IP OSPF综合实验

要求:

1、R4为ISP,只能配置IP地址,与其他直连设备间均使用公有IP
2、R3-R5/6/7为MGRE环境,R3为中心站点
3、整个OSPF环境基于172.16.0.0/16划分
4、所有设备均可访问R4环回
5、减少LSA更新量,加快收敛,保障更新安全
6、全网可达

分析:

1、划分IP地址并配置

1.1划分IP

1.1.1有三个区域与骨干区域相连,所以分为4个网段

172.16.0.0/18----->area 0

172.16.64.0/18----->area 1

172.16.128.0/18----->area 2

172.16.192.0/18----->area 3/4

1.1.2 area 0需要8个网段

172.16.0.0/21----->R3-R4

172.16.8.0/21----->R4-R5

172.16.16.0/21----->R4-R6

172.16.24.0/21----->R4-R7

172.16.32.0/21----->R4环回

172.16.40.0/21----->R5环回

172.16.48.0/21----->R6环回

172.16.56.0/21----->R7环回

1.1.3 area 1需要4个网段

172.16.64.0/20----->R1环回

172.16.80.0/20----->R2环回

172.16.96.0/20----->R1-R2-R3

172.16.112.0/20----->R3环回

1.1.4 area 2需要3个网段

172.16.128.0/20----->R6-R11

172.16.144.0/20----->R11环回

172.16.160.0/20----->R11-R12

172.16.176.0/20----->保留

1.1.5 将172.16.192.0/18分给area 3和area 4

172.16.192.0/19----->area 3

172.16.224.0/19----->area 4

1.1.5.1 area 3需要3个网段

172.16.192.0/21----->R7-R8

172.16.200.0/21----->R8环回

172.16.208.0/21----->R8-R9

172.16.216.0/21----->保留

1.1.5.2 area 4需要三个网段

172.16.224.0/21----->R9环回

172.16.232.0/21----->R9-R10

172.16.240.0/21----->R10环回

172.16.248.0/21----->保留

1.2ripIP地址

192.168.1.0/24

192.168.2.0/24

1.3MGRE虚拟网段

192.168.4.0/24

1.4配置

AR1

[AR1]int l 0
[AR1-LoopBack0]ip add 172.16.64.1 20
[AR1-LoopBack0]int g 0/0/0
[AR1-GigabitEthernet0/0/0]ip add 172.16.96.1 20

AR2

[AR2]int l 0
[AR2-LoopBack0]ip add 172.16.80.1 20
[AR2-LoopBack0]int g 0/0/0
[AR2-GigabitEthernet0/0/0]ip add 172.16.96.2 20

AR3

[AR3]int l 0
[AR3-LoopBack0]ip add 172.16.112.1 20
[AR3-LoopBack0]int g 0/0/0
[AR3-GigabitEthernet0/0/0]ip add 172.16.96.3 2
[AR3-GigabitEthernet0/0/0]q

[AR3]ip route-static 0.0.0.0 0 176.16.0.4
[AR3]int s 4/0/0
[AR3-Serial4/0/0]ip add 172.16.0.3 21

AR4

[AR4]int l 0
[AR4-LoopBack0]ip add 172.16.32.1 21
[AR4-LoopBack0]int s 4/0/0
[AR4-Serial4/0/0]ip add 172.16.0.4 21
[AR4-Serial4/0/0]int s 3/0/0
[AR4-Serial3/0/0]ip add 172.16.8.4 21
[AR4-Serial3/0/0]int s 3/0/1
[AR4-Serial3/0/1]ip add 172.16.16.4 21
[AR4-Serial3/0/1]int g 0/0/0
[AR4-GigabitEthernet0/0/0]ip add 172.16.24.4 21

AR5

[AR5]int l 0
[AR5-LoopBack0]ip add 172.16.40.1 21
[AR5-LoopBack0]int s 4/0/0
[AR5-Serial4/0/0]ip add 172.16.8.5 21
[AR5-Serial4/0/0]q
[AR5]ip route-static 0.0.0.0 0 172.16.8.4

AR6

[AR6]int l 0
[AR6-LoopBack0]ip add 172.16.48.1 21
[AR6-LoopBack0]int s 4/0/0
[AR6-Serial4/0/0]ip add 172.16.16.6 21
[AR6-Serial4/0/0]
Nov 27 2023 19:28:15-08:00 AR6 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol PP
P IPCP on the interface Serial4/0/0 has entered the UP state. 
[AR6-Serial4/0/0]q
[AR6]ip route-static 0.0.0.0 0 172.16.16.4

[AR6]int g 0/0/0
[AR6-GigabitEthernet0/0/0]ip add 172.16.128.6 20

AR7

[AR7]int g 0/0/0
[AR7-GigabitEthernet0/0/0]ip add 172.16.24.7 21
[AR7-GigabitEthernet0/0/0]int l 0
[AR7-LoopBack0]ip add 172.16.56.1 21
[AR7-LoopBack0]int g 0/0/1
[AR7-GigabitEthernet0/0/1]ip add 172.16.192.7 21
[AR7-GigabitEthernet0/0/1]q
[AR7]ip route-static 0.0.0.0 0 172.16.24.4

