实验要求
实验要求
1、R4为ISP，其上只能配置IP地址；R4与其他所有直连设备间均使用公有IP。
2、R3、R5、R6、R7为MGRE环境，R3为中心站点。
3、整个OSPF环境IP地址基于172.16.0.0/16划分。
4、减少LSA的更新量，加快收敛，保证更新安全。
5、全网可达。
拓扑搭建
实验内容及步骤
1、各区域IP地址的划分
将172.16.0.0/16的网段进行子网划分，将该网段划分为8个网段，取其中6个作为我们实验所使用的IP地址，剩下的2个IP地址作为我们的备份网段，方便以后该网络拓扑结构发生变化，需要增加设备，来所留的备用网段。每个网段在进行子网划分，分为P2P网络需要所使用的IP地址，和MA网络所使用的IP地址，及环回地址所使用的IP地址。各个区域IP地址的划分结果如下：
172.16.0.0/19 --- AREA0
172.16.0.0/24 --- P2P骨干
172.16.0.0/30
......
172.16.1.0/24 --- MA骨干
172.16.1.0/29
......
172.16.2.0/24
......
172.16.32.0/19 --- AREA1
172.16.32.0/24 --- P2P骨干
172.16.32.0/30
......
172.16.33.0/24 --- MA骨干
172.16.33.0/29
......
172.16.34.0/24
......
172.16.64.0/19 --- AREA2
172.16.64.0/24 --- P2P骨干
172.16.64.0/30
......
172.16.65.0/24 --- MA骨干
172.16.65.0/30
......
172.16.66.0/24
......
172.16.96.0/19 --- AREA3
172.16.96.0/24 --- P2P骨干
172.16.96.0/30
......
172.16.97.0/24 --- MA骨干
172.16.97.0/29
......
172.16.98.0/24
......
172.16.128.0/19 --- AREA4
172.16.128.0/24 --- P2P骨干
172.16.128.0/30
......
172.16.129.0/24 --- MA骨干
172.16.129.0/29
......
172.16.130.0/24
......
172.16.160.0/19 --- RIP
172.16.160.0/20
172.16.176.0/20
172.16.192.0/19
172.16.224.0/19
2、对AERA0区域的设备进行IP地址及环回地址和缺省路由的配置
AR3
[r3]int s 4/0/0
[r3-Serial4/0/0]ip a 34.0.0.1 24
[r3]ip route-static 0.0.0.0 0 34.0.0.2
AR4
[isp]int s 4/0/0
[isp-Serial4/0/0]ip a 34.0.0.2 24
[isp-Serial4/0/0]int s 3/0/0
[isp-Serial3/0/0]ip a 46.0.0.2 24
[isp-Serial3/0/0]int s 4/0/1
[isp-Serial4/0/1]ip a 45.0.0.2 24
[isp-Serial4/0/1]int g0/0/0
[isp-GigabitEthernet0/0/0]ip a 47.0.0.2 24
[isp-GigabitEthernet0/0/0]int lo0
[isp-LoopBack0]ip a 4.4.4.4 24
AR5
[r5]int s 4/0/0
[r5-Serial4/0/0]ip a 45.0.0.1 24
[r5-Serial4/0/0]int lo0
[r5-LoopBack0]ip a 172.16.2.1 24
[r5]ip route-static 0.0.0.0 0 45.0.0.2
AR6
[r6]int s 4/0/0
[r6-Serial4/0/0]ip a 46.0.0.1 24
[r6-Serial4/0/0]int lo0
[r6-LoopBack0]ip a 172.16.3.1 24
[r6]ip route-static 0.0.0.0 0 46.0.0.2
AR7
[r7]int g0/0/0
[r7-GigabitEthernet0/0/0]ip a 47.0.0.1 24
[r7-GigabitEthernet0/0/0]int lo0
[r7-LoopBack0]ip a 172.16.4.1 24
[r7]ip route-static 0.0.0.0 0 47.0.0.2
3、对R3、R5、R6、R7配置MGRE环境，R3为中心站点。
AR3
[r3]int t 0/0/0
[r3-Tunnel0/0/0]ip a 172.16.1.1 29
[r3-Tunnel0/0/0]tunnel-protocol gre p2mp
[r3-Tunnel0/0/0]source 34.0.0.1
[r3-Tunnel0/0/0]nhrp network-id 100
[r3-Tunnel0/0/0]nhrp entry multicast dynamic
AR5
[r5]int t0/0/0
[r5-Tunnel0/0/0]ip a 172.16.1.2 29
[r5-Tunnel0/0/0]tunnel-protocol gre p2mp
