【无标题】

2377388ee8864daf878768bfc6e3a29c.png

 

1.172.16.0.0/16 划分网络

子网掩码为24

划分网段为172.16.1.0 24  172.16.2.0 24     172.16.3.0 24   172.16.4.0 24

[Huawei]sy r1
[r1]inter	
[r1]interface g0/0/0
[r1-GigabitEthernet0/0/0]ip ad	
[r1-GigabitEthernet0/0/0]ip address 11.1.1.1 24
Nov 27 2022 13:23:17-08:00 r1 %%01IFNET/4/LINK_STATE(l)[2]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r1-GigabitEthernet0/0/0]qu
[r1]inter	
[r1]interface g0/0/1
[r1-GigabitEthernet0/0/1]ip ad	
[r1-GigabitEthernet0/0/1]ip address 10.1.1.1 24
Nov 27 2022 13:23:37-08:00 r1 %%01IFNET/4/LINK_STATE(l)[3]:The line protocol IP 
on the interface GigabitEthernet0/0/1 has entered the UP state. 
[r1-GigabitEthernet0/0/1]qu
[r1]inter	
[r1]interface lo	
[r1]interface LoopBack 0
[r1-LoopBack0]ip ad	
[r1-LoopBack0]ip address 1.1.1.1 32
[r1-LoopBack0]qu
[r1]

[Huawei]sy r2
[r2]inter	
[r2]interface g0/0/0
[r2-GigabitEthernet0/0/0]ip ad	
[r2-GigabitEthernet0/0/0]ip address 10.1.1.2 24
[r2-GigabitEthernet0/0/0]
Nov 27 2022 13:24:53-08:00 r2 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r2-GigabitEthernet0/0/0]qu
[r2]inter	
[r2]interface g0/0/1
[r2-GigabitEthernet0/0/1]ip ad	
[r2-GigabitEthernet0/0/1]ip address 172.16.1.1 24
Nov 27 2022 13:26:09-08:00 r2 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP 
on the interface GigabitEthernet0/0/1 has entered the UP state. 
[r2-GigabitEthernet0/0/1]qu
[r2]inter	
[r2]interface lo	
[r2]interface LoopBack 0
[r2-LoopBack0]ip ad	
[r2-LoopBack0]ip address 2.2.2.2 32
[r2-LoopBack0]qu

[Huawei]sy r3
[r3]inter	
[r3]interface g0/0/0
[r3-GigabitEthernet0/0/0]ip aad	
[r3-GigabitEthernet0/0/0]ip ad	
[r3-GigabitEthernet0/0/0]ip address 172.16.1.2 24
Nov 27 2022 13:27:33-08:00 r3 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r3-GigabitEthernet0/0/0]qu
[r3]inter	
[r3]interface g0/0/1
[r3-GigabitEthernet0/0/1]ip ad	
[r3-GigabitEthernet0/0/1]ip address 172.16.2.1 24
Nov 27 2022 13:28:05-08:00 r3 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP 
on the interface GigabitEthernet0/0/1 has entered the UP state. 
[r3-GigabitEthernet0/0/1]qu
[r3]inter	
[r3]interface lo	
[r3]interface LoopBack 0
[r3-LoopBack0]ip ad	
[r3-LoopBack0]ip address 3.3.3.3 32
[r3-LoopBack0]qu

[Huawei]sy r4
[r4]inter	
[r4]interface g0/0/0
[r4-GigabitEthernet0/0/0]ip ad	
[r4-GigabitEthernet0/0/0]ip address 172.16.2.2 24
Nov 27 2022 13:28:54-08:00 r4 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r4-GigabitEthernet0/0/0]qu
[r4]inter	
[r4]interface g0/0/1
[r4-GigabitEthernet0/0/1]ip ad	
[r4-GigabitEthernet0/0/1]ip address 172.16.3.0 24
Error: The specified IP address is invalid.
[r4-GigabitEthernet0/0/1]ip address 172.16.3.1 24
[r4-GigabitEthernet0/0/1]
Nov 27 2022 13:29:25-08:00 r4 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP 
on the interface GigabitEthernet0/0/1 has entered the UP state. 
[r4-GigabitEthernet0/0/1]qu
[r4]in	
[r4]info-center
[r4]interface
[r4]info-center
[r4]interface lo	
[r4]interface LoopBack 0
[r4-LoopBack0]ip ad	
[r4-LoopBack0]ip address 4.4.4.4 32
[r4-LoopBack0]qu