AR8

[AR8]int l 0
[AR8-LoopBack0]ip add 172.16.200.1 21
[AR8-LoopBack0]int g 0/0/0
[AR8-GigabitEthernet0/0/0]ip add 172.16.192.8 21
[AR8-GigabitEthernet0/0/0]int g 0/0/1
[AR8-GigabitEthernet0/0/1]ip add 172.16.208.8 21

AR9

[AR9]int g 0/0/0
[AR9-GigabitEthernet0/0/0]ip add 172.16.208.9 21
[AR9-GigabitEthernet0/0/0]int g 0/0/1
[AR9-GigabitEthernet0/0/1]ip add 172.16.232.9 21
[AR9-GigabitEthernet0/0/1]int l 0
[AR9-LoopBack0]ip add 172.16.224.1 21

AR10

[AR10]int g 0/0/0
[AR10-GigabitEthernet0/0/0]ip add 172.16.232.10 21
[AR10-GigabitEthernet0/0/0]int l 0
[AR10-LoopBack0]ip add 172.16.240.1 21

AR11

[AR11]int g 0/0/0
[AR11-GigabitEthernet0/0/0]ip add 172.16.128.11 20
[AR11-GigabitEthernet0/0/0]int g 0/0/1
[AR11-GigabitEthernet0/0/1]ip add 172.16.160.11 20
[AR11-GigabitEthernet0/0/1]int l 0
[AR11-LoopBack0]ip add 172.16.144.1 20

AR12

[AR12]int g 0/0/0
[AR12-GigabitEthernet0/0/0]ip add 172.16.160.12 20
[AR12-GigabitEthernet0/0/0]int l 1
[AR12-LoopBack1]ip add 192.168.1.1 24
[AR12-LoopBack1]int l 2
[AR12-LoopBack2]ip add 192.168.2.1 24

2、R3-R5/6/7为MGRE环境,R3为中心站点

配置:
AR3(中心)

[AR3]int t 0/0/0
[AR3-Tunnel0/0/0]ip add 192.168.4.3 24  
[AR3-Tunnel0/0/0]tunnel-protocol gre p2mp 
[AR3-Tunnel0/0/0]source 172.16.0.3

AR5

[AR5]int t 0/0/0
[AR5-Tunnel0/0/0]ip address 192.168.4.5 255.255.255.0 
[AR5-Tunnel0/0/0] tunnel-protocol gre p2mp
[AR5-Tunnel0/0/0]source 172.16.8.5

[AR5-Tunnel0/0/0] nhrp entry 192.168.4.3 172.16.0.3 register

AR6

[AR6]int t0/0/0
[AR6-Tunnel0/0/0]ip add 192.168.4.6 24
[AR6-Tunnel0/0/0]tunnel-protocol gre p2mp
[AR6-Tunnel0/0/0]source 172.16.16.6    
[AR6-Tunnel0/0/0]nhrp entry 192.168.4.3 172.16.0.3 registe

AR7

[AR7]int t 0/0/0
[AR7-Tunnel0/0/0]ip add 192.168.4.7 24    
[AR7-Tunnel0/0/0]tunnel-protocol gre p2mp
[AR7-Tunnel0/0/0]source 172.16.24.7
[AR7-Tunnel0/0/0]nhrp entry 192.168.4.3 172.16.0.3 register 

结果: 

3、 启动OSPF

3.1分别启动OSPF1和OSPF2

AR1

[AR1]ospf 1
[AR1-ospf-1]area 1
[AR1-ospf-1-area-0.0.0.1]network 172.16.64.1 0.0.0.0 
[AR1-ospf-1-area-0.0.0.1]network 172.16.96.1 0.0.0.0

AR2

[AR2]ospf 1
[AR2-ospf-1]area 1  
[AR2-ospf-1-area-0.0.0.1]network 172.16.80.1 0.0.0.0
[AR2-ospf-1-area-0.0.0.1]network 172.16.96.2 0.0.0.0

AR3

[AR3]ospf 1 
[AR3-ospf-1]area 1
[AR3-ospf-1-area-0.0.0.1]network 172.16.96.3 0.0.0.0

[AR3-ospf-1-area-0.0.0.1]network 172.16.112.1 0.0.0.0
[AR3-ospf-1-area-0.0.0.1]q
[AR3-ospf-1]area 0
[AR3-ospf-1-area-0.0.0.0]network 172.16.0.3 0.0.0.0

AR5

[AR5]ospf 1
[AR5-ospf-1]area 0 
[AR5-ospf-1-area-0.0.0.0]network 172.16.40.1 0.0.0.0  
[AR5-ospf-1-area-0.0.0.0]network 172.16.8.5 0.0.0.0

AR6

[AR6]ospf 1
[AR6-ospf-1]area 0
[AR6-ospf-1-area-0.0.0.0]network 172.16.48.1 0.0.0.0 
[AR6-ospf-1-area-0.0.0.0]network 172.16.16.6 0.0.0.0

