1.172.16.0.0/16 划分网络
子网掩码为24
划分网段为172.16.1.0 24 172.16.2.0 24 172.16.3.0 24 172.16.4.0 24
[Huawei]sy r1
[r1]inter
[r1]interface g0/0/0
[r1-GigabitEthernet0/0/0]ip ad
[r1-GigabitEthernet0/0/0]ip address 11.1.1.1 24
Nov 27 2022 13:23:17-08:00 r1 %%01IFNET/4/LINK_STATE(l)[2]:The line protocol IP
on the interface GigabitEthernet0/0/0 has entered the UP state.
[r1-GigabitEthernet0/0/0]qu
[r1]inter
[r1]interface g0/0/1
[r1-GigabitEthernet0/0/1]ip ad
[r1-GigabitEthernet0/0/1]ip address 10.1.1.1 24
Nov 27 2022 13:23:37-08:00 r1 %%01IFNET/4/LINK_STATE(l)[3]:The line protocol IP
on the interface GigabitEthernet0/0/1 has entered the UP state.
[r1-GigabitEthernet0/0/1]qu
[r1]inter
[r1]interface lo
[r1]interface LoopBack 0
[r1-LoopBack0]ip ad
[r1-LoopBack0]ip address 1.1.1.1 32
[r1-LoopBack0]qu
[r1]
[Huawei]sy r2
[r2]inter
[r2]interface g0/0/0
[r2-GigabitEthernet0/0/0]ip ad
[r2-GigabitEthernet0/0/0]ip address 10.1.1.2 24
[r2-GigabitEthernet0/0/0]
Nov 27 2022 13:24:53-08:00 r2 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
on the interface GigabitEthernet0/0/0 has entered the UP state.
[r2-GigabitEthernet0/0/0]qu
[r2]inter
[r2]interface g0/0/1
[r2-GigabitEthernet0/0/1]ip ad
[r2-GigabitEthernet0/0/1]ip address 172.16.1.1 24
Nov 27 2022 13:26:09-08:00 r2 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP
on the interface GigabitEthernet0/0/1 has entered the UP state.
[r2-GigabitEthernet0/0/1]qu
[r2]inter
[r2]interface lo
[r2]interface LoopBack 0
[r2-LoopBack0]ip ad
[r2-LoopBack0]ip address 2.2.2.2 32
[r2-LoopBack0]qu
[Huawei]sy r3
[r3]inter
[r3]interface g0/0/0
[r3-GigabitEthernet0/0/0]ip aad
[r3-GigabitEthernet0/0/0]ip ad
[r3-GigabitEthernet0/0/0]ip address 172.16.1.2 24
Nov 27 2022 13:27:33-08:00 r3 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
on the interface GigabitEthernet0/0/0 has entered the UP state.
[r3-GigabitEthernet0/0/0]qu
[r3]inter
[r3]interface g0/0/1
[r3-GigabitEthernet0/0/1]ip ad
[r3-GigabitEthernet0/0/1]ip address 172.16.2.1 24
Nov 27 2022 13:28:05-08:00 r3 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP
on the interface GigabitEthernet0/0/1 has entered the UP state.
[r3-GigabitEthernet0/0/1]qu
[r3]inter
[r3]interface lo
[r3]interface LoopBack 0
[r3-LoopBack0]ip ad
[r3-LoopBack0]ip address 3.3.3.3 32
[r3-LoopBack0]qu
[Huawei]sy r4
[r4]inter
[r4]interface g0/0/0
[r4-GigabitEthernet0/0/0]ip ad
[r4-GigabitEthernet0/0/0]ip address 172.16.2.2 24
Nov 27 2022 13:28:54-08:00 r4 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
on the interface GigabitEthernet0/0/0 has entered the UP state.
[r4-GigabitEthernet0/0/0]qu
[r4]inter
[r4]interface g0/0/1
[r4-GigabitEthernet0/0/1]ip ad
[r4-GigabitEthernet0/0/1]ip address 172.16.3.0 24
Error: The specified IP address is invalid.
[r4-GigabitEthernet0/0/1]ip address 172.16.3.1 24
[r4-GigabitEthernet0/0/1]
Nov 27 2022 13:29:25-08:00 r4 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP
on the interface GigabitEthernet0/0/1 has entered the UP state.
