策略路由与OSPF综合实验

组网图

注：图中没有标明网段的都是172.16.0.0/30网段

实验需求
设备互联IP地址172.16.0.0/30，设备互联IP掩码30位，业务IP地址10.0.1.0/24
特殊区域设置：area1设置为totally stub  area2设置为totally  NSSA
路由引入：R6上引入外部路由10.0.1.1/32   R7引入外部路由10.0.1.4/30
R1上引入外部路由10.0.1.9/32
更改路径：pc2访问pc3的路径为 PC2->R5->R2->R1->R3->R7->PC3

实验思路

1、配置链路IP，保证基本链路通畅

2、配置OSPF，建立邻接关系

3、配置OSPF特殊区域

4、引入外部路由

5、写策略路由限制PC2访问PC3走的路线

6、测试

配置链路IP，保证基本链路通畅

注此处配置按照组网图从左往右顺序依次配置

R5

<Huawei>un ter mon
Info: Current terminal monitor is off.
<Huawei>
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]
[Huawei]un in en
Info: Information center is disabled.
[Huawei]
[Huawei]sysname R5
[R5]
[R5]int g0/0/0
[R5-GigabitEthernet0/0/0]
[R5-GigabitEthernet0/0/0]ip ad 10.0.0.5  30
[R5-GigabitEthernet0/0/0]
[R5-GigabitEthernet0/0/0]int g0/0/1
[R5-GigabitEthernet0/0/1]
[R5-GigabitEthernet0/0/1]ip ad 172.16.0.21  30
[R5-GigabitEthernet0/0/1]

R2

<Huawei>un ter mon
Info: Current terminal monitor is off.
<Huawei>
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]
[Huawei]un in en
Info: Information center is disabled.
[Huawei]
[Huawei]sysname R5
[R5]
[R5]int g0/0/0
[R5-GigabitEthernet0/0/0]
[R5-GigabitEthernet0/0/0]ip ad 172.16.0.22  30
[R5-GigabitEthernet0/0/0]
[R5-GigabitEthernet0/0/0]int g0/0/1
[R5-GigabitEthernet0/0/1]
[R5-GigabitEthernet0/0/1]ip ad 172.16.0.13  30
[R5-GigabitEthernet0/0/1]
[R5-GigabitEthernet0/0/1]int g0/0/2
[R5-GigabitEthernet0/0/2]
[R5-GigabitEthernet0/0/2]ip ad 172.16.0.2  30
[R5-GigabitEthernet0/0/2]

R1

<Huawei>un ter mon
Info: Current terminal monitor is off.
<Huawei>
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]
[Huawei]un in en
Info: Information center is disabled.
[Huawei]
[Huawei]sysname R1
[R1]
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]
[R1-GigabitEthernet0/0/0]ip ad 172.16.0.1  30
[R1-GigabitEthernet0/0/0]
[R1-GigabitEthernet0/0/0]int g0/0/1
[R1-GigabitEthernet0/0/1]
[R1-GigabitEthernet0/0/1]ip ad 172.16.0.5  30
[R1-GigabitEthernet0/0/1]
[R1-GigabitEthernet0/0/1]int g4/0/0
[R1-GigabitEthernet4/0/0]
[R1-GigabitEthernet4/0/0]ip ad 172.17.0.9  30
[R1-GigabitEthernet4/0/0]
[R1-GigabitEthernet4/0/0]int g0/0/2
[R1-GigabitEthernet0/0/2]
[R1-GigabitEthernet0/0/2]ip ad 172.16.09  30
                               ^
Error: Wrong parameter found at '^' position.
[R1-GigabitEthernet0/0/2]
[R1-GigabitEthernet0/0/2]
[R1-GigabitEthernet0/0/2]
[R1-GigabitEthernet0/0/2]
[R1-GigabitEthernet0/0/2]
[R1-GigabitEthernet0/0/2]ip ad 172.16.0.9 30
[R1-GigabitEthernet0/0/2]

R3

<Huawei>un ter mon
Info: Current terminal monitor is off.
<Huawei>
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]
[Huawei]un in en
Info: Information center is disabled.
[Huawei]
[Huawei]sysname R3
[R3]
[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]
[R3-GigabitEthernet0/0/0]ip ad 172.16.0.14  30
[R3-GigabitEthernet0/0/0]
[R3-GigabitEthernet0/0/0]int g0/0/1
[R3-GigabitEthernet0/0/1]
[R3-GigabitEthernet0/0/1]ip ad 172.16.0.6  30
[R3-GigabitEthernet0/0/1]
[R3-GigabitEthernet0/0/1]int g4/0/0
[R3-GigabitEthernet4/0/0]
[R3-GigabitEthernet4/0/0]ip ad 172.16.0.18  30
[R3-GigabitEthernet4/0/0]
[R3-GigabitEthernet4/0/0]int g3/0/0
[R3-GigabitEthernet3/0/0]
[R3-GigabitEthernet3/0/0]ip ad 172.16.0.33  30
[R3-GigabitEthernet3/0/0]
[R3-GigabitEthernet3/0/0]int g0/0/2
[R3-GigabitEthernet0/0/2]
[R3-GigabitEthernet0/0/2]ip ad 172.16.0.37  30
[R3-GigabitEthernet0/0/2]