[AR6-ospf-1]area 2
[AR6-ospf-1-area-0.0.0.2]network 172.16.128.6 0.0.0.0

AR7

[AR7]ospf 1  
[AR7-ospf-1]area 0
[AR7-ospf-1-area-0.0.0.0]network 172.16.56.1 0.0.0.0
[AR7-ospf-1-area-0.0.0.0]network 172.16.24.7 0.0.0.0

[AR7-ospf-1]area 3
[AR7-ospf-1-area-0.0.0.3]network 172.16.192.7 0.0.0.0

AR8

[AR8]ospf 1 
[AR8-ospf-1]area 3
[AR8-ospf-1-area-0.0.0.3]network 172.16.192.8 0.0.0.0

[AR8-ospf-1-area-0.0.0.3]network 172.16.208.8 0.0.0.0
[AR8-ospf-1-area-0.0.0.3]network 172.16.200.1 0.0.0.0

AR9

[AR9]ospf 1 
[AR9-ospf-1]area 3
[AR9-ospf-1-area-0.0.0.3]network 172.16.208.9 0.0.0.0
[AR9-ospf-1-area-0.0.0.3]q
[AR9]ospf 2
[AR9-ospf-2]area 4

[AR9-ospf-2-area-0.0.0.4]network 172.16.224.1 0.0.0.0
[AR9-ospf-2-area-0.0.0.4]network 172.16.232.9 0.0.0.0

AR10

[AR10]ospf 2
[AR10-ospf-2]area 4
[AR10-ospf-2-area-0.0.0.4]network 172.16.232.10 0.0.0.0

[AR10-ospf-2-area-0.0.0.4]network 172.16.240.1 0.0.0.0

AR11

[AR11]ospf 1
[AR11-ospf-1]area 2

[AR11-ospf-1-area-0.0.0.2]network 172.16.160.11 0.0.0.0

[AR11-ospf-1-area-0.0.0.2]network 172.16.144.1 0.0.0.0 
[AR11-ospf-1-area-0.0.0.2]network 172.16.128.11 0.0.0.0

AR12

[AR12]ospf 1
[AR12-ospf-1]area 2
[AR12-ospf-1-area-0.0.0.2]network 172.16.160.12 0.0.0.0

3.2把OSPF1、2重发布

配置:
AR9

[AR9]ospf 1
[AR9-ospf-1]import-route  ospf 2
[AR9-ospf-1]q
[AR9]ospf 2 
[AR9-ospf-2]import-route ospf 1

4、启动RIP,配置Net,并使所有设备均可访问R4环回

4.1启动RIP

配置
AR12

[AR12]rip 1
[AR12-rip-1]ver 2
[AR12-rip-1]network 192.168.1.0 
[AR12-rip-1]network 192.168.2.0
[AR12-rip-1]import-route ospf 1
[AR12-rip-1]q
[AR12]ospf 1
[AR12-ospf-1]import-route rip 1

4.2配置Net

AR3

[AR3]acl 2000
[AR3-acl-basic-2000]dis th
[V200R003C00]
#
acl number 2000  
 rule 5 permit 
#
return

AR6

[AR6]acl 2000
[AR6-acl-basic-2000]dis th
[V200R003C00]
#
acl number 2000  
 rule 5 permit 
#
return

AR7

[AR7]acl 2000
[AR7-acl-basic-2000]rule permit source any

4.3所有设备均可以访问R4环回

5、 减少LSA更新量,设置特殊区域

5.1汇总明细路由

AR3

[AR3]ospf 1
[AR3-ospf-1]area 1
[AR3-ospf-1-area-0.0.0.1]abr-summary 172.16.64.0 255.255.192.0

AR6

[AR6]ospf 1
[AR6-ospf-1]area 2
[AR6-ospf-1-area-0.0.0.2]abr-summary  172.16.128.0 255.255.192.0

AR7 

[AR7]ospf 1
[AR7-ospf-1]area 3   
[AR7-ospf-1-area-0.0.0.3]abr-summary 172.16.192.0 255.255.224.0

 结果:

5.2 设置特殊区域

AR3(Totally Stub)

[AR3]ospf 1 
[AR3-ospf-1]area 1  
[AR3-ospf-1-area-0.0.0.1]stub no-summary 

AR6(NSSA)

[AR6]ospf 1
[AR6-ospf-1]area 2

[AR6-ospf-1-area-0.0.0.2]nssa

AR11

[AR11]ospf 1
[AR11-ospf-1]area 2
[AR11-ospf-1-area-0.0.0.2]nssa

AR12

[AR12]ospf 1 
[AR12-ospf-1]area 2
[AR12-ospf-1-area-0.0.0.2]nssa

 AR7(Nssa)

[AR7]ospf 1
[AR7-ospf-1]area 3

[AR7-ospf-1-area-0.0.0.3]nssa

AR8

[AR8]ospf 1
[AR8-ospf-1]area 3
[AR8-ospf-1-area-0.0.0.3]nssa

AR9

[AR9]ospf 1
[AR9-ospf-1]area 3
[AR9-ospf-1-area-0.0.0.3]nssa

6、全网可达

评论 1
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值