一.实验目的
二.需求分析
R4环回不能宣告,全网可达,保障更新安全,避免环路,减少路由条目,缺省路由、路由条目全,手工认证,空接口,手工汇总。
三.实验步骤
1.设计IP地址和环回地址
R1
<Huawei>system-view
[Huawei]sysname r1
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip add 192.168.1.1 27
[r1-GigabitEthernet0/0/0]int lo0
[r1-LoopBack0]ip add 192.168.1.33 27
R2
<Huawei>system-view
[Huawei]sysname r2
[r2]int g0/0/0
[r2-GigabitEthernet0/0/0]ip add 192.168.1.2 27
[r2-GigabitEthernet0/0/0]int lo0
[r2-LoopBack0]ip add 192.168.1.65 27
R3
<Huawei>system-view
[Huawei]sysname r3
[r3]int g0/0/0
[r3-GigabitEthernet0/0/0]ip add 192.168.1.3 27
[r3-GigabitEthernet0/0/0]int g0/0/1
[r3-GigabitEthernet0/0/1]ip add 192.168.1.129 30
[r3-GigabitEthernet0/0/1]int lo0
[r3-LoopBack0]ip add 192.168.1.97 27
R4
<Huawei>system-view
[Huawei]sysname r4
[r4]int g0/0/0
[r4-GigabitEthernet0/0/0]ip add 192.168.1.130 30
[r4-GigabitEthernet0/0/0]int lo0
[r4-LoopBack0]ip add 4.4.4.4 24
2.OSPF协议的配置
R1:
R2:
R3:
<r3>system-view
[r3]ospf 1 rou
[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1]area 0
[r3-ospf-1-area-0.0.0.0]network 192.168.1.3 0.0.0.0
[r3-ospf-1-area-0.0.0.0]network 192.168.1.97 0.0.0.0
R4:
检查一下个个节点是否互通
2.修改DR
路由器R1上:
[r1]interface GigabitEthernet 0/0/0
[r1-GigabitEthernet0/0/0]ospf dr-priority 0
路由器R2上:
[r2]interface GigabitEthernet 0/0/0
[r2-GigabitEthernet0/0/0]ospf dr-priority 0
结果如下:
[r2]display ospf peer
3.因为R4不能直接宣告,要做缺省
4.更新安全,要做手工认证
[r1-GigabitEthernet0/0/0]ospf authentication-mode md5 1 cipher 123456
[r2-GigabitEthernet0/0/0]ospf authentication-mode md5 1 cipher 123456
[r3-GigabitEthernet0/0/0]ospf authentication-mode md5 1 cipher 123456
[r3-GigabitEthernet0/0/1]ospf authentication-mode md5 1 cipher 123456
[r4-GigabitEthernet0/0/0]ospf authentication-mode md5 1 cipher 123456
5.避免环路,在进行汇总的路由器使用空接口
[r3]ip route-static 192.168.1.0 25 NULL 0 ----- 给area0汇总的网段做的空接口
[r3]ip route-static 192.168.1.128 25 NULL 0 ----- area1
6.减少路由条目,对路由做手工汇总
[r3-ospf-1-area-0.0.0.0]abr-summary 192.168.1.0 255.255.255.128
[r3-ospf-1-area-0.0.0.1]abr-summary 192.168.1.128 255.255.255.128
四.实验测试