实验拓扑
实验需求
1.使用三种解决ospf不规则区域的方法
2.5678加上换的路由器使用MGRE
3.使用各种优化
4.全网可达
5.保证更新安全
6.使用地址为172.16.0.0/16合理划分
实验思路
- 配置IP地址
实验步骤
配置IP地址
以R1为例,配置接口ipi地址、并为每个路由添加一个环回地址
<Huawei>sys
[Huawei]sys r1
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip address 192.168.1.1 24
[r1-GigabitEthernet0/0/0]int l0
[r1-LoopBack0]ip address 1.1.1.1 32
配置OSPF2并在R3配置,实现与外网联通
以R2为例
[r2]ospf 2 router-id 2.2.2.2
[r2-ospf-2]area 0
[r2-ospf-2-area-0.0.0.0]network 0.0.0.0 255.255.255.255
R3的配置
[r3]ospf 2 router-id 3.3.3.3
[r3-ospf-2]area 0
[r3-ospf-2-area-0.0.0.0]network 192.168.1.3 0.0.0.0
[r3-ospf-2-area-0.0.0.0]network 3.3.3.3 0.0.0.0
[r3-ospf-2-area-0.0.0.0]q
[r3-ospf-2]q
[r3]ip route-static 0.0.0.0 0 34.1.1.2
[r3]ospf 2
[r3-ospf-2]default-route-advertise
[r3-ospf-2]q
[r3]acl 2000
[r3-acl-basic-2000]rule permit source any
[r3-acl-basic-2000]q
[r3]int GigabitEthernet 0/0/1
[r3-GigabitEthernet0/0/1]nat outbound 2000
测试
配置OSPF1
以R5为例
[r5]ospf 1 router-id 5.5.5.5
[r5-ospf-1]area 0
[r5-ospf-1-area-0.0.0.0]network 172.16.0.1 0.0.0.0
[r5-ospf-1-area-0.0.0.0]network 5.5.5.5 0.0.0.0
通过多进程双向重发布技术解决远离骨干的非骨干区域3
[r12]ospf 1 router-id 12.12.12.12
[r12-ospf-1]area 2
[r12-ospf-1-area-0.0.0.2]network 172.16.72.2 0.0.0.0
[r12-ospf-1-area-0.0.0.2]q
[r12-ospf-1]q
[r12]ospf 2 router-id 12.13.12.13
[r12-ospf-2]area 3
[r12-ospf-2-area-0.0.0.3]network 172.16.96.1 0.0.0.0
[r12-ospf-2-area-0.0.0.3]network 172.16.104.1 0.0.0.0
[r12-ospf-2-area-0.0.0.3]q
[r12-ospf-2]q
[r12]ospf 1
[r12-ospf-1]import-route ospf 2
通过虚链路解决远离骨干的非骨干区域5
R13配置
[r7]ospf 1
r13-ospf-1]area 4
[r13-ospf-1-area-0.0.0.4]vlink-peer 7.7.7.7
R7配置
[r7]ospf 1
[r7-ospf-1]area 4
[r7-ospf-1-area-0.0.0.4]vlink-peer 13.13.13.13
测试:
使用tunnel解决不连续的骨干连路
R3配置:
[r3]int t0/0/0
[r3-Tunnel0/0/0]tunnel-protocol gre
[r3-Tunnel0/0/0]source 34.1.1.1
[r3-Tunnel0/0/0]description 45.1.1.2
[r3-Tunnel0/0/0]ip address 11.1.1.1 24
[r3-Tunnel0/0/0]q
[r3]ip route-static 45.1.1.0 24 34.1.1.2
R5配置:
[r5]interface t0/0/0
[r5-Tunnel0/0/0]tunnel-protocol gre
[r5-Tunnel0/0/0]source 45.1.1.2
[r5-Tunnel0/0/0]description 34.1.1.1
[r5-Tunnel0/0/0]ip address 11.1.1.2 24
[r5-Tunnel0/0/0]q
[r5]ip route-static 34.1.1.0 24 45.1.1.1
R5/6/7/8配置MGRE
R5 中心站点配置
[r5]int t0/0/1
[r5-Tunnel0/0/1]tunnel-protocol gre p2mp
[r5-Tunnel0/0/1]source 172.16.0.1
[r5-Tunnel0/0/1]nhrp entry multicast dynamic
[r5-Tunnel0/0/1]nhrp network-id 100
[r5-Tunnel0/0/1]ip address 10.1.1.1 24
[r5-Tunnel0/0/1]q
[r5]ip route-static 172.16.8.0 21 172.16.0.2
[r5]ip route-static 172.16.24.0 21 172.16.0.2
[r5]ip route-static 172.16.16.0 21 172.16.0.2
以R6为例 分支站点配置
[r6]int t0/0/1
[r6-Tunnel0/0/1]tunnel-protocol gre p2mp
[r6-Tunnel0/0/1]source g0/0/0
[r6-Tunnel0/0/1]nhrp entry 10.1.1.1 172.16.0.1 register
[r6-Tunnel0/0/1]nhrp network-id 100
[r6-Tunnel0/0/1]ip address 10.1.1.2 24
[r6-Tunnel0/0/1]q
[r6]ip route-static 172.16.0.0 21 172.16.8.2
[r6]ip route-static 172.16.16.0 21 172.16.8.2
[r6]ip route-static 172.16.24.0 21 172.16.8.2
将其宣告到OSPF协议中
以R6为例
[r6]ospf 1
[r6-ospf-1]area 0
[r6-ospf-1-area-0.0.0.0]network 10.1.1.2 0.0.0.0
[r6-ospf-1-area-0.0.0.0]q
[r6-ospf-1]q
[r6]int t0/0/0
[r6-Tunnel0/0/1]ospf network-type broadcast
查看并测试: