OSPF综合实验

最新推荐文章于 2024-10-02 23:01:47 发布

脆皮的饭桶

最新推荐文章于 2024-10-02 23:01:47 发布

阅读量843

点赞数 16

文章标签：服务器运维

本文链接：https://blog.csdn.net/bhw2004829/article/details/140777791

版权

一、实验拓扑图

二、实验要求

1、R4为ISP，其上只配置IP地址；R4与其他所直连设备间均使用公有IP；
2、R3-R5、R6、R7为MGRE环境，R3为中心站点；
3、整个OSPF环境IP基于172.16.0.0/16划分；除了R12有两个环回，其他路由器均有一个环回IP
4、所有设备均可访问R4的环回；
5、减少LSA的更新量，加快收敛，保障更新安全；
6、全网可达；

三、实验思路

划分网段：
1，先看需求有几种协议类型，根据协议类型先进行划分
再根据区域进行划分
再按照网络类型划分（P2P,MA）
area 0：172.16.0.0 19
172.16.0.0 24 p2p骨干
172.16.1.0 24 MA骨干
172.16.2.0 24 R5环回
172.16.3.0 24 R6环回
172.16.4.0 24 R7环回
area 1：172.16.32.0 19
172.16.32.0 24 p2p骨干
172.16.33.0 24 MA骨干
172.16.33.0 30 1-2-3
172.16.34.0 24 R1环回
172.16.35.0 24 R2环回
172.16.36.0 24 R3环回
area 2：172.16.64.0 19
172.16.64.0 24 p2p骨干
172.16.65.0 24 MA骨干
172.16.65.0 29 6-11
172.16.65.8 29 11-12
area 3：172.16.96.0 19
172.16.96.0 24 p2p骨干
172.16.97.0 24 MA骨干
172.16.97.0 30 7-8
172.16.97.8 30 8-9
172.16.98.0 24 R8环回

area 4：172.16.128.0 19
172.16.128.0 24 p2p骨干
172.16.129.0 24 MA骨干
172.16.129.0 30 9-10
172.16.130.0 24 R9环回
172.16.131.0 24 R10环回
RIP环回：172.16.160.0 19
172.16.160.0 20
172.16.176.0 20
2、配置--IP地址
3、缺省路由+NAT、
4、MGRE环境配置
5、OSPF协议
6、重发步
7、域间路由汇总、域外路由汇总
8、空接口防环路由
9、特殊区域
10、更改hello时间
11、OSPF认证
12、测试全网可达

四、实验步骤

1、为各个路由配置IP地址

(1）R1

[R1]int g 0/0/0

[R1-GigabitEthernet0/0/0]ip ad

[R1-GigabitEthernet0/0/0]ip address 172.16.33.1 24

[R1-GigabitEthernet0/0/0]q

[R1]int l 0

[R1-LoopBack0]ip address 172.16.34.1 24

(2) R2

[R2]int g 0/0/0

[R2-GigabitEthernet0/0/0]ip address 172.16.33.2 24

[R2]int l 0

[R2-LoopBack0]ip address 172.16.35.1 24

(3) R3

[R3]int g 0/0/0
[R3-GigabitEthernet0/0/0]ip address 172.16.33.3 24
[R3-GigabitEthernet0/0/0]q
[R3]int l 0
[R3-LoopBack0]ip ad
[R3-LoopBack0]ip address 192.16.36.1 24
[R3-LoopBack0]q
[R3]int s
[R3]int Serial 4/0/0
[R3-Serial4/0/0]ip address 34.0.0.3 24

(4) R4

[R4]int s 4/0/0
[R4-Serial4/0/0]ip address 34.0.0.4 24
[R4-Serial4/0/0].
[R4-Serial4/0/0]q
[R4]int s 4/0/1
[R4-Serial4/0/1]ip address 45.0.0.4 24
[R4-Serial4/0/1]q
[R4]int s 3/0/0
[R4-Serial3/0/0]ip address 46.0.0.4 24
[R4-Serial3/0/0]q
[R4]int g 0/0/0
[R4-GigabitEthernet0/0/0]ip address 47.0.0.4 24
[R4-GigabitEthernet0/0/0]q
[R4]int l 0
[R4-LoopBack0]ip address 172.16.2.1 24

(5) R5

[R5]int s 4/0/0
[R5-Serial4/0/0]ip address 45.0.0.5 24
[R5-Serial4/0/0]q
[R5]int l 0
[R5-LoopBack0]ip ad
[R5-LoopBack0]ip address 172.16.3.1 24

(6) R6

[R6]int s 4/0/0
[R6-Serial4/0/0]ip address 46.0.0.6 24
[R6-Serial4/0/0]q
[R6]int g 0/0/0
[R6-GigabitEthernet0/0/0]ip address 172.16.65.1 30
[R6-GigabitEthernet0/0/0]q
[R6]int l 0
[R6-LoopBack0]ip address 172.16.4.1 24

