实验拓扑搭建且IP划分
实验要求:
1.R6为ISP只能配置IP地址,R1-R5的环回为私有网段;
2.R1/4/5为全连的MGRE结构,R1/2/3为星型的拓扑结构,R1为中心站点;
3.所有私有网段可以互相通讯,私有网段使用OSPF完成;
一、基本配置(配置环回地址+接口IP)
R1:
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip add 16.0.0.1 24
[R1-GigabitEthernet0/0/0]int g0/0/1
[R1-GigabitEthernet0/0/1]ip add 61.0.0.1 24
[R1-GigabitEthernet0/0/1]int l0
[R1-LoopBack0]ip add 1.1.1.1 24
R2:
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip add 26.0.0.2 24
[R2-GigabitEthernet0/0/0]int l0
[R2-LoopBack0]ip add 2.2.2.2 24
R3:
[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]ip add 36.0.0.3 24
[R3-GigabitEthernet0/0/0]int l0
[R3-LoopBack0]ip add 3.3.3.3 24
R4:
[R4]int g0/0/0
[R4-GigabitEthernet0/0/0]ip add 46.0.0.4 24
[R4-GigabitEthernet0/0/0]int l0
[R4-LoopBack0]ip add 4.4.4.4 24
R5:
[R5]int g0/0/0
[R5-GigabitEthernet0/0/0]ip add 56.0.0.5 24
[R5-GigabitEthernet0/0/0]int l0
[R5-LoopBack0]ip add 5.5.5.5 24
R6:
[Huawei]sysname ISP
[ISP]int g3/0/0
[ISP-GigabitEthernet3/0/0]ip address 61.0.0.6 24.
[ISP-GigabitEthernet3/0/0]int g0/0/0
[ISP-GigabitEthernet0/0/0]ip add 16.0.0.6 24
[ISP-GigabitEthernet0/0/0]int g0/0/1
[ISP-GigabitEthernet0/0/1]ip add 26.0.0.6 24
[ISP-GigabitEthernet0/0/1]int g0/0/2
[ISP-GigabitEthernet0/0/2]ip add 36.0.0.6 24
[ISP-GigabitEthernet0/0/2]int g1/0/0
[ISP-GigabitEthernet1/0/0]ip add 46.0.0.6 24
[ISP-GigabitEthernet1/0/0]int g2/0/0
[ISP-GigabitEthernet2/0/0]ip add 56.0.0.6 24
二、R1/2/3/4/5配置去往R6的缺省路由,公网可达
[R1]ip route-static 0.0.0.0 0 61.0.0.6
[R1]ip route-static 0.0.0.0 0 16.0.0.6
[R2]ip route-static 0.0.0.0 0 26.0.0.6
[R3]ip route-static 0.0.0.0 0 36.0.0.6
[R4]ip route-static 0.0.0.0 0 46.0.0.6
[R5]ip route-static 0.0.0.0 0 56.0.0.6
测试连通性:
三、R1/2/3为星型的拓扑结构,R1为中心站点;
R1:
[R1]int t0/0/1
[R1-Tunnel0/0/1]ip add 192.168.2.1 24
[R1-Tunnel0/0/1]tunnel-protocol gre p2mp
[R1-Tunnel0/0/1]source 16.0.0.1
[R1-Tunnel0/0/1]nhrp entry multicast dynamic ----开启伪广播功能
R2:
[R2]int t0/0/1
[R2-Tunnel0/0/1]ip add 192.168.2.2 24
[R2-Tunnel0/0/1]tunnel-protocol gre p2mp
[R2-Tunnel0/0/1]source 26.0.0.2
[R2-Tunnel0/0/1]nhrp entry 192.168.2.1 16.0.0.1 register
R3:
[R3]int t0/0/1
[R3-Tunnel0/0/1]ip add 192.168.2.3 24
[R3-Tunnel0/0/1]tunnel-protocol gre p2mp
[R3-Tunnel0/0/1]source 36.0.0.3
[R3-Tunnel0/0/1]nhrp entry 192.168.2.1 16.0.0.1 register
查看是否学到nhrp映射表:
测试隧道连通性:
四、R1/4/5为全连的MGRE结构;