[r4-GigabitEthernet0/0/1]qu
[r4]in
[r4]info-center
[r4]interface
[r4]info-center
[r4]interface lo
[r4]interface LoopBack 0
[r4-LoopBack0]ip ad
[r4-LoopBack0]ip address 4.4.4.4 32
[r4-LoopBack0]qu
[Huawei]sy r5
[r5]inter
[r5]interface g0/0/0
[r5-GigabitEthernet0/0/0]ip ad
[r5-GigabitEthernet0/0/0]ip address 172.16.2.3 24
Nov 27 2022 13:30:21-08:00 r5 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
on the interface GigabitEthernet0/0/0 has entered the UP state.
[r5-GigabitEthernet0/0/0]qu
[r5]inter
[r5]interface g0/0/1
[r5-GigabitEthernet0/0/1]ip ad
[r5-GigabitEthernet0/0/1]ip address 172.16.4.1 24
Nov 27 2022 13:30:43-08:00 r5 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP
on the interface GigabitEthernet0/0/1 has entered the UP state.
[r5-GigabitEthernet0/0/1]qu
[r5]inter
[r5]interface lo
[r5]interface LoopBack 0
[r5-LoopBack0]ip ad
[r5-LoopBack0]ip address 5.5.5.5 32
[r5-LoopBack0]qu
[Huawei]sy r6
[r6]inter
[r6]interface g0/0/0
[r6-GigabitEthernet0/0/0]ip ad
[r6-GigabitEthernet0/0/0]ip address 172.16.4.2 24
[r6-GigabitEthernet0/0/0]
Nov 27 2022 13:35:01-08:00 r6 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
on the interface GigabitEthernet0/0/0 has entered the UP state.
[r6-GigabitEthernet0/0/0]qu
[r6]inter
[r6]interface lo
[r6]interface LoopBack 0
[r6-LoopBack0]ip ad
[r6-LoopBack0]ip address 6.6.6.6 32
[r6-LoopBack0]qu
[Huawei]sy r7
[r7]inter
[r7]interface g0/0/0
[r7-GigabitEthernet0/0/0]ip ad
[r7-GigabitEthernet0/0/0]ip address 172.16.3.2 24
Nov 27 2022 13:32:31-08:00 r7 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
on the interface GigabitEthernet0/0/0 has entered the UP state.
[r7-GigabitEthernet0/0/0]qu
[r7]inter
[r7]interface lo
[r7]interface LoopBack 0
[r7-LoopBack0]ip ad
[r7-LoopBack0]ip address 7.7.7.7 32
[r7-LoopBack0]qu
2.使用ospf协议合理规划区域保证更新安全
[r2]ospf 1
[r2-ospf-1]ro
[r2-ospf-1]route-tag
[r2-ospf-1]qu
[r2]os
[r2]ospf 1 ro
[r2]ospf 1 router-id 2.2.2.2
Info: The configuration succeeded. You need to restart the OSPF process to valid
ate the new router ID.