(7) R7
[R7]int g 0/0/0
[R7-GigabitEthernet0/0/0]ip ad
[R7-GigabitEthernet0/0/0]ip address 47.0.0.7 24
[R7-GigabitEthernet0/0/0]q
[R7]int g 0/0/1
[R7-GigabitEthernet0/0/1]ip address 172.16.97.1 30
[R7]int l 0
[R7-LoopBack0]ip address 172.16.5.1 24
[R7-LoopBack0]q

(8) R8
[R8]int g 0/0/0
[R8-GigabitEthernet0/0/0]ip address 172.16.97.2 30
[R8-GigabitEthernet0/0/0]q
[R8]int g 0/0/1
[R8-GigabitEthernet0/0/1]ip address 172.16.97.5 30
[R8-GigabitEthernet0/0/1]q
[R8]int l 0
[R8-LoopBack0]ip address 172.16.98.1 24

(9) R9

[R9]int g 0/0/0
[R9-GigabitEthernet0/0/0]ip address 172.16.97.6 30
[R9]int g 0/0/1
[R9-GigabitEthernet0/0/1]ip address 172.16.129.9 30
[R9]int l 0
[R9-LoopBack0]ip address 172.16.130.1 24

(10) R10

[R10]int g 0/0/0
[R10-GigabitEthernet0/0/0]ip address 172.16.129.10 30
[R10]int l 0
[R10-LoopBack0]ip address 172.16.131.1 24

(11) R11

[R11]int g 0/0/0
[R11-GigabitEthernet0/0/0]ip address 172.16.65.2 30
[R11]int g 0/0/1
[R11-GigabitEthernet0/0/1]ip address 172.16.65.5 30
[R11]int l 0
[R11-LoopBack0]ip address 172.16.66.1 24

(12) R12

[R12]int g 0/0/0
[R12-GigabitEthernet0/0/0]ip address 172.16.65.6 30
[R12]int l 0
[R12-LoopBack0]ip address 172.16.160.1 24
[R12]int l 1
[R12-LoopBack1]ip address 172.16.161.1 24

2、实现公网通，在area给路由器配置缺省

(1) R3

[R3]ip route-static 0.0.0.0 0 34.0.0.4

(2) R5

[R5]ip route-static 0.0.0.0 0 45.0.0.4

(3) R6

[R6]ip route-static 0.0.0.0 0 46.0.0.4

(4) R7

[R7]ip route-static 0.0.0.0 0 47.0.0.4

3、创建ospf区域

（1）area 1

[R1]ospf router-id 1.1.1.1

[R1-ospf-1]area 1

[R1-ospf-1-area-0.0.0.1]network 0.0.0.0 255.255.255.255

R2]ospf router-id 2.2.2.2

[R2-ospf-1]a 1

[R2-ospf-1-area-0.0.0.1]network 0.0.0.0 255.255.255.255

[R3]ospf 1 router-id 3.3.3.3

[R3-ospf-1]a 1

[R3-ospf-1-area-0.0.0.1]network 172.16.33.0 0.0.0.255

[R3-ospf-1-area-0.0.0.1]network 172.16.36.0 0.0.0.255

（2）area 0

[R5]ospf 1 router-id 5.5.5.5

[R5-ospf-1]a 0

[R5-ospf-1-area-0.0.0.0]network 172.16.3.0 0.0.0.255

[R6]ospf 1 router-id 6.6.6.6

[R6-ospf-1]a 0

[R6-ospf-1-area-0.0.0.0]network 172.16.4.0 0.0.0.255

[R7]ospf 1 router-id 7.7.7.7

[R7-ospf-1]a 0

[R7-ospf-1-area-0.0.0.0]network 172.16.5.0 0.0.0.255

(3) area 0

[R6]ospf 1

[R6-ospf-1]a 2

[R6-ospf-1-area-0.0.0.2]network 172.16.65.1 0.0.0.0

R11

[R11]ospf 1 router-id 11.11.11.11

[R11-ospf-1]a 2

[R11-ospf-1-area-0.0.0.2]network 0.0.0.0 255.255.255.255

R12

[R12]ospf 1 router-id 12.12.12.12

[R12-ospf-1]a 2

[R12-ospf-1-area-0.0.0.2]network 172.16.65.6 0.0.0.0

宣告rip

[R12]rip 1
[R12-rip-1]v 2
[R12-rip-1]undo summary
[R12-rip-1]network 172.16.0.0
[R12-rip-1]osp
[R12-rip-1]q
[R12]ospf 1
[R12-ospf-1]import-route rip

