OSPF动态配置网络环境

最新推荐文章于 2023-06-03 15:23:57 发布

捍胃者

最新推荐文章于 2023-06-03 15:23:57 发布

阅读量461

点赞数

文章标签：网络运维安全

本文链接：https://blog.csdn.net/weixin_69908581/article/details/125950728

版权

首先对每个路由ip配置以及环回配置（在此演示r1）：

[r1]interface LoopBack 0
[r1-LoopBack0]ip address 1.1.1.1 32

[r1]interface g0/0/0
[r1-GigabitEthernet0/0/0]ip address 192.168.1.1 24
[r1]interface g0/0/1
[r1-GigabitEthernet0/0/1]ip address 172.16.2.1 24
[r1]interface g0/0/2
[r1-GigabitEthernet0/0/2]ip address 12.1.1.1 24

要求：pc1234分别固定下发ip，用到之前的dhcp路由（演示一个池子）：

[r1]dhcp enable 
Info: The operation may take a few seconds. Please wait for a moment.done.
[r1]ip pool 1
Info: It's successful to create an IP address pool.
[r1-ip-pool-1]network 192.168.1.0 mask 255.255.255.0
[r1-ip-pool-1]gateway-list 192.168.1.1
[r1-ip-pool-1]dns-list 8.8.8.8
[r1-ip-pool-1]static-bind ip-address 192.168.1.11 mac-address 5489-9819-1B29
[r1-ip-pool-1]static-bind ip-address 192.168.1.22 mac-address 5489-9875-07D7

[r1]interface g0/0/0
[r1-GigabitEthernet0/0/0]dhcp select global

接下来，进行下一步。配置ospf路由并且查看路由表状态

[r1]ospf 100 router-id 1.1.1.1
[r1-ospf-100]area 1
[r1-ospf-100-area-0.0.0.1]network 1.1.1.1 0.0.0.0
[r1-ospf-100-area-0.0.0.1]network 12.1.1.1 0.0.0.0
Jul 23 2022 18:07:30-08:00 r1 %%01OSPF/4/NBR_CHANGE_E(l)[0]:Neighbor changes eve
nt: neighbor status changed. (ProcessId=25600, NeighborAddress=2.1.1.12, Neighbo
rEvent=HelloReceived, NeighborPreviousState=Down, NeighborCurrentState=Init) 
[r1-ospf-100-area-0.0.0.1]
Jul 23 2022 18:07:39-08:00 r1 %%01OSPF/4/NBR_CHANGE_E(l)[1]:Neighbor changes eve
nt: neighbor status changed. (ProcessId=25600, NeighborAddress=2.1.1.12, Neighbo
rEvent=2WayReceived, NeighborPreviousState=Init, NeighborCurrentState=ExStart) 
[r1-ospf-100-area-0.0.0.1]
Jul 23 2022 18:07:39-08:00 r1 %%01OSPF/4/NBR_CHANGE_E(l)[2]:Neighbor changes eve
nt: neighbor status changed. (ProcessId=25600, NeighborAddress=2.1.1.12, Neighbo
rEvent=NegotiationDone, NeighborPreviousState=ExStart, NeighborCurrentState=Exch
ange) 
[r1-ospf-100-area-0.0.0.1]
Jul 23 2022 18:07:39-08:00 r1 %%01OSPF/4/NBR_CHANGE_E(l)[3]:Neighbor changes eve
nt: neighbor status changed. (ProcessId=25600, NeighborAddress=2.1.1.12, Neighbo
rEvent=ExchangeDone, NeighborPreviousState=Exchange, NeighborCurrentState=Loadin
g) 
[r1-ospf-100-area-0.0.0.1]
Jul 23 2022 18:07:39-08:00 r1 %%01OSPF/4/NBR_CHANGE_E(l)[4]:Neighbor changes eve
nt: neighbor status changed. (ProcessId=25600, NeighborAddress=2.1.1.12, Neighbo
rEvent=LoadingDone, NeighborPreviousState=Loading, NeighborCurrentState=Full)

[r1]display ip routing-table 
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Routing Tables: Public
         Destinations : 22       Routes : 22       

