OSPF大实验

一、实验内容：

 二、实验拓扑图以及IP分配：

三、相关配置：

IP配置 

[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip add 172.16.56.1 21
[R1-GigabitEthernet0/0/0]int l0
[R1-LoopBack0]ip add 172.16.32.1 21
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip add 172.16.56.2 21
[R2-GigabitEthernet0/0/0]int l0
[R2-LoopBack0]ip add 172.16.40.1 21
[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]ip add 172.16.56.3 21
[R3-GigabitEthernet0/0/0]int l0
[R3-LoopBack0]ip add 172.16.48.1 21
[R3]int s4/0/0
[R3-Serial4/0/0]ip add 43.0.0.1 24
[R4]int s4/0/0
[R4-Serial4/0/0]ip add 43.0.0.2 24
[R4-Serial4/0/0]int s4/0/1
[R4-Serial4/0/1]ip add 45.0.0.2 24
[R4-Serial4/0/1]int s3/0/0
[R4-Serial3/0/0]ip add 46.0.0.2 24
[R4-Serial3/0/0]int g0/0/0
[R4-GigabitEthernet0/0/0]ip add 47.0.0.2 24
[R4-GigabitEthernet0/0/0]int l0
[R4-LoopBack0]ip add 4.4.4.4 24
[R5]int s4/0/0
[R5-Serial4/0/0]ip add 45.0.0.1 24
[R5-Serial4/0/0]int l0
[R5-LoopBack0]ip add 172.16.0.1 21
[R6]int s4/0/0
[R6-Serial4/0/0]ip add 46.0.0.1 24
[R6-Serial4/0/0]int l0
[R6-LoopBack0]ip add 172.16.8.1 21
[R6]int g0/0/0
[R6-GigabitEthernet0/0/0]ip add 172.16.80.1 21
[R7]int g0/0/0
[R7-GigabitEthernet0/0/0]ip add 47.0.0.1 24
[R7-GigabitEthernet0/0/0]int l0
[R7-LoopBack0]ip add 172.16.16.1 21
[R7-LoopBack0]int g0/0/1
[R7-GigabitEthernet0/0/1]ip add 172.16.112.1 21
[R8]int g0/0/0
[R8-GigabitEthernet0/0/0]ip add 172.16.112.2 21
[R8-GigabitEthernet0/0/0]int g0/0/1
[R8-GigabitEthernet0/0/1]ip add 172.16.120.1 21
[R8-GigabitEthernet0/0/1]int l0
[R8-LoopBack0]ip add 172.16.96.1 20
[R9]int g0/0/0
[R9-GigabitEthernet0/0/0]ip add 172.16.120.2 2
[R9-GigabitEthernet0/0/0]int g0/0/1
[R9-GigabitEthernet0/0/1]ip add 172.16.128.1 20
[R9-GigabitEthernet0/0/1]int l0
[R9-LoopBack0]ip add 172.16.144.1 21
[R10]int g0/0/0
[R10-GigabitEthernet0/0/0]ip add 172.16.128.2 20
[R10-GigabitEthernet0/0/0]int l0
[R10-LoopBack0]ip add 172.16.152.1 21
[R11]int g0/0/0
[R11-GigabitEthernet0/0/0]ip add 172.16.80.2 21
[R11-GigabitEthernet0/0/0]int g0/0/1
[R11-GigabitEthernet0/0/1]ip add 172.16.88.1 21
[R11-GigabitEthernet0/0/1]int l0
[R11-LoopBack0]ip add 172.16.64.1 20 

重发布

[R9]ospf 1 
[R9-ospf-1]a 4
[R9-ospf-1-area-0.0.0.4]dis th
[V200R003C00]
#
 area 0.0.0.4 
  network 172.16.128.1 0.0.0.0 
  network 172.16.144.1 0.0.0.0 
#
return
[R9-ospf-1-area-0.0.0.4]undo network 172.16.128.1 0.0.0.0 
[R9-ospf-1-area-0.0.0.4]undo network 172.16.144.1 0.0.0.0 
[R9]ospf 2 rou 9.9.9.9
[R9-ospf-2]a 4
[R9-ospf-2-area-0.0.0.4]network 172.16.128.1 0.0.0.0
[R9-ospf-2-area-0.0.0.4]network 172.16.144.1 0.0.0.0 
[R9-ospf-2]import-route ospf 1
[R9-ospf-2]q
[R9]ospf 1
[R9-ospf-1]import-route ospf 2
[R12]ospf 1
[R12-ospf-1]import-route rip

测试全网可达：

 减少LSA数量：

[R3]ospf 1 
[R3-ospf-1]a 1
[R3-ospf-1-area-0.0.0.1]abr-summary 172.16.32.0 255.255.224.0
[R7]ospf 1
[R7-ospf-1]a 3
[R7-ospf-1-area-0.0.0.3]abr-summary 172.16.96.0 255.255.224.0
[R6]ospf 1
[R6-ospf-1]a 2
[R6-ospf-1-area-0.0.0.2]abr-summary 172.16.64.0 255.255.224.0 

[R9]ospf 1
[R9-ospf-1]asbr-summary 172.16.128.0 255.255.224.0

[r11]ospf
[r11-ospf-1]a 2
[r11-ospf-1-area-0.0.0.2]nssa
[R12]ospf 1
[R12-ospf-1]asbr-summary 172.16.160.0 255.255.224.0 

在汇总的地方进行空接口防环： 

[R3]ip route-static 172.16.32.0 19 NULL 0
[R7]ip route-static 172.16.96.0 19 NULL 0
[R6]ip route-static 172.16.64.0 19 NULL 0
[R12]ip route-static 172.16.160.0 19 NULL 0
[R9]ip route-static 172.16.128.0 19 NULL 0 

配置R3 - R5/6/7为MGRE环境，中心站点为R3：

 [r3]int Tunnel 0/0/0                          
[r3-Tunnel0/0/0]ip add 172.16.4.1 24           
[r3-Tunnel0/0/0]tunnel-protocol gre p2mp          
[r3-Tunnel0/0/0]source 34.0.0.1                 
[r3-Tunnel0/0/0]nhrp network-id 100               
[r3-Tunnel0/0/0]nhrp entry multicast dynamic

[r5]int t 0/0/0
[r5-Tunnel0/0/0]ip address 172.16.4.2 24
[r5-Tunnel0/0/0]tunnel-protocol gre p2mp 
[r5-Tunnel0/0/0]source GigabitEthernet 0/0/0            
[r5-Tunnel0/0/0]nhrp network-id 100            
[r5-Tunnel0/0/0]nhrp entry  172.16.4.1   34.0.0.1   register

[r1-Tunnel0/0/1]ospf network-type p2mp   

加快收敛

[r3-Tunnel0/0/0]ospf timer hello 10   
保障更新安全

[r1-ospf-1-area-0.0.0.1] authentication-mode md5 1 cipher 123456
[r2-ospf-1-area-0.0.0.1] authentication-mode md5 1 cipher 123456
[r3-ospf-1-area-0.0.0.1] authentication-mode md5 1 cipher 123456