.1.1
[r1-ospf-1]a 1
[r1-ospf-1-area-0.0.0.1]net	
[r1-ospf-1-area-0.0.0.1]network 172.16.32.1 0.0.0.0
[r1-ospf-1-area-0.0.0.1]network 172.16.35.1 0.0.0.0

r2

[r2]ospf 1 router-id 2.2.2.2
[r2-ospf-1]a 1
[r2-ospf-1-area-0.0.0.1]net	
[r2-ospf-1-area-0.0.0.1]network 172.16.33.1 0.0.0.0
[r2-ospf-1-area-0.0.0.1]network 172.16.35.2 0.0.0.0

r3

[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1]a 1
[r3-ospf-1-area-0.0.0.1]net	
[r3-ospf-1-area-0.0.0.1]network 172.16.35.3 0.0.0.0
r3-ospf-1-area-0.0.0.1]network 172.16.34.1 0.0.0.0
[r3-ospf-1]a 0
[r3-ospf-1-area-0.0.0.0]network 172.16.0.1 0.0.0.0

r4

[r4]ospf 1 router-id 4.4.4.4
[r4-ospf-1]a 0
[r4-ospf-1-area-0.0.0.0]net	
[r4-ospf-1-area-0.0.0.0]network 172.16.0.2 0.0.0.0
[r4-ospf-1-area-0.0.0.0]network 172.16.0.5 0.0.0.0
[r4-ospf-1-area-0.0.0.0]network 172.16.0.9 0.0.0.0

r6

[r6]ospf 1 router-id 6.6.6.6
[r6-ospf-1]a 0
[r6-ospf-1-area-0.0.0.0]net	
[r6-ospf-1-area-0.0.0.0]network 172.16.0.6 0.0.0.0
[r6-ospf-1] a 2
[r6-ospf-1-area-0.0.0.2]net	
[r6-ospf-1-area-0.0.0.2]network 172.16.66.1 0.0.0.0
[r6-ospf-1-area-0.0.0.2]network 172.16.64.1 0.0.0.0

r7

[r7]ospf 1 router-id 7.7.7.7
[r7-ospf-1]a 0
[r7-ospf-1-area-0.0.0.0]net	
[r7-ospf-1-area-0.0.0.0]network 172.16.0.10 0.0.0.0
[r7-ospf-1-area-0.0.0.0]q
[r7-ospf-1]a 3
[r7-ospf-1-area-0.0.0.3]network 172.16.96.1 0.0.0.0
[r7-ospf-1-area-0.0.0.3]network 172.16.98.1 0.0.0.0

r8

[r8]ospf 1 router-id 8.8.8.8
[r8-ospf-1]a 3
[r8-ospf-1-area-0.0.0.3]net	
[r8-ospf-1-area-0.0.0.3]network 172.16.98.2 0.0.0.0
[r8-ospf-1-area-0.0.0.3]network 172.16.97.1 0.0.0.0
[r8-ospf-1-area-0.0.0.3]network 172.16.98.5 0.0.0.0

r9

[r9]ospf 1 r	
[r9]ospf 1 router-id 9.9.9.9
[r9-ospf-1]a 3
[r9-ospf-1-area-0.0.0.3]net	
[r9-ospf-1-area-0.0.0.3]network 172.16.98.6 0.0.0.0
r9]ospf 2 r	
[r9]ospf 2 router-id 9.9.9.9
[r9-ospf-2]a 4
[r9-ospf-2-area-0.0.0.4]net	
[r9-ospf-2-area-0.0.0.4]network 172.16.128.1 0.0.0.0
[r9-ospf-2-area-0.0.0.4]network 172.16.130.1 0.0.0.0

r10

[r10]ospf 1 router-id 10.10.10.10
[r10-ospf-1]a 4
[r10-ospf-1-area-0.0.0.4]net	
[r10-ospf-1-area-0.0.0.4]network 172.16.129.1 0.0.0.0
[r10-ospf-1-area-0.0.0.4]network 172.16.130.2 0.0.0.0

r11

r11]ospf 1 router-id 11.11.11.11
[r11-ospf-1]a 2
[r11-ospf-1-area-0.0.0.2]net	
[r11-ospf-1-area-0.0.0.2]network 172.16.65.1 0.0.0.0
[r11-ospf-1-area-0.0.0.2]network 172.16.66.5 0.0.0.0
[r11-ospf-1-area-0.0.0.2]network 172.16.66.2 0.0.0.0

r12 

[r12]ospf 1 router-id 12.12.12.12
[r12-ospf-1]a 2
[r12-ospf-1-area-0.0.0.2]net	
[r12-ospf-1-area-0.0.0.2]network 172.16.66.6 0.0.0.0
[r12]rip 1
[r12-rip-1]ver 2
[r12-rip-1]net	
[r12-rip-1]network 10.0.0.0

进行双向重发布

 

[r9]ospf 1
[r9-ospf-1]imp	
[r9-ospf-1]import-route  ospf 2
[r9-ospf-1]q
[r9]ospf 2
[r9-ospf-2]imp	
[r9-ospf-2]import-route ospf 1

 

[r12]ospf 1
[r12-ospf-1]imp	
[r12-ospf-1]import-route rip 1

路由汇总

 