[Huawei]sy r5
[r5]inter	
[r5]interface g0/0/0
[r5-GigabitEthernet0/0/0]ip ad	
[r5-GigabitEthernet0/0/0]ip address 172.16.2.3 24
Nov 27 2022 13:30:21-08:00 r5 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r5-GigabitEthernet0/0/0]qu
[r5]inter	
[r5]interface g0/0/1
[r5-GigabitEthernet0/0/1]ip ad	
[r5-GigabitEthernet0/0/1]ip address 172.16.4.1 24
Nov 27 2022 13:30:43-08:00 r5 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP 
on the interface GigabitEthernet0/0/1 has entered the UP state. 
[r5-GigabitEthernet0/0/1]qu
[r5]inter	
[r5]interface lo	
[r5]interface LoopBack 0
[r5-LoopBack0]ip ad	
[r5-LoopBack0]ip address 5.5.5.5 32
[r5-LoopBack0]qu

[Huawei]sy r6
[r6]inter	
[r6]interface g0/0/0
[r6-GigabitEthernet0/0/0]ip ad	
[r6-GigabitEthernet0/0/0]ip address 172.16.4.2 24
[r6-GigabitEthernet0/0/0]
Nov 27 2022 13:35:01-08:00 r6 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r6-GigabitEthernet0/0/0]qu
[r6]inter	
[r6]interface lo	
[r6]interface LoopBack 0
[r6-LoopBack0]ip ad	
[r6-LoopBack0]ip address 6.6.6.6 32
[r6-LoopBack0]qu


[Huawei]sy r7
[r7]inter	
[r7]interface g0/0/0
[r7-GigabitEthernet0/0/0]ip ad	
[r7-GigabitEthernet0/0/0]ip address 172.16.3.2 24
Nov 27 2022 13:32:31-08:00 r7 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP 
on the interface GigabitEthernet0/0/0 has entered the UP state. 
[r7-GigabitEthernet0/0/0]qu
[r7]inter	
[r7]interface lo	
[r7]interface LoopBack 0
[r7-LoopBack0]ip ad	
[r7-LoopBack0]ip address 7.7.7.7 32
[r7-LoopBack0]qu




2.使用ospf协议合理规划区域保证更新安全

[r2]ospf 1
[r2-ospf-1]ro	
[r2-ospf-1]route-tag 
[r2-ospf-1]qu
[r2]os	
[r2]ospf 1 ro	
[r2]ospf 1 router-id 2.2.2.2
Info: The configuration succeeded. You need to restart the OSPF process to valid
ate the new router ID.
[r2-ospf-1]ar	
[r2-ospf-1]area 1
[r2-ospf-1-area-0.0.0.1]net	
[r2-ospf-1-area-0.0.0.1]network 172.16.1.1 0.0.0.0
[r2-ospf-1-area-0.0.0.1]


[r3]ospf 1 ro	
[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1]ar	
[r3-ospf-1]area 1
[r3-ospf-1-area-0.0.0.1]net	
[r3-ospf-1-area-0.0.0.1]network 172.16.1.2 0.0.0.0
[r3-ospf-1-area-0.0.0.1]qu
[r3-ospf-1]qu
[r3]os	
[r3]ospf 1 ro	
[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1]ar	
[r3-ospf-1]area 0
[r3-ospf-1-area-0.0.0.0]net	
[r3-ospf-1-area-0.0.0.0]network 172.16.2.1 0.0.0.0
[r3-ospf-1-area-0.0.0.0]qu
[r3-ospf-1]qu

[r4]os	
[r4]ospf 1 ro	
[r4]ospf 1 router-id 4.4.4.4
[r4-ospf-1]ar	
[r4-ospf-1]area 0
[r4-ospf-1-area-0.0.0.0]net	
[r4-ospf-1-area-0.0.0.0]network 172.16.2.2 0.0.0.0
[r4-ospf-1-area-0.0.0.0]qu
[r4-ospf-1]ar	
[r4-ospf-1]area 2
[r4-ospf-1-area-0.0.0.2]net	
[r4-ospf-1-area-0.0.0.2]network 172.16.3.1 0.0.0.0


