实验要求
一.划分网段
192.168.1.0 24
192.168.1.0 25
192.168.1.128 25
192.168.1.0 25
192.168.1.0 27
192.168.1.32 27
192.168.1.64 27
192.168.1 96 27
192.168.1.128 25
192.168.1.129 30
192.168.1.130 30
二.配置IP
将192.168.1.0 25划分为网络位为27的网段取其中两段添加至路由器各个接口
R1:[r1-GigabitEthernet0/0/0]ip add 192.168.1.1 27
[r1-LoopBack0] ip add 192.168.1.33 27
R2:[r2-GigabitEthernet0/0/0]ip add 192.168.1.2 27
[r2-LoopBack0]ip add 192.168.1.65 27
R3:[r3-GigabitEthernet0/0/0]ip add 192.168.1.3 27
[r3-GigabitEthernet0/0/1]ip add 192.168.1.129 30
[r3-LoopBack0]ip add 192.168.1.97 27
R4:[r4-GigabitEthernet0/0/0]ip add 192.168.1.130 30
[r4-LoopBack0]ip add 4.4.4.4 24
三.启动OSPF进程
R1:
[r1]ospf 1 router-id 1.1.1.1
[r1-ospf-1]area 0
[r1-ospf-1-area-0.0.0.0]network 192.168.1.1 0.0.0.0
[r1-ospf-1-area-0.0.0.0]network 192.168.1.33 0.0.0.0
R2:
[r2]ospf 1 router-id 2.2.2.2
[r2-ospf-1]area 0
[r2-ospf-1-area-0.0.0.0]network 192.168.1.2 0.0.0.0
[r2-ospf-1-area-0.0.0.0]network 192.168.1.65 0.0.0.0
R3:
[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1]area 0
[r3-ospf-1-area-0.0.0.0]network 192.168.1.3 0.0.0.0
[r3-ospf-1-area-0.0.0.0]network 192.168.1.97 0.0.0.0
R4:
[r4]ospf 1 router-id 4.4.4.4
[r4-ospf-1]area 1
[r4-ospf-1-area-0.0.0.1]network 192.168.1.130 0.0.0.0
四.干涉DR选举并取消BDR选举
[r1]interface GigabitEthernet 0/0/0
[r1-GigabitEthernet0/0/0]ospf dr-priority 0
[r2]interface GigabitEthernet 0/0/0
[r2-GigabitEthernet0/0/0]ospf dr-priority 0
[r3]interface GigabitEthernet 0/0/0
[r3-GigabitEthernet0/0/0]ospf dr-priority 3
并重启ospf进程
reset ospf process
reset ospf process
reset ospf process
五.区域汇总
[r3]ospf 1
[r3-ospf-1]area 0
[r3-ospf-1-area-0.0.0.0]abr-summary 192.168.1.0 255.255.255.0
六.防环
[r1]ip route-static 192.168.1.0 25 null 0
[r2]ip route-static 192.168.1.0 24 null 0
[r3]ip route-static 192.168.1.0 24 null 0
七.安全认证
R1:
[r1-GigabitEthernet0/0/0]ospf authentication-mode md5 22 cipher 123456
R2:
[r2-GigabitEthernet0/0/0]ospf authentication-mode md5 22 cipher 123456
R3:
[r3-GigabitEthernet0/0/0]ospf authentication-mode md5 22 cipher 123456------0区域
[r3-GigabitEthernet0/0/0]ospf authentication-mode md5 23 cipher 123456------1区域
R4:
[r4-GigabitEthernet0/0/0]ospf authentication-mode md5 23 cipher 123456
八.下发缺省路由
[r4-ospf-1]default-route-advertise always
最后随机在路由1.2.3上ping r4的 环回接口IP,接通即完成