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

        1.1.1.1/32  Direct  0    0           D   127.0.0.1       LoopBack0
        2.2.2.2/32  OSPF    10   1           D   12.1.1.2        GigabitEthernet
0/0/2
        3.3.3.3/32  OSPF    10   2           D   12.1.1.2        GigabitEthernet
0/0/2
        4.4.4.4/32  OSPF    10   3           D   12.1.1.2        GigabitEthernet
0/0/2
        6.6.6.6/32  OSPF    10   3           D   12.1.1.2        GigabitEthernet
0/0/2
       12.1.1.0/24  Direct  0    0           D   12.1.1.1        GigabitEthernet
0/0/2
       12.1.1.1/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/2
     12.1.1.255/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/2
       23.1.1.0/24  OSPF    10   2           D   12.1.1.2        GigabitEthernet
0/0/2
       45.1.1.0/24  OSPF    10   4           D   12.1.1.2        GigabitEthernet
0/0/2
       56.1.1.0/24  OSPF    10   4           D   12.1.1.2        GigabitEthernet
0/0/2
      123.1.1.0/24  OSPF    10   3           D   12.1.1.2        GigabitEthernet
0/0/2
      127.0.0.0/8   Direct  0    0           D   127.0.0.1       InLoopBack0
      127.0.0.1/32  Direct  0    0           D   127.0.0.1       InLoopBack0
127.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0
     172.16.2.0/24  Direct  0    0           D   172.16.2.1      GigabitEthernet
0/0/1
     172.16.2.1/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/1
   172.16.2.255/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/1
    192.168.1.0/24  Direct  0    0           D   192.168.1.1     GigabitEthernet
0/0/0
    192.168.1.1/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/0
  192.168.1.255/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/0
255.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0

[r1]display ospf peer 

	 OSPF Process 100 with Router ID 1.1.1.1
		 Neighbors 

 Area 0.0.0.1 interface 12.1.1.1(GigabitEthernet0/0/2)'s neighbors
 Router ID: 2.2.2.2          Address: 12.1.1.2        
   State: Full  Mode:Nbr is  Master  Priority: 1
   DR: 12.1.1.1  BDR: 12.1.1.2  MTU: 0    
   Dead timer due in 33  sec 
   Retrans timer interval: 5 
   Neighbor is up for 00:18:28     
   Authentication Sequence: [ 0 ]

要求：r4环回不可宣告全网可达

[r4-ospf-100]display this 
[V200R003C00]
#
ospf 100 router-id 4.4.4.4 
 area 0.0.0.0 
  network 4.4.4.4 0.0.0.0 
  network 123.1.1.2 0.0.0.0 
 area 0.0.0.2 
  network 45.1.1.1 0.0.0.0 
#

[r4-ospf-100]area 0
[r4-ospf-100-area-0.0.0.0]undo network 4.4.4.4 0.0.0.0
[r4-ospf-100-area-0.0.0.0]qu
[r4-ospf-100]dis	
[r4-ospf-100]display this
[V200R003C00]
#
ospf 100 router-id 4.4.4.4 
 area 0.0.0.0 
  network 123.1.1.2 0.0.0.0 
 area 0.0.0.2 
  network 45.1.1.1 0.0.0.0 
#
return

那么为了全网可达我们就要在r4进行强制下方缺省路由：

[r4-ospf-100]default-route-advertise always 

[r1]display ip routing-table 
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Routing Tables: Public
         Destinations : 22       Routes : 22       