[r5]ospf 1 ro	
[r5]ospf 1 router-id 5.5.5.5
[r5-ospf-1]ar	
[r5-ospf-1]area 0
[r5-ospf-1-area-0.0.0.0]net	
[r5-ospf-1-area-0.0.0.0]network 172.16.2.3 0.0.0.0
[r5-ospf-1-area-0.0.0.0]qu
r5-ospf-1]
[r5-ospf-1]ar	
[r5-ospf-1]area 3
[r5-ospf-1-area-0.0.0.3]net	
[r5-ospf-1-area-0.0.0.3]network 172.16.4.1 0.0.0.0
[r5-ospf-1-area-0.0.0.3]qu

r6]ospf 1 ro	
[r6]ospf 1 router-id 6.6.6.6
[r6-ospf-1]ar	
[r6-ospf-1]area 3
[r6-ospf-1-area-0.0.0.3]net	
[r6-ospf-1-area-0.0.0.3]network 172.16.4.2 0.0.0.0
[r6-ospf-1-area-0.0.0.3]qu

[r7]ospf 1 ro	
[r7]ospf 1 router-id 7.7.7.7
[r7-ospf-1]ar	
[r7-ospf-1]area 2
[r7-ospf-1-area-0.0.0.2]net	
[r7-ospf-1-area-0.0.0.2]network 172.16.3.2 0.0.0.0
[r7-ospf-1-area-0.0.0.2]qu


3.加快收敛速度

r2]interface g0/0/1
[r2-GigabitEthernet0/0/1]os	
[r2-GigabitEthernet0/0/1]ospf ti	
[r2-GigabitEthernet0/0/1]ospf timer he	
[r2-GigabitEthernet0/0/1]ospf timer hello 5
[r2-GigabitEthernet0/0/1]os	
[r2-GigabitEthernet0/0/1]ospf ti	
[r2-GigabitEthernet0/0/1]ospf timer  DE	
[r2-GigabitEthernet0/0/1]ospf timer  dead 20


[r3]interface g0/0/0
[r3-GigabitEthernet0/0/0]os	
[r3-GigabitEthernet0/0/0]ospf ti	
[r3-GigabitEthernet0/0/0]ospf timer he	
[r3-GigabitEthernet0/0/0]ospf timer hello 5
[r3-GigabitEthernet0/0/0]os	
[r3-GigabitEthernet0/0/0]ospf t
 [r3-GigabitEthernet0/0/0]ospf timer  he	
[r3-GigabitEthernet0/0/0]ospf timer  hello 20
[r3-GigabitEthernet0/0/0]qu
[r3]inter	
[r3]interface g0/0/1
[r3-GigabitEthernet0/0/1]os	
[r3-GigabitEthernet0/0/1]ospf ti	
[r3-GigabitEthernet0/0/1]ospf timer he	
[r3-GigabitEthernet0/0/1]ospf timer hello 5
[r3-GigabitEthernet0/0/1]os	
[r3-GigabitEthernet0/0/1]ospf ti	
[r3-GigabitEthernet0/0/1]ospf timer de	
[r3-GigabitEthernet0/0/1]ospf timer dead 20


[r4]interface g0/0/0
[r4-GigabitEthernet0/0/0]os	
[r4-GigabitEthernet0/0/0]ospf ti	
[r4-GigabitEthernet0/0/0]ospf timer he	
[r4-GigabitEthernet0/0/0]ospf timer hello 5
[r4-GigabitEthernet0/0/0]os	
[r4-GigabitEthernet0/0/0]ospf ti
[r4-GigabitEthernet0/0/0]ospf ti	
[r4-GigabitEthernet0/0/0]ospf timer de	
[r4-GigabitEthernet0/0/0]ospf timer dead 
[r4-GigabitEthernet0/0/0]ospf timer dead 20
[r4-GigabitEthernet0/0/0]qu
[r4]inter	
[r4]interface g0/0/1
[r4-GigabitEthernet0/0/1]
[r4-GigabitEthernet0/0/1]os	
[r4-GigabitEthernet0/0/1]ospfti	
[r4-GigabitEthernet0/0/1]ospf ti	
[r4-GigabitEthernet0/0/1]ospf timer he	
[r4-GigabitEthernet0/0/1]ospf timer hello  5
[r4-GigabitEthernet0/0/1]os	
[r4-GigabitEthernet0/0/1]ospf ti	
[r4-GigabitEthernet0/0/1]ospf timer de	
[r4-GigabitEthernet0/0/1]ospf timer dead 20