[r5-Tunnel0/0/0]source Serial 4/0/0
[r5-Tunnel0/0/0]nhrp network-id 100
[r5-Tunnel0/0/0]nhrp entry 172.16.1.1 34.0.0.1 register
AR6
[r6]int t0/0/0
[r6-Tunnel0/0/0]ip a 172.16.1.3 29
[r6-Tunnel0/0/0]tunnel-protocol gre p2mp
[r6-Tunnel0/0/0]source Serial 4/0/0
[r6-Tunnel0/0/0]nhrp network-id 100
[r6-Tunnel0/0/0]nhrp entry 172.16.1.1 34.0.0.1 register
AR7
[r7]int t0/0/0
[r7-Tunnel0/0/0]ip a 172.16.1.4 29
[r7-Tunnel0/0/0]tunnel-protocol gre p2mp
[r7-Tunnel0/0/0]source GigabitEthernet 0/0/0
[r7-Tunnel0/0/0]nhrp network-id 100
[r7-Tunnel0/0/0]nhrp entry 172.16.1.1 34.0.0.1 register
4、配置AREA1、AREA2、AREA3、AREA4的IP地址及环回接口
AR1
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip a 172.16.33.1 29
[r1-GigabitEthernet0/0/0]int lo0
[r1-LoopBack0]ip a 172.16.34.1 24
AR2
[r2]int g 0/0/0
[r2-GigabitEthernet0/0/0]ip a 172.16.33.2 29
[r2-GigabitEthernet0/0/0]int lo0
[r2-LoopBack0]ip a 172.16.35.1 24
AR3
[r3]int g0/0/0
[r3-GigabitEthernet0/0/0]ip a 172.16.33.3 29
[r3-GigabitEthernet0/0/0]int lo0
[r3-LoopBack0]ip a 172.16.36.1 24
AR6
[r6]int g0/0/0
[r6-GigabitEthernet0/0/0]ip a 172.16.65.1 29
AR7
[r7]int g 0/0/1
[r7-GigabitEthernet0/0/1]ip a 172.16.97.1 29
AR8
[r8]int g0/0/0
[r8-GigabitEthernet0/0/0]ip a 172.16.97.2 29
[r8-GigabitEthernet0/0/0]int lo0
[r8-LoopBack0]ip a 172.16.98.1 24
[r8-LoopBack0]int g 0/0/1
[r8-GigabitEthernet0/0/1]ip a 172.16.97.9 29
AR9
[r9]int g0/0/0
[r9-GigabitEthernet0/0/0]ip a 172.16.97.10 29
[r9-GigabitEthernet0/0/0]int g0/0/1
[r9-GigabitEthernet0/0/1]ip a 172.16.129.1 29
[r9-GigabitEthernet0/0/1]int lo0
[r9-LoopBack0]ip a 172.16.130.1 24
AR10
[r10]int g0/0/0
[r10-GigabitEthernet0/0/0]ip a 172.16.129.2 29
[r10-GigabitEthernet0/0/0]int lo0
[r10-LoopBack0]ip a 172.16.131.1 24
AR11
[r11]int g 0/0/0
[r11-GigabitEthernet0/0/0]ip a 172.16.65.2 29
[r11-GigabitEthernet0/0/0]int lo0
[r11-LoopBack0]ip a 172.16.66.1 24[r11-LoopBack0]int g0/0/1
[r11-GigabitEthernet0/0/1]ip a 172.16.65.9 29
AR12
[r12]int g0/0/0
[r12-GigabitEthernet0/0/0]ip a 172.16.65.10 29
[r12]int lo0
[r12-LoopBack0]ip a 172.16.160.1 20
[r12-LoopBack0]int lo1
[r12-LoopBack1]ip a 172.16.176.1 20
[r12-LoopBack1]
5、启动每台设备的OSPF协议
AR1
[r1]ospf 1 router-id 1.1.1.1
[r1-ospf-1]a 1
[r1-ospf-1-area-0.0.0.1]network 172.16.0.0 0.0.255.255
AR2
[r2]ospf 1 router-id 2.2.2.2
[r2-ospf-1]a 1
[r2-ospf-1-area-0.0.0.1]network 172.16.0.0 0.0.255.255
AR3
[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1]a 1