[r2-ospf-1]ar
[r2-ospf-1]area 1
[r2-ospf-1-area-0.0.0.1]net
[r2-ospf-1-area-0.0.0.1]network 172.16.1.1 0.0.0.0
[r2-ospf-1-area-0.0.0.1]
[r3]ospf 1 ro
[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1]ar
[r3-ospf-1]area 1
[r3-ospf-1-area-0.0.0.1]net
[r3-ospf-1-area-0.0.0.1]network 172.16.1.2 0.0.0.0
[r3-ospf-1-area-0.0.0.1]qu
[r3-ospf-1]qu
[r3]os
[r3]ospf 1 ro
[r3]ospf 1 router-id 3.3.3.3
[r3-ospf-1]ar
[r3-ospf-1]area 0
[r3-ospf-1-area-0.0.0.0]net
[r3-ospf-1-area-0.0.0.0]network 172.16.2.1 0.0.0.0
[r3-ospf-1-area-0.0.0.0]qu
[r3-ospf-1]qu
[r4]os
[r4]ospf 1 ro
[r4]ospf 1 router-id 4.4.4.4
[r4-ospf-1]ar
[r4-ospf-1]area 0
[r4-ospf-1-area-0.0.0.0]net
[r4-ospf-1-area-0.0.0.0]network 172.16.2.2 0.0.0.0
[r4-ospf-1-area-0.0.0.0]qu
[r4-ospf-1]ar
[r4-ospf-1]area 2
[r4-ospf-1-area-0.0.0.2]net
[r4-ospf-1-area-0.0.0.2]network 172.16.3.1 0.0.0.0
[r5]ospf 1 ro
[r5]ospf 1 router-id 5.5.5.5
[r5-ospf-1]ar
[r5-ospf-1]area 0
[r5-ospf-1-area-0.0.0.0]net
[r5-ospf-1-area-0.0.0.0]network 172.16.2.3 0.0.0.0
[r5-ospf-1-area-0.0.0.0]qu
r5-ospf-1]
[r5-ospf-1]ar
[r5-ospf-1]area 3
[r5-ospf-1-area-0.0.0.3]net
[r5-ospf-1-area-0.0.0.3]network 172.16.4.1 0.0.0.0
[r5-ospf-1-area-0.0.0.3]qu
r6]ospf 1 ro
[r6]ospf 1 router-id 6.6.6.6
[r6-ospf-1]ar
[r6-ospf-1]area 3
[r6-ospf-1-area-0.0.0.3]net
[r6-ospf-1-area-0.0.0.3]network 172.16.4.2 0.0.0.0
[r6-ospf-1-area-0.0.0.3]qu
[r7]ospf 1 ro
[r7]ospf 1 router-id 7.7.7.7
[r7-ospf-1]ar
[r7-ospf-1]area 2
[r7-ospf-1-area-0.0.0.2]net
[r7-ospf-1-area-0.0.0.2]network 172.16.3.2 0.0.0.0
[r7-ospf-1-area-0.0.0.2]qu
3.加快收敛速度
r2]interface g0/0/1
[r2-GigabitEthernet0/0/1]os
[r2-GigabitEthernet0/0/1]ospf ti
[r2-GigabitEthernet0/0/1]ospf timer he
[r2-GigabitEthernet0/0/1]ospf timer hello 5
[r2-GigabitEthernet0/0/1]os
[r2-GigabitEthernet0/0/1]ospf ti
[r2-GigabitEthernet0/0/1]ospf timer DE
[r2-GigabitEthernet0/0/1]ospf timer dead 20
[r3]interface g0/0/0
[r3-GigabitEthernet0/0/0]os
[r3-GigabitEthernet0/0/0]ospf ti
[r3-GigabitEthernet0/0/0]ospf timer he
[r3-GigabitEthernet0/0/0]ospf timer hello 5
[r3-GigabitEthernet0/0/0]os
[r3-GigabitEthernet0/0/0]ospf t
[r3-GigabitEthernet0/0/0]ospf timer he
[r3-GigabitEthernet0/0/0]ospf timer hello 20
[r3-GigabitEthernet0/0/0]qu
[r3]inter
[r3]interface g0/0/1
[r3-GigabitEthernet0/0/1]os
[r3-GigabitEthernet0/0/1]ospf ti
[r3-GigabitEthernet0/0/1]ospf timer he
[r3-GigabitEthernet0/0/1]ospf timer hello 5
[r3-GigabitEthernet0/0/1]os
[r3-GigabitEthernet0/0/1]ospf ti
[r3-GigabitEthernet0/0/1]ospf timer de
[r3-GigabitEthernet0/0/1]ospf timer dead 20
[r4]interface g0/0/0
[r4-GigabitEthernet0/0/0]os
[r4-GigabitEthernet0/0/0]ospf ti
[r4-GigabitEthernet0/0/0]ospf timer he
[r4-GigabitEthernet0/0/0]ospf timer hello 5