（4）area 3

[R8]ospf 1 router-id 8.8.8.8

[R8-ospf-1]a 3

[R8-ospf-1-area-0.0.0.3]network 0.0.0.0 255.255.255.25

[R9]ospf 1 router-id 9.9.9.9

[R9-ospf-1]a 3

[R9-ospf-1-area-0.0.0.3]network 172.16.97.6 0.0.0.0

(5) area 4

[R9]ospf 2 router-id 9.9.9.9

[R9-ospf-2]a 4

[R9-ospf-2-area-0.0.0.4]network 172.16.129.9 0.0.0.0

[R9-ospf-2-area-0.0.0.4]network 172.16.130.0 0.0.0.255

R11

[R10]ospf 2 router-id 10.10.10.10

[R10-ospf-2]a 4

[R10-ospf-2-area-0.0.0.4]ne

[R10-ospf-2-area-0.0.0.4]network 0.0.0.0 255.255.255.255

4、配置MGRE

[R3]int Tunnel 0/0/0
[R3-Tunnel0/0/0]ip address 172.16.6.3 24
[R3-Tunnel0/0/0]tunnel-protocol gre p2mp
[R3-Tunnel0/0/0]source s 4/0/0
[R3-Tunnel0/0/0]nhrp network-id 100
[R3-Tunnel0/0/0]nhrp entry multicast dynamic

R5
[R5]int Tunnel 0/0/0
[R5-Tunnel0/0/0]ip address 172.16.6.5 24
[R5-Tunnel0/0/0]tunnel-protocol gre p2mp
[R5-Tunnel0/0/0]source s 4/0/0
[R5-Tunnel0/0/0]nhrp network-id 100
[R5-Tunnel0/0/0]nhrp entry 172.16.6.3 34.0.0.3 register

R6
[R6]int Tunnel 0/0/0
[R6-Tunnel0/0/0]ip address 172.16.6.6 24
[R6-Tunnel0/0/0]tunnel-protocol gre p2mp
[R6-Tunnel0/0/0]shutdown
[R6-Tunnel0/0/0]source s4/0/0
[R6-Tunnel0/0/0]nhrp network-id 100
[R6-Tunnel0/0/0]nhrp entry 172.16.6.3 34.0.0.3 register

R7
[R7]int Tunnel 0/0/0
[R7-Tunnel0/0/0]ip address 172.16.6.7 24
[R7-Tunnel0/0/0]tunnel-protocol gre p2mp
[R7-Tunnel0/0/0]shutdown
[R7-Tunnel0/0/0]source g 0/0/0
[R7-Tunnel0/0/0]nhrp network-id 100
[R7-Tunnel0/0/0]nhrp entry 172.16.6.3 34.0.0.3 register

5、将隧道口划分进ospf区域里

[R3-ospf-1]a 1

[R3-ospf-1-area-0.0.0.1]q

[R3-ospf-1]a 0

[R3-ospf-1-area-0.0.0.0]network 172.16.6.0 0.0.0.255
[R3-ospf-1]q
[R3]int t
[R3]int Tunnel 0/0/0
[R3-Tunnel0/0/0]ospf network-type broadcast

[R5]ospf 1

[R5-ospf-1]a 0

[R5-ospf-1-area-0.0.0.0]ne

[R5-ospf-1-area-0.0.0.0]network 172.16.6.0 0.0.0.25
[R5-ospf-1]q
[R5]int Tunnel 0/0/0
[R5-Tunnel0/0/0]ospf network-type broadcast

[R6]ospf 1

[R6-ospf-1]a 0

[R6-ospf-1-area-0.0.0.0]network 172.16.6.0 0.0.0.25

[R6]int Tunnel 0/0/0
[R6-Tunnel0/0/0]ospf network-type broadcast

[R7]ospf 1

[R7-ospf-1]a 0

[R7-ospf-1-area-0.0.0.0]network 172.16.6.0 0.0.0.255

[R7-ospf-1-area-0.0.0.0]q
[R7-ospf-1]q
[R7]int Tunnel 0/0/0
[R7-Tunnel0/0/0]ospf network-type broadcast

6、取消选举权

[R5]interface Tunnel 0/0/0

[R5-Tunnel0/0/0]ospf dr-priority 0

[R6]int Tunnel 0/0/0

[R6-Tunnel0/0/0]ospf dr-priority 0

[R7]int Tunnel 0/0/0

[R7-Tunnel0/0/0]ospf dr-priority 0

7、路由引入

R9
[R9]ospf 1
[R9-ospf-1]import-route ospf 2
[R9-ospf-1]q
[R9]ospf 2
[R9-ospf-2]import-route ospf 1

