OSPF综合实验
1.拓扑图
3.配置
[r3]ip route-static 0.0.0.0 0 172.16.32.3
[r3]acl 2000
[r3-acl-basic-2000]rule permit source 172.16.32.0 0.0.31.255
[r3-acl-basic-2000]int s 4/0/0
[r3-Serial4/0/0]nat outbound 2000
配置MGRE
[r3]int t 0/0/0
[r3-Tunnel0/0/0]ip ad 172.16.24.1 21
[r3-Tunnel0/0/0]tunnel-protocol gre p2mp
[r3-Tunnel0/0/0]source 34.0.0.1
[r3-Tunnel0/0/0]nhrp network-id 100
[r3-Tunnel0/0/0]nhrp entry b d
[r5]int t 0/0/0
[r5-Tunnel0/0/0]ip ad 172.16.24.2 21
[r5-Tunnel0/0/0]tunnel-protocol gre p2mp
[r5-Tunnel0/0/0]source s 4/0/0
[r5-Tunnel0/0/0]nhrp entry 172.16.24.1 34.0.0.1 register
[r6]int t 0/0/0
[r6-Tunnel0/0/0]ip ad 172.16.24.3 21
[r6-Tunnel0/0/0]tunnel-protocol gre p2mp
[r6-Tunnel0/0/0]source s 4/0/0
[r6-Tunnel0/0/0]nhrp entry 172.16.24.1 34.0.0.1 register
[r7]int t 0/0/0
[r7-Tunnel0/0/0]ip ad 172.16.24.4 21
[r7-Tunnel0/0/0]tunnel-protocol gre p2mp
[r7-Tunnel0/0/0]source s 4/0/0
[r7-Tunnel0/0/0]nhrp entry 172.16.24.1 34.0.0.1 register
开始ospf进程
[r1]ospf 1r
[r1]ospf 1 r
[r1]ospf 1 router-id 1.1.1.1
[r1-ospf-1]a 1
[r1-ospf-1-area-0.0.0.1]net 172.16.32.0 0.0.31.255
[r2]ospf 1 r
[r2]ospf 1 router-id 2.2.2.2
[r2-ospf-1]a 1
[r2-ospf-1-area-0.0.0.1]net
[r2-ospf-1-area-0.0.0.1]network 172.16.32.0 0.0.31.255
[r3]ospf
[r3-ospf-1]a 0
[r3-ospf-1-area-0.0.0.0]net 172.16.24.0 0.0.7.255
[r4]ospf 1 router-id 4.4.4.4
[r4-ospf-1]a 0
[r4-ospf-1-area-0.0.0.0]net
[r4-ospf-1-area-0.0.0.0]network 4.4.4.4 0.0.0.0
[r4-ospf-1-area-0.0.0.0]net 47.0.0.2 0.0.0.0
[r4-ospf-1-area-0.0.0.0]network 4.4.4.4 0.0.0.255
R5-R12配置均相似
[r3]int t 0/0/0
[r3-Tunnel0/0/0]ospf network-type P2MP .修改接口类型,让其无需进行DR/BDR选举
[r3]ospf 1
[r3-ospf-1]a 0
[r3-ospf-1-area-0.0.0.0]ospf timer hello 5
减少LSA更新量
区域1配置(完全末梢区域)
[r1-ospf-1-area-0.0.0.1]stub
[r2-ospf-1-area-0.0.0.1]stub
[r3-ospf-1-area-0.0.0.1]abr-summary 172.16.32.0 255.255.224.0
[r3-ospf-1-area-0.0.0.1]stub no-summary
[r3]ip route-static 172.16.32.0 19 NULL 0
区域2
[r6]ospf
[r6-ospf-1]a 2
[r6-ospf-1-area-0.0.0.2]nssa no-summary
[r11-ospf-1-area-0.0.0.2]nssa
[r12-ospf-1-area-0.0.0.2]nssa
区域3也是NSSA区域,配置同上
区域4
[r9-ospf-1]import ospf 1
[r9-ospf-2]default-route-advertise
保障更新安全(区域认证或者接口认证,这里展示区域认证)
[r3-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher 123456
[r1]ospf 1
[r1]ospf 100
[r1-ospf-100] silent-interface l 0