R4

<Huawei>un ter mon
Info: Current terminal monitor is off.
<Huawei>
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]
[Huawei]un in en
Info: Information center is disabled.
[Huawei]
[Huawei]sysname R4
[R4]
[R4]int g0/0/0
[R4-GigabitEthernet0/0/0]
[R4-GigabitEthernet0/0/0]ip ad 172.16.0.10  30
[R4-GigabitEthernet0/0/0]
[R4-GigabitEthernet0/0/0]int g0/0/1
[R4-GigabitEthernet0/0/1]
[R4-GigabitEthernet0/0/1]ip ad 172.16.0.17  30
[R4-GigabitEthernet0/0/1]
[R4-GigabitEthernet0/0/1]int g0/0/2
[R4-GigabitEthernet0/0/2]
[R4-GigabitEthernet0/0/2]ip ad 172.16.0.25   30
[R4-GigabitEthernet0/0/2]
[R4-GigabitEthernet0/0/2]int g4/0/0  
[R4-GigabitEthernet4/0/0]
[R4-GigabitEthernet4/0/0]ip ad 172.16.0.29   30
[R4-GigabitEthernet4/0/0]

R6

<Huawei>un ter mon
Info: Current terminal monitor is off.
<Huawei>
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]
[Huawei]un in en
Info: Information center is disabled.
[Huawei]
[Huawei]sysname R6
[R6]
[R6]int g0/0/0
[R6-GigabitEthernet0/0/0]
[R6-GigabitEthernet0/0/0]ip ad 172.16.0.34  30
[R6-GigabitEthernet0/0/0]
[R6-GigabitEthernet0/0/0]int g0/0/1
[R6-GigabitEthernet0/0/1]
[R6-GigabitEthernet0/0/1]ip ad 172.16.0.30  30
[R6-GigabitEthernet0/0/1]
[R6-GigabitEthernet0/0/1]int g4/0/0 
[R6-GigabitEthernet4/0/0]
[R6-GigabitEthernet4/0/0]ip ad 172.17.0.1  30
[R6-GigabitEthernet4/0/0]

R7

<Huawei>un ter mon
Info: Current terminal monitor is off.
<Huawei>
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]
[Huawei]un in en
Info: Information center is disabled.
[Huawei]
[Huawei]sysname R7
[R7]
[R7]int g0/0/0
[R7-GigabitEthernet0/0/0]
[R7-GigabitEthernet0/0/0]ip ad 172.16.0.38  30
[R7-GigabitEthernet0/0/0]
[R7-GigabitEthernet0/0/0]int g0/0/1
[R7-GigabitEthernet0/0/1]
[R7-GigabitEthernet0/0/1]ip ad 172.16.0.26  30
[R7-GigabitEthernet0/0/1]
[R7-GigabitEthernet0/0/1]int g0/0/2
[R7-GigabitEthernet0/0/2]
[R7-GigabitEthernet0/0/2]ip ad  172.16.0.42  30
[R7-GigabitEthernet0/0/2]
[R7-GigabitEthernet0/0/2]int g4/0/0
[R7-GigabitEthernet4/0/0]
[R7-GigabitEthernet4/0/0]ip ad 10.0.1.5  30
[R7-GigabitEthernet4/0/0]

R8

<Huawei>un ter mon
Info: Current terminal monitor is off.
<Huawei>
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]
[Huawei]un in en
Info: Information center is disabled.
[Huawei]
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]
[Huawei-GigabitEthernet0/0/0]ip ad 172.17.0.2  30
[Huawei-GigabitEthernet0/0/0]
[Huawei-GigabitEthernet0/0/0]int loo0 
[Huawei-LoopBack0]
[Huawei-LoopBack0]ip a d 10.0.1.1  32
                         ^
Error: Unrecognized command found at '^' position.
[Huawei-LoopBack0]
[Huawei-LoopBack0]int loo1  
[Huawei-LoopBack1]
[Huawei-LoopBack1]ip ad 10.0.1.2  32
[Huawei-LoopBack1]