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

        0.0.0.0/0   O_ASE   150  1           D   12.1.1.2        GigabitEthernet
0/0/2
        1.1.1.1/32  Direct  0    0           D   127.0.0.1       LoopBack0
        2.2.2.2/32  OSPF    10   1           D   12.1.1.2        GigabitEthernet
0/0/2
        3.3.3.3/32  OSPF    10   2           D   12.1.1.2        GigabitEthernet
0/0/2
        6.6.6.6/32  OSPF    10   3           D   12.1.1.2        GigabitEthernet
0/0/2
       12.1.1.0/24  Direct  0    0           D   12.1.1.1        GigabitEthernet
0/0/2
       12.1.1.1/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/2
     12.1.1.255/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/2
       23.1.1.0/24  OSPF    10   2           D   12.1.1.2        GigabitEthernet
0/0/2
       45.1.1.0/24  OSPF    10   4           D   12.1.1.2        GigabitEthernet
0/0/2
       56.1.1.0/24  OSPF    10   4           D   12.1.1.2        GigabitEthernet
0/0/2
      123.1.1.0/24  OSPF    10   3           D   12.1.1.2        GigabitEthernet
0/0/2
      127.0.0.0/8   Direct  0    0           D   127.0.0.1       InLoopBack0
      127.0.0.1/32  Direct  0    0           D   127.0.0.1       InLoopBack0
127.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0
     172.16.2.0/24  Direct  0    0           D   172.16.2.1      GigabitEthernet
0/0/1
     172.16.2.1/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/1
   172.16.2.255/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/1
    192.168.1.0/24  Direct  0    0           D   192.168.1.1     GigabitEthernet
0/0/0
    192.168.1.1/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/0
  192.168.1.255/32  Direct  0    0           D   127.0.0.1       GigabitEthernet
0/0/0
255.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0

[r1]ping 4.4.4.4
  PING 4.4.4.4: 56  data bytes, press CTRL_C to break
    Reply from 4.4.4.4: bytes=56 Sequence=1 ttl=253 time=70 ms
    Reply from 4.4.4.4: bytes=56 Sequence=2 ttl=253 time=70 ms
    Reply from 4.4.4.4: bytes=56 Sequence=3 ttl=253 time=40 ms
    Reply from 4.4.4.4: bytes=56 Sequence=4 ttl=253 time=60 ms
    Reply from 4.4.4.4: bytes=56 Sequence=5 ttl=253 time=60 ms

  --- 4.4.4.4 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 40/60/70 ms

由此已实现全网可达。

要求：r3456之间只有r3为dr没有bdr（演示r6）

[r6]interface g0/0/1
[r6-GigabitEthernet0/0/1]ospf dr-priority 0

[r6]display ospf peer 

	 OSPF Process 100 with Router ID 6.6.6.6
		 Neighbors 

 Area 0.0.0.0 interface 123.1.1.4(GigabitEthernet0/0/1)'s neighbors
 Router ID: 3.3.3.3          Address: 123.1.1.1       
   State: Full  Mode:Nbr is  Slave  Priority: 1
   DR: 123.1.1.1  BDR: None   MTU: 0    
   Dead timer due in 37  sec 
   Retrans timer interval: 0 
   Neighbor is up for 00:00:48     
   Authentication Sequence: [ 0 ]

要求：保证更新安全加快收敛速度（所有接口做如下操作）

[r1]interface g0/0/0
[r1-GigabitEthernet0/0/0]ospf timer hello 5

要求area 1区域明文认证 area 2密文认证

[r1]ospf 100
[r1-ospf-100]area 1i	
[r1-ospf-100-area-0.0.0.1]authentication-mode simple cipher 123

[r2]ospf 100 
[r2-ospf-100]area 1
[r2-ospf-100-area-0.0.0.1]authentication-mode simple cipher 123

[r3]ospf 100
[r3-ospf-100]ar 1
[r3-ospf-100-area-0.0.0.1]authentication-mode simple cipher 123


[r4]ospf 100
[r4-ospf-100]ar 2
[r4-ospf-100-area-0.0.0.2]authentication-mode simple cipher 123	
[r4-ospf-100-area-0.0.0.2]authentication-mode md5 

[r5]ospf 100
[r5-ospf-100]ar 2
[r5-ospf-100-area-0.0.0.2]authentication-mode  simple cipher 123
[r5-ospf-100-area-0.0.0.2]authentication-mode md5 

[r6]ospf 100
[r6-ospf-100]ar 2
[r6-ospf-100-area-0.0.0.2]authentication-mode simple cipher 123
[r6-ospf-100-area-0.0.0.2]authentication-mode md5

欢迎各位评论区指正~~~