需求分析
通过子网划分172.16.0.0/16网段减少路由条目,配置R3567MGRE环境并配置R3为中心站点,再配置ISP缺省路由,实现边界路由器私网互通,对各个路由器配置ospf并汇总路由信息后再宣告,重发布域外路由实现互通并配置NAT协议实现访问公网
172.16.0.0/20 area0
172.16.16.0/20 area1
172.16.32.0/20 area2
172.16.48.0/20 area3
172.16.64.0/20 area4
172.16.80.0/20
172.16.96.0/20
172.16.112.0/20
172.16.16.0/20 area1骨干
172.16.17.0/20 r1
172.16.18.0/20 r2
省略
172.16.31.0/24
配置
r1
[r1]int LoopBack 0
[r1-LoopBack0]
[r1-LoopBack0]ip add 172.16.34.1 24
[r1-LoopBack0]q
[r1]int GigabitEthernet 0/0/0
[r1-GigabitEthernet0/0/0]
[r1-GigabitEthernet0/0/0]
[r1-GigabitEthernet0/0/0]ip add 172.16.33.9 29
缺省路由:
[r1]ip route-static 0.0.0.0 0 172.16.33.10ospf
[r1]ospf 1 router-id 1.1.1.1
[r1-ospf-1]area 1
[r1-ospf-1-area-0.0.0.1]network 172.16.0.0 0.0.255.255路由汇总
[r1]ospf 1
[r1-ospf-1]a 1
[r1-ospf-1-area-0.0.0.1]stub
r2
ospf
[r2]ospf 1 router-id 2.2.2.2
[r2-ospf-1]area 1
[r2-ospf-1-area-0.0.0.1]network 172.16.0.0 0.0.255.255汇总
[r1]ospf 1
[r1-ospf-1]a 1
[r1-ospf-1-area-0.0.0.1]stub
r3
[r3]int Tunnel 0/0/0
[r3-Tunnel0/0/0]ip add 172.16.0.1 29
[r3-Tunnel0/0/0]tunnel-protocol gre p2mp
[r3-Tunnel0/0/0]source 34.0.0.1
Apr 26 2024 1:01:33-08:00 r3 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface Tunnel0/0/0 has entered the UP state.
[r3-Tunnel0/0/0]nhrp network-id 100
[r3-Tunnel0/0/0]nhrp entry multicast dynamicospf
[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1]area 0
[r3-ospf-1-area-0.0.0.0]net 172.16.0.1 0.0.0.0
[r3-ospf-1-area-0.0.0.0]q
[r3-ospf-1]area 1
[r3-ospf-1-area-0.0.0.1]network 172.16.32.0 0.0.7.255路由汇总
[r3]ospf 1
[r3-ospf-1]area 1
[r3-ospf-1-area-0.0.0.1]abr-summary 172.16.32.0 255.255.224.0[r3]ospf 1
[r3-ospf-1]a 1
[r3-ospf-1-area-0.0.0.1]stub no-summary[r3]ip route-static 172.16.32.0 19 NULL 0
nat转换
[r3]acl 2000
[r3-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[r3]int s 4/0/0
[r3-Serial4/0/0]nat outbound 2000hello时间
[r3]int t0/0/0
[r3-Tunnel0/0/0]ospf timer hello 10
r5
[r5]int Tunnel 0/0/0
[r5-Tunnel0/0/0]ip add 172.16.0.2 29
[r5-Tunnel0/0/0]tunnel-protocol gre p2mp
[r5-Tunnel0/0/0]source Serial 4/0/0
Apr 26 2024 1:07:12-08:00 r5 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
on the interface Tunnel0/0/0 has entered the UP state.
[r5-Tunnel0/0/0]nhrp network-id 100
[r5-Tunnel0/0/0]nhrp entry 172.16.0.1 34.0.0.1 registerospf
[r5]ospf 1 router-id 5.5.5.5
[r5-ospf-1]area 0
[r5-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.255.255nat
[r5]acl 2000
[r5-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[r5]int s4/0/0
[r5-Serial4/0/0]nat outbound 2000hello时间
[r5]int t0/0/0
[r5-Tunnel0/0/0]ospf timer hello 10
r6
[r6]interface Tunnel 0/0/0
[r6-Tunnel0/0/0]ip add 172.16.0.3 29
[r6-Tunnel0/0/0]tunnel-protocol gre p2mp
[r6-Tunnel0/0/0]source Serial 4/0/0
Apr 26 2024 1:11:38-08:00 r6 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
on the interface Tunnel0/0/0 has entered the UP state.
[r6-Tunnel0/0/0]nhrp network-id 100
[r6-Tunnel0/0/0]nhrp entry 172.16.0.1 34.0.0.1 registerospf
[r6]ospf 1 router-id 6.6.6.6
[r6-ospf-1]area 0
[r6-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.3.255
[r6-ospf-1-area-0.0.0.0]q
[r6-ospf-1]area 2
[r6-ospf-1-area-0.0.0.2]network 172.16.65.9 0.0.0.0路由汇总
[r6]ospf 1
[r6-ospf-1]area 2
[r6-ospf-1-area-0.0.0.2]abr-summary 172.16.64.0 255.255.224.0[r6]ospf 1
[r6-ospf-1]a 2
[r6-ospf-1-area-0.0.0.2]nssa no-summary[r6]ip route-static 172.16.64.0 19 NULL 0
nat
[r6]acl 2000
[r6-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[r6-acl-basic-2000]q
[r6]int Serial 4/0/0
[r6-Serial4/0/0]nat outbound 2000hello时间
[r6]int t0/0/0
[r6-Tunnel0/0/0]ospf timer hello 10
r7
[r7]int Tunnel 0/0/0
[r7-Tunnel0/0/0]ip add 172.16.0.4 29
[r7-Tunnel0/0/0]tunnel-protocol gre p2mp
[r7-Tunnel0/0/0]source GigabitEthernet 0/0/0
Apr 26 2024 1:16:42-08:00 r7 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
on the interface Tunnel0/0/0 has entered the UP state.