配置好各接口地址后记得检查以下链路的畅通性

OSPF配置

R1

[R1]ospf 
[R1-ospf-1]import-route static 
[R1-ospf-1]area  0
[R1-ospf-1-area-0.0.0.0]net 172.16.0.1  0.0.0.0
[R1-ospf-1-area-0.0.0.0]net 172.16.0.5  0.0.0.0
[R1-ospf-1-area-0.0.0.0]net 172.16.0.9  0.0.0.0
[R1-ospf-1-area-0.0.0.0]q
[R1-ospf-1]q

R2

R2]ospf 
[R2-ospf-1]area  1
[R2-ospf-1-area-0.0.0.1]stub no-summary
[R2-ospf-1-area-0.0.0.1]net 172.16.0.22  0.0.0.0
[R2-ospf-1-area-0.0.0.1]q
[R2-ospf-1]area  0
[R2-ospf-1-area-0.0.0.0]net 172.16.0.2  0.0.0.0
[R2-ospf-1-area-0.0.0.0]net 172.16.0.13  0.0.0.0
[R2-ospf-1-area-0.0.0.0]q
[R2-ospf-1]q

R3

[R3]ospf
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]net 172.16.0.14  0.0.0.0
[R3-ospf-1-area-0.0.0.0]net 172.16.0.6  0.0.0.0
[R3-ospf-1-area-0.0.0.0]net 172.16.0.18  0.0.0.0
[R3-ospf-1-area-0.0.0.0]q
[R3-ospf-1]area 2
[R3-ospf-1-area-0.0.0.2]nssa  no-summary
[R3-ospf-1-area-0.0.0.2]net 172.16.0.37  0.0.0.0
[R3-ospf-1-area-0.0.0.2]net 172.16.0.33  0.0.0.0
[R3-ospf-1-area-0.0.0.2]q
[R3-ospf-1]q

R4

[R4]ospf 
[R4-ospf-1]area 0
[R4-ospf-1-area-0.0.0.0]net 172.16.0.10  0.0.0.0
[R4-ospf-1-area-0.0.0.0]net 172.16.0.17  0.0.0.0
[R4-ospf-1-area-0.0.0.0]q
[R4-ospf-1]area 2
[R4-ospf-1-area-0.0.0.2]nssa  no-summary
[R4-ospf-1-area-0.0.0.2]net 172.16.0.25 0.0.0.0
[R4-ospf-1-area-0.0.0.2]net 172.16.0.29 0.0.0.0
[R4-ospf-1-area-0.0.0.2]q
[R4-ospf-1]q

R5

R5-GigabitEthernet0/0/0]ospf 
[R5-ospf-1]area  1
[R5-ospf-1-area-0.0.0.1]stub
[R5-ospf-1-area-0.0.0.1]net 10.0.0.5  0.0.0.0
[R5-ospf-1-area-0.0.0.1]net 172.16.0.21  0.0.0.0
[R5-ospf-1-area-0.0.0.1]q
[R5-ospf-1]q

R6

[R6]ospf 
[R6-ospf-1]area 2
[R6-ospf-1-area-0.0.0.2]nssa
[R6-ospf-1-area-0.0.0.2]net  172.16.0.30  0.0.0.0
[R6-ospf-1-area-0.0.0.2]net  172.16.0.34  0.0.0.0
[R6-ospf-1-area-0.0.0.2]net  172.16.0.41  0.0.0.0
[R6-ospf-1-area-0.0.0.2]q
[R6-ospf-1]q

R7

[R7]ospf 
[R7-ospf-1]area 2
[R7-ospf-1-area-0.0.0.2]nssa
[R7-ospf-1-area-0.0.0.2]net 172.16.0.38  0.0.0.0
[R7-ospf-1-area-0.0.0.2]net 172.16.0.26  0.0.0.0
[R7-ospf-1-area-0.0.0.2]net 172.16.0.42  0.0.0.0
[R7-ospf-1-area-0.0.0.2]q
[R7-ospf-1]q

路由引入

R1

[R1]ip route-static  10.0.1.9  32  172.17.0.10
[R1]ospf 
[R1-ospf-1]import-route static 

R6

[R6]ip route-static  10.0.1.1  32  172.17.0.2 
[R6]ospf 
[R6-ospf-1]import-route static

R7

[R7]ip ip-prefix zhilian  permit  10.0.1.4  30
[R7]route-policy  zhilian permit node 10
[R7-route-policy]if-match ip-prefix zhilian
[R7-route-policy]q
[R7]ospf 
[R7-ospf-1]import-route direct route-policy zhilian 

修改访问路径

R2

[R2]acl 3000  
[R2-acl-adv-3000]rule permit ip source 10.0.0.6 0  destination  10.0.1.6 0
[R2-acl-adv-3000]q
[R2]traffic classifier  xiayitiao
[R2-classifier-xiayitiao]if-match acl 3000
[R2-classifier-xiayitiao]traffic behavior    xiayitiao
[R2-behavior-xiayitiao]redirect ip-nexthop  172.16.0.1
[R2-behavior-xiayitiao]traffic policy xiayitiao
[R2-trafficpolicy-xiayitiao]classifier xiayitiao behavior xiayitiao
[R2-trafficpolicy-xiayitiao]q
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]traffic-policy xiayitiao inbound
[R2-GigabitEthernet0/0/0]q