[r4-GigabitEthernet0/0/0]os
[r4-GigabitEthernet0/0/0]ospf ti
[r4-GigabitEthernet0/0/0]ospf ti
[r4-GigabitEthernet0/0/0]ospf timer de
[r4-GigabitEthernet0/0/0]ospf timer dead
[r4-GigabitEthernet0/0/0]ospf timer dead 20
[r4-GigabitEthernet0/0/0]qu
[r4]inter
[r4]interface g0/0/1
[r4-GigabitEthernet0/0/1]
[r4-GigabitEthernet0/0/1]os
[r4-GigabitEthernet0/0/1]ospfti
[r4-GigabitEthernet0/0/1]ospf ti
[r4-GigabitEthernet0/0/1]ospf timer he
[r4-GigabitEthernet0/0/1]ospf timer hello 5
[r4-GigabitEthernet0/0/1]os
[r4-GigabitEthernet0/0/1]ospf ti
[r4-GigabitEthernet0/0/1]ospf timer de
[r4-GigabitEthernet0/0/1]ospf timer dead 20
[r5]interface g0/0/0
[r5-GigabitEthernet0/0/0]os
[r5-GigabitEthernet0/0/0]ospf ti
[r5-GigabitEthernet0/0/0]ospf timer he
[r5-GigabitEthernet0/0/0]ospf timer hello 5
[r5-GigabitEthernet0/0/0]os
[r5-GigabitEthernet0/0/0]ospf timer
[r5-GigabitEthernet0/0/0]ospf timer de
[r5-GigabitEthernet0/0/0]ospf timer de
[r5-GigabitEthernet0/0/0]ospf timer dead 20
[r5-GigabitEthernet0/0/0]qu
[r5]inter
[r5]interface g0/0/1
[r5-GigabitEthernet0/0/1]os
[r5-GigabitEthernet0/0/1]ospf ti
[r5-GigabitEthernet0/0/1]ospf timer he
[r5-GigabitEthernet0/0/1]ospf timer hello 5
[r5-GigabitEthernet0/0/1]os
[r5-GigabitEthernet0/0/1]ospf ti
[r5-GigabitEthernet0/0/1]ospf timer de
[r5-GigabitEthernet0/0/1]ospf timer dead 20
[r6]interface g0/0/0
[r6-GigabitEthernet0/0/0]os
[r6-GigabitEthernet0/0/0]ospf ti
[r6-GigabitEthernet0/0/0]ospf timer he
[r6-GigabitEthernet0/0/0]ospf timer hello
[r6-GigabitEthernet0/0/0]ospf timer hello
[r6-GigabitEthernet0/0/0]ospf timer hello 5
[r6-GigabitEthernet0/0/0]os
[r6-GigabitEthernet0/0/0]ospf ti
[r6-GigabitEthernet0/0/0]ospf ti
[r6-GigabitEthernet0/0/0]ospf timer de
[r6-GigabitEthernet0/0/0]ospf timer dead
[r6-GigabitEthernet0/0/0]ospf timer dead
[r6-GigabitEthernet0/0/0]ospf timer dead 20
[r7]interface g0/0/0
[r7-GigabitEthernet0/0/0]os
[r7-GigabitEthernet0/0/0]ospf ti
[r7-GigabitEthernet0/0/0]ospf timer he
[r7-GigabitEthernet0/0/0]ospf timer hello 5
[r7-GigabitEthernet0/0/0]os
[r7-GigabitEthernet0/0/0]ospf ti
[r7-GigabitEthernet0/0/0]ospf timer de
[r7-GigabitEthernet0/0/0]ospf timer dead 20
4.r3为dr没有bdr
[r4-GigabitEthernet0/0/0]os
[r4-GigabitEthernet0/0/0]ospf pr
[r4-GigabitEthernet0/0/0]ospf dr
[r4-GigabitEthernet0/0/0]ospf dr-priority 0
<r4>re
<r4>reset os
<r4>reset ospf pr
<r4>reset ospf process
[r5-GigabitEthernet0/0/0]os
[r5-GigabitEthernet0/0/0]ospf pr
[r5-GigabitEthernet0/0/0]ospf dr
[r5-GigabitEthernet0/0/0]ospf dr-priority 0
<r5>reset os
<r5>reset ospf pr
<r5>reset ospf process
[r5]display ospf peer
OSPF Process 1 with Router ID 5.5.5.5
Neighbors