[r7-Tunnel0/0/0]nhrp network-id 100
[r7-Tunnel0/0/0]nhrp entry 172.16.0.1 34.0.0.1 registerospf
[r7]ospf 1 router-id 7.7.7.7
[r7-ospf-1]area 0
[r7-ospf-1-area-0.0.0.0]network 172.16.0.0 0.0.3.255
[r7-ospf-1-area-0.0.0.0]q
[r7-ospf-1]area 3
[r7-ospf-1-area-0.0.0.3]network 172.16.97.9 0.0.0.0路由汇总
[r7]ospf 1
[r7-ospf-1]area 3
[r7-ospf-1-area-0.0.0.3]abr-summary 172.16.96.0 255.255.224.0[r7]ospf 1
[r7-ospf-1]a 3
[r7-ospf-1-area-0.0.0.3]nssa no-summary[r7]ip route-static 172.16.96.0 19 NULL 0
nat
[r7]acl 2000
[r7-acl-basic-2000]rule permit source 172.16.0.0 0.0.255.255
[r7]int GigabitEthernet 0/0/0
[r7-GigabitEthernet0/0/0]nat outbound 2000hello时间
[r7]int t0/0/0
[r7-Tunnel0/0/0]ospf timer hello 10
r8
ospf
[r8]ospf 1 router-id 8.8.8.8
[r8-ospf-1]area 3
[r8-ospf-1-area-0.0.0.3]network 172.16.0.0 0.0.255.255汇总
[r8]ospf 1
[r8-ospf-1]a 3
[r8-ospf-1-area-0.0.0.3]nssa
r9
ospf
[r9]ospf 1 router-id 9.9.9.9
[r9-ospf-1]area 3
[r9-ospf-1-area-0.0.0.3]network 172.16.97.18 0.0.0.0
[r9-ospf-1]area 4
[r9-ospf-1-area-0.0.0.4]network 172.16.128.0 0.0.3.255域外路由
[r9]ospf 1
[r9-ospf-1]area 4
[r9-ospf-1-area-0.0.0.4]undo net 172.16.128.0 0.0.3.255
[r9-ospf-1-area-0.0.0.4]q
[r9-ospf-1]undo area 4
[r9-ospf-1]q
[r9]ospf 2 router-id 9.9.9.9
[r9-ospf-2]area 4
[r9-ospf-2-area-0.0.0.4]network 172.16.128.0 0.0.3.255[r9]ospf 1
[r9-ospf-1]import-route ospf 2
[r9-ospf-1]q
[r9]ospf 2
[r9-ospf-2]default-route-advertise路由汇总
[r9]ospf 1
[r9-ospf-1]asbr-summary 172.16.128.0 255.255.224.0[r9]ospf 1
[r9-ospf-1]a 3
[r9-ospf-1-area-0.0.0.3]nssa[r9]ip route-static 172.16.128.0 19 NULL 0
r10
ospf
[r10]ospf 1 router-id 10.10.10.10
[r10-ospf-1]area 4
[r10-ospf-1-area-0.0.0.4]network 172.16.0.0 0.0.255.255域外路由
[r10]ospf 1
[r10-ospf-1]area 4
[r10-ospf-1-area-0.0.0.4]undo network 172.16.0.0 0.0.255.255
[r10-ospf-1-area-0.0.0.4]q
[r10-ospf-1]undo a 4
[r10-ospf-1]
[r10-ospf-1]q
[r10]ospf 2 router-id 10.10.10.10
[r10-ospf-2]area 4
[r10-ospf-2-area-0.0.0.4]network 172.16.0.0 0.0.255.255[r10]ip route-static 0.0.0.0 0 172.16.129.9
r11
ospf
[r11]ospf 1 router-id 11.11.11.11
[r11-ospf-1]area 2
[r11-ospf-1-area-0.0.0.2]network 172.16.0.0 0.0.255.255汇总
[r11]ospf 1
[r11-ospf-1]a 2
[r11-ospf-1-area-0.0.0.2]nssa
r12
ospf
[r12]ospf 1 router-id 12.12.12.12
[r12-ospf-1]area 2
[r12-ospf-1-area-0.0.0.2]network 172.16.65.18 0.0.0.0
[r12]rip 1
[r12-rip-1]v 2
[r12-rip-1]network 172.16.0.0路由汇总
[r12]ospf 1
[r12-ospf-1]asbr-summary 172.16.160.0 255.255.224.0[r12]ospf 1
[r12-ospf-1]a 2
[r12-ospf-1-area-0.0.0.2]nssa[r12]ip route-static 172.16.160.0 19 NULL 0
验证
接口环回配置
r1ping全网