测试

总配置

R5
un ter mon
sys
sysn R5
un in en
int g0/0/1
ip ad 172.16.0.21  30
int g0/0/0
ip ad 10.0.0.5  30
ospf 
area  1
stub
net 10.0.0.5  0.0.0.0
net 172.16.0.21  0.0.0.0
q
q




R2
un ter mon
sys
sysn R2
un in en
int g0/0/1
ip ad 172.16.0.13  30
int g0/0/0
ip ad 172.16.0.22  30
int g0/0/2
ip ad 172.16.0.2  30
q
ospf 
area  1
stub no-summary
net 172.16.0.22  0.0.0.0
q
area  0
net 172.16.0.2  0.0.0.0
net 172.16.0.13  0.0.0.0
q
q

acl 3000  
rule permit ip source 10.0.0.6 0  destination  10.0.1.6 0
q
traffic classifier  xiayitiao
if-match acl 3000
traffic behavior    xiayitiao
redirect ip-nexthop  172.16.0.1
traffic policy xiayitiao
classifier xiayitiao behavior xiayitiao
q
int g0/0/0
traffic-policy xiayitiao inbound
q


R1
un ter mon
sys
sysn R1
un in en
int g0/0/1
ip ad 172.16.0.5  30
int g0/0/0
ip ad 172.16.0.1  30
int g0/0/2
ip ad 172.16.0.9  30
int g4/0/0
ip ad 172.17.0.9  30
q
ip route-static  10.0.1.9  32  172.17.0.10
ospf 
import-route static 
area  0
net 172.16.0.1  0.0.0.0
net 172.16.0.5  0.0.0.0
net 172.16.0.9  0.0.0.0
q
q



R3
un ter mon
sys
un in en
sysn  R3 
int g0/0/0
ip ad 172.16.0.14  30
int g0/0/1
ip ad  172.16.0.6  30
int g0/0/2
ip ad 172.16.0.37  30
int g3/0/0
ip ad 172.16.0.33  30
int g4/0/0
ip ad 172.16.0.18  30
q

ospf
area 0
net 172.16.0.14  0.0.0.0
net 172.16.0.6  0.0.0.0
net 172.16.0.18  0.0.0.0
q
area 2
nssa  no-summary
net 172.16.0.37  0.0.0.0
net 172.16.0.33  0.0.0.0
q
q



R4
un ter mon
sys
un in en
sysn  R4 
int g0/0/0
ip ad 172.16.0.10  30
int g0/0/1
ip ad 172.16.0.17  30
int g0/0/2
ip ad 172.16.0.25  30
int g4/0/0
ip ad 172.16.0.29  30
q
ospf 
area 0
net 172.16.0.10  0.0.0.0
net 172.16.0.17  0.0.0.0
q
area 2
nssa  no-summary
net 172.16.0.25 0.0.0.0
net 172.16.0.29 0.0.0.0
q
q



R6
un ter mon
sys
un in en
sysn R6
int g0/0/1
ip ad 172.16.0.30  30
int g0/0/0
ip ad 172.16.0.34  30
int g0/0/2
ip ad 172.16.0.41  30
int g4/0/0
ip ad 172.17.0.1  30
q
ip route-static  10.0.1.1  32  172.17.0.2 
ospf 
area 2
import-route  static
nssa
net  172.16.0.30  0.0.0.0
net  172.16.0.34  0.0.0.0
net  172.16.0.41  0.0.0.0
q
q




R7
un ter mon
sys
un in en
sysn R7
int g0/0/0
ip ad 172.16.0.38  30
int g0/0/1
ip ad 172.16.0.26  30
int g0/0/2
ip ad 172.16.0.42  30
int g4/0/0
ip ad 10.0.1.5  30
q

ip ip-prefix zhilian  permit  10.0.1.4  30
route-policy  zhilian permit node 10
if-match ip-prefix zhilian
q

ospf 
import-route direct route-policy zhilian 
area 2
nssa
net 172.16.0.38  0.0.0.0
net 172.16.0.26  0.0.0.0
net 172.16.0.42  0.0.0.0
q
q


 

R8
un ter mon
sys
un in en
sysn R8
int g0/0/0
ip ad 172.17.0.2  30
int loo0
ip ad 10.0.1.1  32
int loo1
ip ad 10.0.1.2  32
q



R9
un ter mon
sys
un in en
sysn R9
int g0/0/0
ip ad 172.17.0.10  30
int loo0
ip ad 10.0.1.9  32
q