[r5]interface g0/0/0
[r5-GigabitEthernet0/0/0]os	
[r5-GigabitEthernet0/0/0]ospf ti	
[r5-GigabitEthernet0/0/0]ospf timer he	
[r5-GigabitEthernet0/0/0]ospf timer hello 5
[r5-GigabitEthernet0/0/0]os 
[r5-GigabitEthernet0/0/0]ospf timer  
[r5-GigabitEthernet0/0/0]ospf timer  de
[r5-GigabitEthernet0/0/0]ospf timer  de	
[r5-GigabitEthernet0/0/0]ospf timer  dead 20
[r5-GigabitEthernet0/0/0]qu
[r5]inter	
[r5]interface g0/0/1
[r5-GigabitEthernet0/0/1]os	
[r5-GigabitEthernet0/0/1]ospf ti	
[r5-GigabitEthernet0/0/1]ospf timer  he	
[r5-GigabitEthernet0/0/1]ospf timer  hello 5
[r5-GigabitEthernet0/0/1]os	
[r5-GigabitEthernet0/0/1]ospf ti	
[r5-GigabitEthernet0/0/1]ospf timer  de	
[r5-GigabitEthernet0/0/1]ospf timer  dead  20


[r6]interface g0/0/0
[r6-GigabitEthernet0/0/0]os	
[r6-GigabitEthernet0/0/0]ospf ti	
[r6-GigabitEthernet0/0/0]ospf timer he	
[r6-GigabitEthernet0/0/0]ospf timer hello 
[r6-GigabitEthernet0/0/0]ospf timer hello 
[r6-GigabitEthernet0/0/0]ospf timer hello 5
[r6-GigabitEthernet0/0/0]os	
[r6-GigabitEthernet0/0/0]ospf ti 
[r6-GigabitEthernet0/0/0]ospf ti	
[r6-GigabitEthernet0/0/0]ospf timer de	
[r6-GigabitEthernet0/0/0]ospf timer dead  
[r6-GigabitEthernet0/0/0]ospf timer dead
[r6-GigabitEthernet0/0/0]ospf timer dead 20

[r7]interface g0/0/0
[r7-GigabitEthernet0/0/0]os	
[r7-GigabitEthernet0/0/0]ospf ti	
[r7-GigabitEthernet0/0/0]ospf timer he	
[r7-GigabitEthernet0/0/0]ospf timer hello 5
[r7-GigabitEthernet0/0/0]os	
[r7-GigabitEthernet0/0/0]ospf ti
[r7-GigabitEthernet0/0/0]ospf timer de	
[r7-GigabitEthernet0/0/0]ospf timer dead 20

4.r3为dr没有bdr

[r4-GigabitEthernet0/0/0]os	
[r4-GigabitEthernet0/0/0]ospf pr	
[r4-GigabitEthernet0/0/0]ospf dr	
[r4-GigabitEthernet0/0/0]ospf dr-priority 0
<r4>re	
<r4>reset os	
<r4>reset ospf pr	
<r4>reset ospf process
[r5-GigabitEthernet0/0/0]os	
[r5-GigabitEthernet0/0/0]ospf pr	
[r5-GigabitEthernet0/0/0]ospf dr	
[r5-GigabitEthernet0/0/0]ospf dr-priority 0
<r5>reset os	
<r5>reset ospf pr	
<r5>reset ospf process 

[r5]display ospf peer 

	 OSPF Process 1 with Router ID 5.5.5.5
		 Neighbors 

 Area 0.0.0.0 interface 172.16.2.3(GigabitEthernet0/0/0)'s neighbors
 Router ID: 3.3.3.3          Address: 172.16.2.1      
   State: Full  Mode:Nbr is  Slave  Priority: 1
   DR: 172.16.2.1  BDR: None   MTU: 0    
   Dead timer due in 17  sec 
   Retrans timer interval: 0 
   Neighbor is up for 00:01:11     
   Authentication Sequence: [ 0 ] 

 Router ID: 4.4.4.4          Address: 172.16.2.2      
   State: 2-Way  Mode:Nbr is  Master  Priority: 0
   DR: 172.16.2.1  BDR: None   MTU: 0    
   Dead timer due in 18  sec 
   Retrans timer interval: 0 
   Neighbor is up for 00:00:00     
   Authentication Sequence: [ 0 ] 