8、实现所有设备可以访问R4的环回（EZIP）

R3
[R3]acl 2000
[R3-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[R3-acl-basic-2000]q
[R3]int Serial 4/0/0
[R3-Serial4/0/0]nat outbound 2000

[R5]acl 2000
[R5-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[R5-acl-basic-2000]q
[R5]int s 4/0/0
[R5-Serial4/0/0]nat outbound 2000

[R6]acl 2000
[R6-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[R6-acl-basic-2000]q
[R6]int s 4/0/0
[R6-Serial4/0/0]nat outbound 2000

[R7]acl 2000
[R7-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[R7-acl-basic-2000]q
[R7]int g0/0/0
[R7-GigabitEthernet0/0/0]nat outbound 2000
[R7-GigabitEthernet0/0/0]q

9、ABR聚合

[R3]ospf 1

[R3-ospf-1]a 1

[R3-ospf-1-area-0.0.0.1]abr-summary 172.16.32.0 255.255.224

[R6]ospf 1

[R6-ospf-1]a 2

[R6-ospf-1-area-0.0.0.2]abr-summary 172.16.64.0 255.255.224.0

[R7]ospf 1

[R7-ospf-1]a 3

[R7-ospf-1-area-0.0.0.3]abr-summary 172.16.96.0 255.255.224.0

10、ASBR的聚合

R12
[R12]ospf 1
[R12-ospf-1]asbr-summary 172.16.160.0 255.255.224.0

[R9]ospf 1

[R9-ospf-1]asbr-summary 172.16.128.0 255.255.224.0

11、最大精简路由

(2)区域1为完全末梢区域

R3
[R3]ospf 1
[R3-ospf-1]a 1
[R3-ospf-1-area-0.0.0.1]stub no-summary

[R2]ospf 1

[R2-ospf-1]a 1

[R2-ospf-1-area-0.0.0.1]stub no-summary

[R1]ospf 1

[R1-ospf-1]a 1

[R1-ospf-1-area-0.0.0.1]stub no-summary

(2)区域2为完全NSSA区域

R6
[R6]ospf 1
[R6-ospf-1]a 2
[R6-ospf-1-area-0.0.0.2]nssa no-summary

R11

[R11]ospf 1

[R11-ospf-1]a 2
[R11-ospf-1-area-0.0.0.2]nssa no-summary

R12
[R12]ospf 1
[R12-ospf-1]a 2
[R12-ospf-1-area-0.0.0.2]nssa no-summary

(3)区域3为完全NSSA区域

[R7]ospf 1
[R7-ospf-1]a 34
[R7-ospf-1-area-0.0.0.34]q
[R7-ospf-1]a 3
[R7-ospf-1-area-0.0.0.3]nssa no-summary

R8
[R8]ospf 1
[R8-ospf-1]a 3
[R8-ospf-1-area-0.0.0.3]nssa no-summary

R9
[R9]ospf 1
[R9-ospf-1]a 3
[R9-ospf-1-area-0.0.0.3]nssa no-summary

13、更改holle时间

（1）area 1

R1
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ospf timer hello 5

R2
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ospf timer hello 5

[R3]int g 0/0/0
[R3-GigabitEthernet0/0/0]ospf timer hello 5

（2）area 0

R3
[R3]int s 4/0/0
[R3-Serial4/0/0]ospf timer hello 5

[R5]int s 4/0/0

[R5-Serial4/0/0]ospf timer hello 5

[R6]int s 4/0/0

[R6-Serial4/0/0]ospf timer hello 5

R7
[R7]int g 0/0/0
[R7-GigabitEthernet0/0/0]ospf timer hello 5

(3) area 2

[R6]int g0/0/0
[R6-GigabitEthernet0/0/0]ospf timer hello 5

R11
[R11]int g 0/0/0
[R11-GigabitEthernet0/0/0]ospf timer hello 5
[R11-GigabitEthernet0/0/0]q
[R11]int g 0/0/1
[R11-GigabitEthernet0/0/1]ospf timer hello 5

R12
[R12]int g0/0/0
[R12-GigabitEthernet0/0/0]ospf timer hello 5

(4)area 3

R7
[R7]int g 0/0/1
[R7-GigabitEthernet0/0/1]ospf timer hello 5

[R8]int g 0/0/0
[R8-GigabitEthernet0/0/0]ospf timer hello 5
[R8-GigabitEthernet0/0/0]q
[R8]int g 0/0/1
[R8-GigabitEthernet0/0/1]ospf timer hello 5

[R9]int g 0/0/0
[R9-GigabitEthernet0/0/0]ospf timer hello 5

(5) area 4

R9
[R9]int g 0/0/1
[R9-GigabitEthernet0/0/1]ospf timer hello 5

R10
[R10]int g 0/0/0
[R10-GigabitEthernet0/0/0]ospf timer hello 5

至此试验结束