[r3-ospf-1-area-0.0.0.1]network 172.16.32.0 0.0.0.255
[r3-ospf-1-area-0.0.0.1]a 0
[r3-ospf-1-area-0.0.0.0]net
[r3-ospf-1-area-0.0.0.0]network 172.16.1.1 0.0.0.0
AR5
[r5]ospf 1 rout
[r5]ospf 1 router-id 5.5.5.5
[r5-ospf-1]a 0
[r5-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255
AR6
[r6]ospf 1 router-id 6.6.6.6
[r6-ospf-1]a 0
[r6-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.3.255
[r6-ospf-1-area-0.0.0.0]a 2
[r6-ospf-1-area-0.0.0.2]network 172.16.65.1 0.0.0.0
AR7
[r7]ospf 1 router-id 7.7.7.7
[r7-ospf-1]a 0
[r7-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.7.255
[r7-ospf-1-area-0.0.0.0]a 3
[r7-ospf-1-area-0.0.0.3]network 172.16.97.1 0.0.0.0
AR8
[r8]ospf 1 router-id 8.8.8.8
[r8-ospf-1]a 3
[r8-ospf-1-area-0.0.0.3]network 172.16.0.0 0.0.255.255
AR9
[r9]ospf 1 router-id 9.9.9.9
[r9-ospf-1]a 3
[r9-ospf-1-area-0.0.0.3]network 172.16.97.10 0.0.0.0
[r9-ospf-1-area-0.0.0.3]a 4
[r9-ospf-1-area-0.0.0.4]network 172.16.128.0 0.0.3.255
AR10
[r10]ospf 1 router-id 10.10.10.10
[r10-ospf-1]a 4
[r10-ospf-1-area-0.0.0.4]network 172.16.0.0 0.0.255.255
AR11
[r11]ospf 1 router-id 11.11.11.11
[r11-ospf-1]a 2
[r11-ospf-1-area-0.0.0.2]network 172.16.0.0 0.0.255.255
AR12
[r12]ospf 1 router-id 12.12.12.12
[r12-ospf-1]a 2
[r12-ospf-1-area-0.0.0.2]network 172.16.65.10 0.0.0.0
[r12]rip 1
[r12-rip-1]v 2
[r12-rip-1]network 172.16.0.0
5、更改tunnel接口的接口类型
AR3
[r3]int t0/0/0
[r3-Tunnel0/0/0]ospf network-type p2mp
AR5
[r5]int t0/0/0
[r5-Tunnel0/0/0]ospf network-type p2mp
AR6
[r6]int t0/0/0
[r6-Tunnel0/0/0]ospf network-type p2mp
AR7
[r7]int t0/0/0
[r7-Tunnel0/0/0]ospf network-type p2mp
6、在R12进行重发布，从而可以让运行OSPF的设备学习到域外路由
AR12
[r12]ospf 1
[r12-ospf-1]import-route rip 1
7、将AREA4更改为域外路由来减少路由信息
将AREA4改为域外路由，以此来做特殊区域来减少路由条目的数量因此在R9上重新开启一个OSPF进程，进行重发布。（不用虚链路和Tunnel隧道技术是因为要做特殊区域，因此这里要用双向重发布，但是在此拓扑当中只需要单项重发布，然后在写一条缺省路由即可。）
AR9
[r9]ospf 1
[r9-ospf-1]a 4
[r9-ospf-1-area-0.0.0.4]undo network 172.16.128.0 0.0.3.255
[r9-ospf-1-area-0.0.0.4]q
[r9-ospf-1]undo a 4
[r9-ospf-1]q
[r9]ospf 2 rout
[r9]ospf 2 router-id 9.9.9.9
[r9-ospf-2]a 4
[r9-ospf-2-area-0.0.0.4]net
[r9-ospf-2-area-0.0.0.4]network 172.16.128.0 0.0.3.255
[r9]ospf 1
[r9-ospf-1]import-route ospf 2
[r9]ospf 2
[r9-ospf-2]de
[r9-ospf-2]default-route-advertise
8、在ABR的设备上做域间路由汇总以及ASBR的设备上做域外路由汇总
AR3
[r3]ospf 1
[r3-ospf-1]a 1
[r3-ospf-1-area-0.0.0.1]abr-summary 172.16.32.0 255.255.224.0
AR6
[r6]ospf 1
[r6-ospf-1]a 2
[r6-ospf-1-area-0.0.0.2]abr-summary 172.16.64.0 255.255.224.0