R1:
[R1]int t0/0/0
[R1-Tunnel0/0/0]ip add 192.168.1.1 24
[R1-Tunnel0/0/0]tunnel-protocol gre p2mp
[R1-Tunnel0/0/0]source 61.0.0.1
[R1-Tunnel0/0/0]nhrp entry multicast dynamic ---开启伪广播功能
R4:
[R4]int t0/0/0
[R4-Tunnel0/0/0]ip add 192.168.1.4 24
[R4-Tunnel0/0/0]tunnel-protocol gre p2mp
[R4-Tunnel0/0/0]source 46.0.0.4 ---写物理接口IP,R4为hub时,得有固定的源接口IP
[R4-Tunnel0/0/0]nhrp entry 192.168.1.1 61.0.0.1 register ---向hub注册,R1为hub
[R4-Tunnel0/0/0]nhrp entry 192.168.1.5 56.0.0.5 register ---向hub注册,R5为hub
R5:
[R5]int t0/0/0
[R5-Tunnel0/0/0]ip address 192.168.1.5 24
[R5-Tunnel0/0/0]tunnel-protocol gre p2mp
[R5-Tunnel0/0/0]source 56.0.0.5 ---写物理接口IP,R5为hub时,得有固定的源接口IP
[R5-Tunnel0/0/0]nhrp entry 192.168.1.1 61.0.0.1 register ---向hub注册,R1为hub
[R5-Tunnel0/0/0]nhrp entry 192.168.1.4 46.0.0.4 register ---向hub注册,R4为hub
查看nhrp映射表:
测试连通性:
五、所有私有网段可以互相通讯,私有网段使用OSPF完成;
配置ospf前:
R1:
[R1]ospf 1 router-id 1.1.1.1
[R1-ospf-1-area-0.0.0.0]network 1.1.1.1 0.0.0.0
[R1-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.255
[R1-ospf-1-area-0.0.0.0]network 192.168.2.0 0.0.0.255
R2:
[R2]ospf 1 router-id 2.2.2.2
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]network 2.2.2.2 0.0.0.0
[R2-ospf-1-area-0.0.0.0]network 192.168.2.0 0.0.0.255
R3:
[R3]ospf 1 router-id 3.3.3.3
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]network 3.3.3.3 0.0.0.0
[R3-ospf-1-area-0.0.0.0]network 192.168.2.0 0.0.0.255
R4:
[R4]ospf 1 router-id 4.4.4.4
[R4-ospf-1]area 0
[R4-ospf-1-area-0.0.0.0]network 4.4.4.4 0.0.0.0
[R4-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.255
R5:
[R5]ospf 1 router-id 5.5.5.5
[R5-ospf-1]area 0
[R5-ospf-1-area-0.0.0.0]network 5.5.5.5 0.0.0.0
[R5-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.255
Hub节点此时属于P2P类型,只能建立一个邻居,无法建立多个邻居,所以无法与R5建立邻居;要把MGRE的隧道Tunnel0/0/0改为broadcast;
[R1-Tunnel0/0/0]ospf network-type broadcast
[R4-Tunnel0/0/0]ospf network-type broadcast
[R5-Tunnel0/0/0]ospf network-type broadcast
[R1-Tunnel0/0/1]ospf network-type broadcast
[R2-Tunnel0/0/1]ospf network-type broadcast
[R3-Tunnel0/0/1]ospf network-type broadcast
把隧道接口改为broadcast后,这时候R1还是学不到R2的路由的,因为这个R2、R3选举时都认为自己是DR,中心站点是R1为BDR,产生了冲突,无法学到完整的路由信息;
解决方法:让分支节点放弃DR选举,在MGRE环境下,hub节点必须成为DR设备。否则网络路由信息无法学习全面。必须修改分支节点的接口优先级为0。
[R2-Tunnel0/0/1]ospf dr-priority 0
[R3-Tunnel0/0/1]ospf dr-priority 0