Area 0.0.0.0 interface 172.16.2.3(GigabitEthernet0/0/0)'s neighbors
Router ID: 3.3.3.3 Address: 172.16.2.1
State: Full Mode:Nbr is Slave Priority: 1
DR: 172.16.2.1 BDR: None MTU: 0
Dead timer due in 17 sec
Retrans timer interval: 0
Neighbor is up for 00:01:11
Authentication Sequence: [ 0 ]
Router ID: 4.4.4.4 Address: 172.16.2.2
State: 2-Way Mode:Nbr is Master Priority: 0
DR: 172.16.2.1 BDR: None MTU: 0
Dead timer due in 18 sec
Retrans timer interval: 0
Neighbor is up for 00:00:00
Authentication Sequence: [ 0 ]
5.pc2345自动获取ip
pc1为外网pc要求可以互相访问
6.r1为运营商只能配置ip地址
r2]ip ro
[r2]ip route
[r2]ip route-static 0.0.0.0 0 10.1.1.1
[r2]os
[r2]ospf 100
[r2-ospf-100]de
[r2-ospf-100]default-route-advertise
[r2-ospf-100]qu
8.pc4可以ping通r2但不能登录r2
r5]acl 3000
[r5-acl-adv-3000]ru
[r5-acl-adv-3000]rule de
[r5-acl-adv-3000]rule deny tcp
[r5-acl-adv-3000]rule deny tcp so
[r5-acl-adv-3000]rule deny tcp source 172.16.4.1 de
[r5-acl-adv-3000]rule deny tcp source 172.16.4.1 de
[r5-acl-adv-3000]rule deny tcp source 192.168.3.1 0.0.0.0 de
.1.1 0.0.0.0 de
[r5-acl-adv-3000]rule deny tcp source 172.16.4.2 0.0.0.0 destination 172.16.1.1
0.0.0.0 de
[r5-acl-adv-3000]rule deny tcp source 172.16.4.2 0.0.0.0 destination 172.16.1.1
0.0.0.0 destination-port eq 23
[r5-acl-adv-3000]ru
[r5-acl-adv-3000]rule pe
[r5-acl-adv-3000]rule permit ip
[r5-acl-adv-3000]rule permit ip so
[r5-acl-adv-3000]rule permit ip source an
[r5-acl-adv-3000]rule permit ip source any
[r5-acl-adv-3000]rule permit ip source any destination any
[r5-acl-adv-3000]qu
[r5]inter
[r5]interface g0/0/1
[r5-GigabitEthernet0/0/1]tr
[r5-GigabitEthernet0/0/1]tracert
[r5-GigabitEthernet0/0/1]traffic-filter in
[r5-GigabitEthernet0/0/1]traffic-filter inbound ac
[r5-GigabitEthernet0/0/1]traffic-filter inbound acl 3000
[r5-GigabitEthernet0/0/1]
9.pc3可以ping通pc5,pc5不能ping通pc3
[r6]acl 3000
[r6-acl-adv-3000]ro
[r6-acl-adv-3000]rule de
[r6-acl-adv-3000]rule deny ic
[r6-acl-adv-3000]rule deny icmp so
[r6-acl-adv-3000]rule deny icmp source 192.168.4.254 0.0.0.0 de
[r6-acl-adv-3000]rule deny icmp source 192.168.4.254 0.0.0.0 destination 192.168
.2.254 0.0.0.0 ic
[r6-acl-adv-3000]rule deny icmp source 192.168.4.254 0.0.0.0 destination 192.168
.2.254 0.0.0.0 icmp-type e
[r6-acl-adv-3000]rule deny icmp source 192.168.4.254 0.0.0.0 destination 192.168
.2.254 0.0.0.0 icmp-type echo
[r6-acl-adv-3000]rule permit ip source any destination any
Error: The rule already exists.
[r6-acl-adv-3000]qu
[r6]inter
[r6]interface g0/0/1.2
[r6-GigabitEthernet0/0/1.2]tr
[r6-GigabitEthernet0/0/1.2]tracert
[r6-GigabitEthernet0/0/1.2]traffic-filter in
[r6-GigabitEthernet0/0/1.2]traffic-filter inbound ac
[r6-GigabitEthernet0/0/1.2]traffic-filter inbound acl 3000