[r3]ospf 1
[r3-ospf-1]a 1
[r3-ospf-1-area-0.0.0.1]abr-su	
[r3-ospf-1-area-0.0.0.1]abr-summary 172.16.32.0 255.255.224.0


[r6]ospf 1
[r6-ospf-1]a 2
[r6-ospf-1-area-0.0.0.2]abr	
[r6-ospf-1-area-0.0.0.2]abr-summary 172.16.64.0 255.255.224.0


[r7]ospf 1
[r7-ospf-1]a 3
[r7-ospf-1-area-0.0.0.3]abr	
[r7-ospf-1-area-0.0.0.3]abr-summary 172.16.96.0 255.255.224.0


[r9]ospf 1
[r9-ospf-1]asb	
[r9-ospf-1]asbr-summary 172.16.128.0 255.255.224.0

[r12]ospf 1
[r12-ospf-1]asb	
[r12-ospf-1]asbr-summary 10.1.0.0 255.255.252.0

特殊区域

[r1]ospf 1
[r1-ospf-1]a 1
[r1-ospf-1-area-0.0.0.1]stub

[r2]ospf 1
[r2-ospf-1]a 1
[r2-ospf-1-area-0.0.0.1]stub

[r3-ospf-1]a 1
[r3-ospf-1-area-0.0.0.1]stub no-s	
[r3-ospf-1-area-0.0.0.1]stub no-summary


[r6-ospf-1]a 2
[r6-ospf-1-area-0.0.0.2]nssa no-	
[r6-ospf-1-area-0.0.0.2]nssa no-summary


[r7]ospf 1
[r7-ospf-1]a 3
[r7-ospf-1-area-0.0.0.3]nssa no-s	
[r7-ospf-1-area-0.0.0.3]nssa no-summary 

[r8]ospf 1
[r8-ospf-1]a 3
[r8-ospf-1-area-0.0.0.3]nssa


[r9]ospf 1
[r9-ospf-1]a 3
[r9-ospf-1-area-0.0.0.3]nssa
r9-ospf-1]ospf 2
[r9-ospf-2]de	
[r9-ospf-2]default-	
[r9-ospf-2]default-route-advertise




[r11]ospf 1
[r11-ospf-1]a 2
[r11-ospf-1-area-0.0.0.2]nssa

[r12]ospf 1
[r12-ospf-1]a 2
[r12-ospf-1-area-0.0.0.2]nssa

在r4下方缺省路由

r4]ospf 1
[r4-ospf-1]def	
[r4-ospf-1]default-	
[r4-ospf-1]default-route-advertise

修改接口类型

[r3]int g 0/0/1
[r3-GigabitEthernet0/0/1]ospf n	
[r3-GigabitEthernet0/0/1]ospf network-type p2p
[r3-GigabitEthernet0/0/1]int g 0/0/0
[r3-GigabitEthernet0/0/0]ospf n	
[r3-GigabitEthernet0/0/0]ospf network-type p2mp

[r4]int g 0/0/1
[r4-GigabitEthernet0/0/1]ospf n	
[r4-GigabitEthernet0/0/1]ospf network-type p2p

[r1]int g 0/0/0
[r1-GigabitEthernet0/0/0]ospf n	
[r1-GigabitEthernet0/0/0]ospf network-type p2mp

[r2]int g 0/0/0
[r2-GigabitEthernet0/0/0]ospf n	
[r2-GigabitEthernet0/0/0]ospf network-type p2mp

修改hello时间 

[r1-GigabitEthernet0/0/0]ospf timer hello 5

[r2-GigabitEthernet0/0/0]ospf timer hello 5

[r3-GigabitEthernet0/0/0]ospf timer hello 5

ospf认证

 

[r3]ospf 1
[r3-ospf-1]a 0
[r3-ospf-1-area-0.0.0.0]au	
[r3-ospf-1-area-0.0.0.0]authentication-mode md5 1 c	
[r3-ospf-1-area-0.0.0.0]authentication-mode md5 1 cipher 123456

[r4]ospf 1
[r4-ospf-1]a 0
[r4-ospf-1-area-0.0.0.0]au	
[r4-ospf-1-area-0.0.0.0]authentication-mode md5 1 c	
[r4-ospf-1-area-0.0.0.0]authentication-mode md5 1 cipher 123456

[r6]ospf 1
[r6-ospf-1]a 0
[r6-ospf-1-area-0.0.0.0]au	
[r6-ospf-1-area-0.0.0.0]authentication-mode md5 1 c	
[r6-ospf-1-area-0.0.0.0]authentication-mode md5 1 cipher 123456

[r7]ospf 1
[r7-ospf-1]a 0
[r7-ospf-1-area-0.0.0.0]au	
[r7-ospf-1-area-0.0.0.0]authentication-mode md5 1 c	
[r7-ospf-1-area-0.0.0.0]authentication-mode md5 1 cipher 123456

 配置nat

[r4-ospf-1]acl 2000
[r4-acl-basic-2000]rule permit s	
[r4-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[r4-acl-basic-2000]q
[r4]int s 4/0/1
[r4-Serial4/0/1]nat ou	
[r4-Serial4/0/1]nat outbound 2000

检测连通性

 

 

aaa__wsk
关注
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值