AR7
[r7]ospf 1
[r7-ospf-1]a 3
[r7-ospf-1-area-0.0.0.3]abr-summary 172.16.96.0 255.255.224.0
AR12
[r12]ospf 1
[r12-ospf-1]asbr-summary 172.16.160.0 255.255.224.0
AR9
[r9]ospf 1
[r9-ospf-1]asbr-summary 172.16.128.0 255.255.224.0
9、将AREA1、AREA2、AREA3做成特殊区域，来实现路由条目的减少
AR1
[r1]ospf 1
[r1-ospf-1]a 1
[r1-ospf-1-area-0.0.0.1]stub
AR2
[r1]ospf 1
[r1-ospf-1]a 1
[r1-ospf-1-area-0.0.0.1]stub
AR3
[r3]ospf 1
[r3-ospf-1]a 1
[r3-ospf-1-area-0.0.0.1]stub no-summary
AR6
[r6]ospf 1
[r6-ospf-1]a 2
[r6-ospf-1-area-0.0.0.2]nssa no-summary
AR11
r11]ospf 1
[r11-ospf-1]a 2
[r11-ospf-1-area-0.0.0.2]nssa
AR12
[r12]ospf 1
[r12-ospf-1]a 2
[r12-ospf-1-area-0.0.0.2]nssa
AR7
[r7]ospf 1
[r7-ospf-1]a 3
[r7-ospf-1-area-0.0.0.3]nssa no-summary
AR8
[r8]ospf 1
[r8-ospf-1]a 3
[r8-ospf-1-area-0.0.0.3]nssa
AR9
[r9]ospf 1
[r9-ospf-1]a 3
[r9-ospf-1-area-0.0.0.3]nssa
10、对ABR及ASBR做过子网汇总的路由器做空接口来进行防环
AR3
[r3]ip route-static 172.16.32.0 19 NULL 0
AR6
[r6]ip route-static 172.16.64.0 19 NULL 0
AR7
[r7]ip route-static 172.16.96.0 19 NULL 0
AR12
[r12]ip route-static 172.16.160.0 19 NULL 0
AR9
[r9]ip route-static 172.16.128.0 19 NULL 0
11、能够进行访问到公网。进行NAT协议的配置
AR3
[r3]acl 2000
[r3-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[r3]int s 4/0/0
[r3-Serial4/0/0]nat outbound 2000
AR5
[r5]acl 2000
[r5-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[r5]int s4/0/0
[r5-Serial4/0/0]nat outbound 2000
AR6
[r6]acl 2000
[r6-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[r6]int s 4/0/0
[r6-Serial4/0/0]nat outbound 2000
AR7
[r7]acl 2000
[r7-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[r7]int g0/0/0
[r7-GigabitEthernet0/0/0]nat outbound 2000
12、对AREA1进行区域认证的配置，保证更新安全
AR1
[r1]ospf 1
[r1-ospf-1]a 1
[r1-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher 123456
AR2
[r1]ospf 1
[r1-ospf-1]a 1
[r1-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher 123456
AR3
[r3]ospf 1
[r3-ospf-1]a 1
[r3-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher 123456
13、加快收敛
AR3
[r3]int t0/0/0
[r3-Tunnel0/0/0]ospf timer hello 10
AR5
[r5]int t0/0/0
[r5-Tunnel0/0/0]ospf timer hello 10
AR6
[r6]int t0/0/0
[r6-Tunnel0/0/0]ospf timer hello 10
AR7
[r7]int t0/0/0
[r7-Tunnel0/0/0]ospf timer hello 10
实验结果及验证
1、各个路由器的IP地址的配置
AR1
AR2
AR3
AR4
AR5
AR6
AR7
AR8
AR9
AR10
AR11
AR12
2、各个路由器的OSPF路由信息
AR1
AR2
AR3
AR4
AR5 
AR6
AR7
AR8
AR9
AR10
AR11
AR12
850
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