5.pc2345自动获取ip 

pc1为外网pc要求可以互相访问

2274f6edfdd4417d847fbef9d3c1b4fd.png

de10c2847fc84b1e84a8b1964da9342b.png 

 3141f634c94c447d8f163b477768a6ea.png

 061ec035941449408b1e1f55ffc0a7d8.png

 2552b15adeb541d7b570092eb889edd0.png

 65eb8f7a800243dbae41293ca148214b.png

 8c62d4dded3e4e0793c06e145728cdbf.png

 6.r1为运营商只能配置ip地址

r2]ip ro	
[r2]ip route
[r2]ip route-static 0.0.0.0 0 10.1.1.1
[r2]os	
[r2]ospf 100
[r2-ospf-100]de	
[r2-ospf-100]default-route-advertise
[r2-ospf-100]qu

 

8.pc4可以ping通r2但不能登录r2

r5]acl 3000
[r5-acl-adv-3000]ru	
[r5-acl-adv-3000]rule de	
[r5-acl-adv-3000]rule deny tcp	
[r5-acl-adv-3000]rule deny tcp so	
[r5-acl-adv-3000]rule deny tcp source 172.16.4.1 de	
[r5-acl-adv-3000]rule deny tcp source 172.16.4.1 de		
[r5-acl-adv-3000]rule deny tcp source 192.168.3.1 0.0.0.0 de	
.1.1 0.0.0.0 de	
[r5-acl-adv-3000]rule deny tcp source 172.16.4.2 0.0.0.0 destination  172.16.1.1
 0.0.0.0 de	
[r5-acl-adv-3000]rule deny tcp source 172.16.4.2 0.0.0.0 destination  172.16.1.1
 0.0.0.0 destination-port eq 23
[r5-acl-adv-3000]ru	
[r5-acl-adv-3000]rule pe	
[r5-acl-adv-3000]rule permit ip	
[r5-acl-adv-3000]rule permit ip so	
[r5-acl-adv-3000]rule permit ip source an	
[r5-acl-adv-3000]rule permit ip source any 	
[r5-acl-adv-3000]rule permit ip source any destination any 
[r5-acl-adv-3000]qu
[r5]inter	
[r5]interface g0/0/1
[r5-GigabitEthernet0/0/1]tr	
[r5-GigabitEthernet0/0/1]tracert
[r5-GigabitEthernet0/0/1]traffic-filter in	
[r5-GigabitEthernet0/0/1]traffic-filter inbound ac	
[r5-GigabitEthernet0/0/1]traffic-filter inbound acl 3000
[r5-GigabitEthernet0/0/1]

9.pc3可以ping通pc5,pc5不能ping通pc3

[r6]acl 3000
[r6-acl-adv-3000]ro	
[r6-acl-adv-3000]rule de	
[r6-acl-adv-3000]rule deny ic	
[r6-acl-adv-3000]rule deny icmp so	
[r6-acl-adv-3000]rule deny icmp source 192.168.4.254 0.0.0.0 de	
[r6-acl-adv-3000]rule deny icmp source 192.168.4.254 0.0.0.0 destination 192.168
.2.254 0.0.0.0 ic	
[r6-acl-adv-3000]rule deny icmp source 192.168.4.254 0.0.0.0 destination 192.168
.2.254 0.0.0.0 icmp-type e	
[r6-acl-adv-3000]rule deny icmp source 192.168.4.254 0.0.0.0 destination 192.168
.2.254 0.0.0.0 icmp-type echo
[r6-acl-adv-3000]rule permit ip source any  destination any
Error: The rule already exists.
[r6-acl-adv-3000]qu
[r6]inter	
[r6]interface g0/0/1.2
[r6-GigabitEthernet0/0/1.2]tr	
[r6-GigabitEthernet0/0/1.2]tracert
[r6-GigabitEthernet0/0/1.2]traffic-filter in	
[r6-GigabitEthernet0/0/1.2]traffic-filter inbound ac	
[r6-GigabitEthernet0/0/1.2]traffic-filter inbound acl 3000

be6ca7228f954b149be008abc686ce8b.png

 6d817fd0c9e340d4ba6ddb9878a06034.png

 

 

  • 1
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 打赏
    打赏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

不会取名余

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付:¥1
获取中
扫码支付

您的余额不足,请更换扫码支付或充值

打赏作者

实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值